Snort mailing list archives

Re: help us help you


From: Brian <bmc () snort org>
Date: Tue, 2 Nov 2004 11:52:12 -0500

On Mon, Nov 01, 2004 at 05:30:09PM -0500, Brian wrote:
Are you in a sensitive environment and just can't get that packet
payload to me?  Well, I can still use your help.  Run the packet
payload for each alert through the attached perl script, and send me
the output.

If you are going to be running your output through my parser, please
use the new parser, which is attached to this email.

Brian

Attachment: parser.pl
Description:


Current thread: