Snort mailing list archives
Re: option for urls_only
From: Erek Adams <erek () theadamsfamily net>
Date: Thu, 15 Aug 2002 15:38:47 -0700 (PDT)
On Fri, 16 Aug 2002, Thorsten Weigl wrote:
with "snort -vde" i get the hexcode and part of the url. A7 CD 39 D9 71 4F A5 82 D7 ED CA DF D0 73 DB AE ..9.qO.......s.. E3 87 29 72 6F 31 09 9B B5 85 C2 EF E9 25 32 89 ..)ro1.......%2. 39 DC 82 E0 9C BF 3D 2A 35 F0 10 F0 E9 B8 E0 A5 9.....=*5....... how can i get only the url part? without the hex
[erek@merf]/var/log/snort#snort -\? Initializing Output Plugins! -*> Snort! <*- Version 1.9.0beta (Build 175) By Martin Roesch (roesch () sourcefire com, www.snort.org) USAGE: snort [-options] <filter options> Options: [...snip...] -C Print out payloads with character data only (no hex) [...snip...] [erek@merf]/var/log/snort#man snort [...snip...] -C Print the character data from the packet payload only (no hex). [...snip...] ----- Erek Adams Nifty-Type-Guy TheAdamsFamily.Net ------------------------------------------------------- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- option for urls_only Thorsten Weigl (Aug 15)
- Re: option for urls_only Erek Adams (Aug 15)