[Snort-users] Mail from tcpdump packet logs
tmoore at ...10052...
Wed Sep 10 08:17:10 EDT 2003
Is there any way I can use Snort to grab the e-mail messages send and received out of a tcpdump packet log?
I've used mailsnarf from the Dsniff package to do this live on the wire, but I'm looking for a way to do this from a binary tcpdump log.
I saw in the Snort faq that there's a way to do this, but there weren't any instructions for doing this.
Thanks for any help you can provide.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: not available
More information about the Snort-users