Just make sure you do not sniff the interface that you use for packet storage. Nothing like a positive feedback loop that can happen because of some crazy network configurations ;]
On Fri, Mar 8, 2019 at 11:31 AM Vern Paxson <v...@corelight.com> wrote: > > They would like to use a NAS (network attached storage) and have asked > > me to validate that it will work. > > Zeek will happily read pcaps from Unix files. Assuming that's the > interface > that the NAS provides, sure this will work. Maybe though I'm not > understanding > the question, as it seems quite straightforward. > > Vern > _______________________________________________ > zeek-dev mailing list > zeek-dev@zeek.org > http://mailman.icsi.berkeley.edu/mailman/listinfo/zeek-dev >
_______________________________________________ zeek-dev mailing list zeek-dev@zeek.org http://mailman.icsi.berkeley.edu/mailman/listinfo/zeek-dev
