Snort mailing list archives

script to extract payload info from mysql snort table

From: "samwun" <samwun () hgcbroadband com>
Date: Sun, 19 Oct 2003 18:54:47 +0800

Dear all,
 
I've installed Snort 2.02, MySQL, PHP, ACID, ADODB in Redhat. 
Since Snort logs all IP data (including payload) to MySQL database
tables,
I am wondering if there is any script I can use to extract corresponding
payload data and print it on the screen?
 
Thanks
Sam

Current thread:

byte_test and Snortcenter John Hally (Oct 14)
- RE: byte_test and Snortcenter snort (Oct 16)
  - [Snort-Users] Patching Snort with SnortSAM Daniél Haslinger (Oct 19)
    - script to extract payload info from mysql snort table samwun (Oct 19)
    - error in running SnortSnarf samwun (Oct 19)
    - Re: [Snort-Users] Patching Snort with SnortSAM Frank Knobbe (Oct 19)
    - how to populate snort payload data to MySQL? samwun (Oct 22)
    - RE: how to populate snort payload data to MySQL? Jeff Dell (Oct 22)
    - RE: how to populate snort payload data to MySQL? samwun (Oct 22)
    - how to convert payload data from MySQL data table to tcpdump formated data? samwun (Oct 22)
    - Re: how to convert payload data from MySQL data table to tcpdump formated data? Erek Adams (Oct 22)
    - Re: how to convert payload data from MySQL data table to tcpdump formated data? Sam Wun (Oct 23)
    - Distributed tcpdump output log file from snort. sam (Oct 23)
    - Re: how to convert payload data from MySQL data table to tcpdump formated data? Martin Olsson (Oct 24)

(Thread continues...)