Snort is a libpcap-based packet sniffer/logger. It reads and decodes packets from the link layer through the application layer, dumping the decoded packet data. It can log these packets in their decoded form to directories which are generated based upon the IP address of the remote computer. This allows it to be used as a sort of "poor man's intrusion detection system" if you specify what traffic you want to record and what to let pass.
28e69100ce5be350735a96efddaf403d7336f6d818674ecba066395a66a8b906