[Snort-users] AIM decoding
erek at ...950...
Wed Sep 17 07:01:06 EDT 2003
On Wed, 17 Sep 2003, JJ wrote:
> I'm working decoding all of the AIM messages my snort box captures.
> I can pull out the text using some pretty low-tech means, but I'd like
> to know if someone else has written an AIM decoder which will decode the
> data from CHAT AIM send message and CHAT AIM receive message alerts and
> be able to tell who said what, to whom, and when.
> Has anyone gotten code like this working yet?
Yep. A few years ago.
> I hope I don't have to start sniffing through the Net::AIM module. . .
"When things get weird, the weird turn pro." H.S. Thompson
More information about the Snort-users