[Snort-users] Squid to Snort? Decrypted HTTPS traffic

Felipe Arturo Polanco felipeapolanco at gmail.com
Mon Mar 11 16:16:12 EDT 2019


Hi,

Has anyone been able to redirect decrypted HTTPS traffic from squid to
snort for traffic analysis?

Squid provide ICAP format redirection but I haven't found any Snort
preprocessor for it.

Is it possible in Snort to analyze HTTPS at least?

Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20190311/3248bc50/attachment.html>


More information about the Snort-users mailing list