Hello,
I'd like to have sfacctd provide a tcpdump-style output suitable for  
feeding into snort.

I've been doing this, but I'd like to replace sflowtool with sfacctd/ 
pmacctd.
% sflowtool -t | snort -Afull -r - -c snort.conf

tnx.
--joe


_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists

Reply via email to