Home page logo

snort logo Snort mailing list archives

Re: Extracting ip address
From: waldo kitty <wkitty42 () windstream net>
Date: Wed, 17 Apr 2013 12:56:18 -0400

On 4/17/2013 05:22, Lloyd wrote:
open the log file in wireshark, you can see the ip address.

if the files in question are snort.log.xxxxxxxxxxxxxx type, then this would work 
since they are actually pcap files and not ascii text files as most log files are ;)

i don't find the original post here so i can go back to it but i have to wonder 
exactly what log files the OP is speaking of... there's also the default alert 
file which is plain ascii text and human readable as well as esaily parsed with 
perl and other text manipulating tools :)

On Wed, Apr 17, 2013 at 12:02 PM, Prathibha P G <prathibhapg () gmail com
<mailto:prathibhapg () gmail com>> wrote:

    How to extract source ip address and estination ip address from snort log
    files.kindly help me

NOTE: No off-list assistance is given without prior approval.
       Please keep mailing list traffic on the list unless
       private contact is specifically requested and granted.

Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

Please visit http://blog.snort.org to stay current on all the latest Snort news!

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]