Thanks very much for your reply. Yes but rather than direct to Snort or other Network Analyser I want to direct to a package called pyMVPA. I could capture the traffic using Snort, send to a mySQL database, complete any processing there and hook up pyMVPA to the database, but it would appear to add a lot of latency compared to getting the traffic directly into the application. Whilst I'm OK on IP (routing/switching etc) I've managed to spend 10 years in IT without having to programme or do much in the way of Linux, so I'm unsure what can/cannot be done.
Doug
|