I am just getting started with learning and testing snort.I have some snort data in snort.u2.timestamp files. What is the best way to view / read these files? I have found some info via Google search but it discusses how to capture traffic using snort, parse it using barnyard2 and then load it into a mysql database. I can't find anything clear on how to read existing snort.u2 files. Also, I should mention that I have a barnyard2.waldo file along with the snort.u2.timestamp files. Not sure where this file comes in.Also, is it possible to view snort.u2 files on Windows? It would be convient, but not a big deal if it is not possible.
Read snort.u2 files
linux;snort