RE: filters

["Hutchinson, Andrew" <andrew.hutchinson () Vanderbilt Edu>]

If you install tcpdump, then type 'man tcpdump', it will give you a good
overview.  Also, if you buy Northcutt's book "Network Intrusion
Detection", it has a nice section reviewing bpf and showing how to do
some useful logical bitmasking operations to find certain traffic types.
 
HTH,
 
Andrew

Andrew Hutchinson - Network Security
Vanderbilt University Medical Center
(615) 936-2856


        -----Original Message-----
        From: Scotts Email [mailto:tech4life2 () comcast net] 
        Sent: Tuesday, July 29, 2003 12:02 PM
        To: snort-users () lists sourceforge net
        Subject: [Snort-users] filters
        
        
        anyone tell me where to find bpf filter options for windows and
linux ?
         
        i want to get the right ones, and know how to use them
properly...our class
         
        is starting ids soon using snort..
         
         
        thanks,
         
        scott