[Snort-users] Snort as URL logger ?

Andrew R. Baker andrewb at ...950...
Sat Jan 4 08:05:05 EST 2003


Uffe Jakobsen wrote:
> Hi snort-users at lists.sourceforge.net,
> 
> Have anyone tried to use Snort as an URL logger ?
> 
> What I want to do is to log every URL that our users visits (propably a lot
> of data) and we've deliberatly choosen NO to go through a proxy (Squid etc.)
> 
> Is Snort the right tool for this kind of activity ?


I would recommend using urlsnarf from Dug Song's dsniff package.  It is 
designed to do exactly what you are asking for.  Snort would require 
some modifications to do this.

-A





More information about the Snort-users mailing list