Snort mailing list archives

Re: readable sniffing


From: "Alex Butcher, ISC/ISYS" <Alex.Butcher () bristol ac uk>
Date: Tue, 15 Feb 2005 09:00:47 +0000



--On 15 February 2005 00:54 +0100 sascha pohflepp <psp () udk-berlin de> wrote:

for a project i need a way to sniff packages in a way that it outputs the
captured information in the most human-readable way possible. i.e.
stripping away all the technical overhead like IPs and timestamps and the
like. preferrably it should just display the HTML-content of a website
for example, or even better just the text without markup-information.

snort was recommended to me for this task (at least the first one). can
anyone help me in tweaking?

Instead, try taking a look at Ethereal's 'Analyze->Follow TCP Stream' function.

thanks a lot
sascha

Best Regards,
Alex.
--
Alex Butcher: Security & Integrity, Personal Computer Systems Group
Information Systems and Computing             GPG Key ID: F9B27DC9
GPG Fingerprint: D62A DD83 A0B8 D174 49C4 2849 832D 6C72 F9B2 7DC9




-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: