[Snort-users] Snort as URL logger ?
Andrew R. Baker
andrewb at ...950...
Sat Jan 4 08:05:05 EST 2003
Uffe Jakobsen wrote:
> Hi snort-users at lists.sourceforge.net,
> Have anyone tried to use Snort as an URL logger ?
> What I want to do is to log every URL that our users visits (propably a lot
> of data) and we've deliberatly choosen NO to go through a proxy (Squid etc.)
> Is Snort the right tool for this kind of activity ?
I would recommend using urlsnarf from Dug Song's dsniff package. It is
designed to do exactly what you are asking for. Snort would require
some modifications to do this.
More information about the Snort-users