[Snort-users] AIM decoding

Erek Adams erek at ...950...
Wed Sep 17 07:01:06 EDT 2003


On Wed, 17 Sep 2003, JJ wrote:

> I'm working decoding all of the AIM messages my snort box captures.
>
> I can pull out the text using some pretty low-tech means, but I'd like
> to know if someone else has written an AIM decoder which will decode the
> data from CHAT AIM send message and CHAT AIM receive message alerts and
> be able to tell who said what, to whom, and when.
>
> Has anyone gotten code like this working yet?

Yep.  A few years ago.

> I hope I don't have to start sniffing through the Net::AIM module. . .

http://monkey.org/~dugsong/dsniff/

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson




More information about the Snort-users mailing list