Snort mailing list archives
data_log inspector
From: Akhil Koul <akhil.koul8 () gmail com>
Date: Tue, 14 Jun 2016 22:42:46 +0530
Hello Can someone tell me how to run data_log inspector. I have already added data_log = {key = http_raw_uri} into the snort.lua file. When i run snort, all inspectors except data_log show up. Also, i wanted to capture HTTP URIs from data logger. How do I do that? I see that hi_main.cc publishes http_uri. I need to capture/publish all fields buffers[] array in http_inspect.cc file. Thanks AKhil
------------------------------------------------------------------------------ What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic patterns at an interface-level. Reveals which users, apps, and protocols are consuming the most bandwidth. Provides multi-vendor support for NetFlow, J-Flow, sFlow and other flows. Make informed decisions using capacity planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- data_log inspector Akhil Koul (Jun 14)
- Re: data_log inspector Russ (Jun 14)