[Snort-users] APPLET catching

Derya Sezen funky at ...8796...
Tue Apr 29 16:30:03 EDT 2003


I wrote a sniffer using libpcap. I generated a web traffic og
games.yahoo.com which opens a java game applet. In the content of the
sniffer i wrote, i can see the APPLET tags , but when i try to run snort
in log mode, i cannot see these applet in the content of packets. Thats
because of "http_decode" feature?!?! If yes, how can i catch those
applet java traffic with Snort !?!

Derya Sezen <funky at ...8796...>

More information about the Snort-users mailing list