Unfortunately, the network industry didn't fully comply with the OSI model, and the TCP/IP protocol suite was no exception. By strictly adhering to the OSI model, different network vendors could write code that would interoperate with other competing network vendors.
The Open Systems Interconnection (OSI) model was originally designed to be a standard for developing network communication protocol suites. It's important, as we will be referencing them both throughout this chapter. For now, let's take quick refresher on the OSI model and the TCP/IP protocol suite. We discuss promiscuous mode and the libpcap library later in the “Packet Sniffing” section. Then grabbing the packets from the network card using the libpcap library. Setting the network card into promiscuous mode.
Snort needs a way to capture network traffic, and does so through two mechanisms: ▪
0 kommentar(er)
