[Snort-users] AIM decoding

Joe Lawson jlawson at ...1875...
Wed Sep 17 07:44:17 EDT 2003


Not really snort related but...

http://www.aimsniff.com/


-----Original Message-----
From: Erek Adams [mailto:erek at ...950...]
Sent: Wednesday, September 17, 2003 10:00 AM
To: JJ
Cc: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] AIM decoding


On Wed, 17 Sep 2003, JJ wrote:

> I'm working decoding all of the AIM messages my snort box captures.
>
> I can pull out the text using some pretty low-tech means, but I'd like
> to know if someone else has written an AIM decoder which will decode the
> data from CHAT AIM send message and CHAT AIM receive message alerts and
> be able to tell who said what, to whom, and when.
>
> Has anyone gotten code like this working yet?

Yep.  A few years ago.

> I hope I don't have to start sniffing through the Net::AIM module. . .

http://monkey.org/~dugsong/dsniff/

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20030917/13a74116/attachment.html>


More information about the Snort-users mailing list