Snort mailing list archives
Re: extracting urls from the alerts
From: Shane Williams <shanew () shanew net>
Date: Tue, 17 Dec 2002 09:52:43 -0600 (CST)
The dsniff set of tools contains a program called urlsnarf that pulls out HTTP requests in a style similar to the combined apache access logs. I don't think it will read from capture files, though, so you'll have to have it running alongside snort. On Sat, 14 Dec 2002, Mahdi Kefaiati wrote:
In the Name of the Dearest Hi there I wonder how can I extract URL's from alerts; special intrest is urls which triggered porn rules. I want to have the list in a readable format, i.e. a text file which is the list of the noted URL's. regards Mahdi Kefayati
-- Public key #7BBC68D9 at | Shane Williams http://pgp.mit.edu/ | Systems Administrator UT-GSLIS =----------------------------------+------------------------------- All syllogisms contain three lines | shanew () gslis utexas edu Therefore this is not a syllogism | www.gslis.utexas.edu/~shanew ------------------------------------------------------- This sf.net email is sponsored by: With Great Power, Comes Great Responsibility Learn to use your power at OSDN's High Performance Computing Channel http://hpc.devchannel.org/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- extracting urls from the alerts Mahdi Kefaiati (Dec 17)
- Re: extracting urls from the alerts Shane Williams (Dec 17)
- Re: extracting urls from the alerts twig les (Dec 17)
- Re: extracting urls from the alerts J. Craig Woods (Dec 17)
- Re: extracting urls from the alerts Gene (Dec 17)
- Re: extracting urls from the alerts twig les (Dec 17)
- Re: extracting urls from the alerts Shane Williams (Dec 17)