Snort mailing list archives
capture only http headers of payload
From: Miquel Tur <mtur () ce bdigital org>
Date: Tue, 11 Jun 2013 14:27:07 +0200
Hi, I'm using snort for a college proyect and I need to capture HTTP headers. I can capture all the package but I only need the headers of the payload (I want to discard the data) or at least to reduce the package to the size that I determine for not to collapse the server. I've been a long time looking for how to do, but I have not found a way. Any idea? Being all for now, I await a reply.
------------------------------------------------------------------------------ This SF.net email is sponsored by Windows: Build for Windows Store. http://p.sf.net/sfu/windows-dev2dev
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- capture only HTTP headers of payload Miquel Tur (Jun 19)
- Re: capture only HTTP headers of payload Bhagya Bantwal (Jun 25)
- <Possible follow-ups>
- capture only http headers of payload Miquel Tur (Jun 19)