Snort mailing list archives
RE: Snort URL logging
From: "Rich Stryker" <rstryker () virtuallearning net>
Date: Tue, 14 Jan 2003 11:59:42 -0500
Does URLSnarf work with W2K machines? Rich -----Original Message----- From: Erek Adams [mailto:erek () snort org] Sent: Tuesday, January 14, 2003 9:30 AM To: ALMEIDA Antonio Jose Cc: 'snort-users () lists sourceforge net' Subject: RE: [Snort-users] Snort URL logging On Tue, 14 Jan 2003, ALMEIDA Antonio Jose wrote:
But with urlsnarf i can't filter the source ip, and i really need that. It's impossible to do this with Snort?
Impossible? No. Waste of time? Yes. Use Snort or Tcpdump to snag all traffic, and use a BPF filter to exclude what you want. Then replay that file into urlsnarf. And just a handy little tip: Never ask your boss why he was surfing http://www.flashyourrack.com/ . That would be a careerlimiting move. ;-) ----- Erek Adams "When things get weird, the wierd turn pro." H.S. Thompson ------------------------------------------------------- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort URL logging ALMEIDA Antonio Jose (Jan 14)
- Re: Snort URL logging Jens Krabbenhoeft (Jan 14)
- <Possible follow-ups>
- RE: Snort URL logging ALMEIDA Antonio Jose (Jan 14)
- RE: Snort URL logging Erek Adams (Jan 14)
- Re: Snort URL logging Jens Krabbenhoeft (Jan 14)
- RE: Snort URL logging Rich Stryker (Jan 14)
- RE: Snort URL logging Erek Adams (Jan 14)
- RE: Snort URL logging L. Christopher Luther (Jan 14)
- RE: Snort URL logging ALMEIDA Antonio Jose (Jan 14)
- RE: Snort URL logging Rich Stryker (Jan 15)
- RE: Snort URL logging Erek Adams (Jan 15)