Snort mailing list archives
Re: Capture Email Content / Website Activity
From: G Ramon Gomez <gene () gomezbrothers com>
Date: Sun, 27 Nov 2005 14:29:40 -0800
Yes. Use iptables to create a bridge and sniff on the virtual bridge interface. Given what you're trying to accomplish, you might redirect outgoing port 80 requests to a Squid instance running on the bridge, and thereby put a proxy in place that will keep track of web activity for you.
- Ramon stuff () trackingsolutions ca wrote:
Is there then a way to create a snort box the sits between the router and the modem?
------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Capture Email Content / Website Activity stuff (Nov 27)
- Re: Capture Email Content / Website Activity barryab63-ia (Nov 27)
- Re: Capture Email Content / Website Activity stuff (Nov 27)
- Re: Capture Email Content / Website Activity Alex Butcher, ISC/ISYS (Nov 28)
- <Possible follow-ups>
- Re: Capture Email Content / Website Activity stuff (Nov 27)
- Re: Capture Email Content / Website Activity G Ramon Gomez (Nov 27)
- Re: Capture Email Content / Website Activity stuff (Nov 27)
- Re: Capture Email Content / Website Activity G Ramon Gomez (Nov 27)
- Re: Capture Email Content / Website Activity stuff (Nov 27)
- Re: Capture Email Content / Website Activity G Ramon Gomez (Nov 27)
- Re: Capture Email Content / Website Activity stuff (Nov 27)
- Re: Capture Email Content / Website Activity barryab63-ia (Nov 28)
- Re: Capture Email Content / Website Activity G Ramon Gomez (Nov 27)
- Re: Capture Email Content / Website Activity barryab63-ia (Nov 27)