[Snort-users] Snort as URL logger ?

Andrew R. Baker andrewb at ...950...
Sat Jan 4 08:05:05 EST 2003

Uffe Jakobsen wrote:
> Hi snort-users at lists.sourceforge.net,
> Have anyone tried to use Snort as an URL logger ?
> What I want to do is to log every URL that our users visits (propably a lot
> of data) and we've deliberatly choosen NO to go through a proxy (Squid etc.)
> Is Snort the right tool for this kind of activity ?

I would recommend using urlsnarf from Dug Song's dsniff package.  It is 
designed to do exactly what you are asking for.  Snort would require 
some modifications to do this.


More information about the Snort-users mailing list