Snort mailing list archives
Application layer only
From: "Warrick FitzGerald" <wfitzgerald () livetechnology com>
Date: Thu, 17 Jan 2002 18:32:13 -0500
Hi All, I am trying to log only HTTP headers, ie I don't care about the SYN ACK ... I only want the packets that contain HTTP headers from a certain IP. Does anyone have a clue how I would go about doing this, and if so do you know how I can log this using the XML module ? Much Appreciated Warrick _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort install Warrick FitzGerald (Jan 17)
- Re: Snort install Chris Green (Jan 17)
- Application layer only Warrick FitzGerald (Jan 17)
- <Possible follow-ups>
- RE: Snort install Austad, Jay (Jan 18)
- Snort Install Scott Taylor (Feb 04)
- Re: Snort install Chris Green (Jan 17)