Re: Snort as URL logger ?

["Andrew R. Baker" <andrewb () snort org>]

Uffe Jakobsen wrote:
> Hi snort-users () lists sourceforge net,
>
> Have anyone tried to use Snort as an URL logger ?
>
> What I want to do is to log every URL that our users visits (propably a lot
> of data) and we've deliberatly choosen NO to go through a proxy (Squid etc.)
>
> Is Snort the right tool for this kind of activity ?


I would recommend using urlsnarf from Dug Song's dsniff package.  It is 
designed to do exactly what you are asking for.  Snort would require 
some modifications to do this.

-A



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users