[Snort-users] Snort URL logging

Jens Krabbenhoeft tschenz-snort-users at ...7018...
Tue Jan 14 05:45:02 EST 2003


> Hello, can someone tell me how can i use snort to log all urls seen in the
> wire?

You probably don't want to use snort to do that. Searching the
snort-users archive[1] revealed
http://marc.theaimsgroup.com/?l=snort-users&m=104014154326341&w=2 which

# The dsniff set of tools contains a program called urlsnarf that pulls
# out HTTP requests in a style similar to the combined apache access
# logs.  I don't think it will read from capture files, though, so
# you'll have to have it running alongside snort.


[1] http://marc.theaimsgroup.com/?l=snort-users

More information about the Snort-users mailing list