[Snort-users] How can I view the packet payload if the packet is SMTP

Erek Adams erek at ...577...
Thu Dec 12 14:05:03 EST 2002


On Tue, 10 Dec 2002, Atul Shrivastava wrote:

> I want to know that how can I view the captured packet payload if the
> packed is SMTP. Actually I have made a rule for Conternt Inspection for
> SMTP for some specific word, the sensor is also getting alerts but when
> I want to see the mail which it has captured then it shows a very hard
> to read mail. So I want a frontend which will act such that I can be
> able to read the packed payload according to the application in which
> the packet is made by the source station and I can also view the
> attachments if the Viewing station is having that required software to
> view that attachment. Can anyone help me in this regard.

[...snip...]

mailsnarf [0]

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net


[0]	http://monkey.org/~dugsong/dsniff/




More information about the Snort-users mailing list