[Snort-users] option for urls_only

Erek Adams erek at ...577...
Thu Aug 15 15:39:04 EDT 2002


On Fri, 16 Aug 2002, Thorsten Weigl wrote:

> with "snort -vde" i get the hexcode and part of the url.
>
> A7 CD 39 D9 71 4F A5 82 D7 ED CA DF D0 73 DB AE  ..9.qO.......s..
> E3 87 29 72 6F 31 09 9B B5 85 C2 EF E9 25 32 89  ..)ro1.......%2.
> 39 DC 82 E0 9C BF 3D 2A 35 F0 10 F0 E9 B8 E0 A5  9.....=*5.......
>
> how can i get only the url part? without the hex

[erek at ...3978...]/var/log/snort#snort -\?
Initializing Output Plugins!

-*> Snort! <*-
Version 1.9.0beta (Build 175)
By Martin Roesch (roesch at ...1935..., www.snort.org)
USAGE: snort [-options] <filter options>
Options:

[...snip...]

        -C         Print out payloads with character data only (no hex)

[...snip...]

[erek at ...3978...]/var/log/snort#man snort

[...snip...]

     -C   Print the character data from the packet  payload  only
          (no hex).

[...snip...]

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net





More information about the Snort-users mailing list