Anatomy of Snort Sniffing and Packet Analysis
Hongyu Yang · Jisuanji gongcheng · 2005
At present, snort is an open source network intrusion detection system (NIDS) attracting most attentions. Packet sniffing is its most basic and most important part in the system. This paper presents the working model and operation procedure of the sniffer in snort system, analyzes implement methods of packet sniffer and packet analyzer.