snort is not showing traffic to destination only traffic from

[Thomas F. Blich]

I downloaded and installed libpcap 0.6 and snort 1.8.1 from the Public domain site. I can get the program to run, but I can only see traffic that is coming from the remote site, not traffic going to it. I've even tried the command using the dst net and I still get nothing. Is there a flag I need to give this, or can somebody recommend another tool to see traffic going outbound?

Command I am using:

/opt/snort/bin/snort -l /var/tmp -ilan1 net 165.151.100

[harry d brown jr]

Is there a router between you and the remote site? If so, you aren't going to see the traffic going into the remote server.

live free or die
harry

[S.K. Chan]

Try snort FAQ, maybe your answer can be found at
http://www.snort.org/docs/faq.html