Re: option for urls_only

[Erek Adams <erek () theadamsfamily net>]

On Fri, 16 Aug 2002, Thorsten Weigl wrote:

> with "snort -vde" i get the hexcode and part of the url.
>
> A7 CD 39 D9 71 4F A5 82 D7 ED CA DF D0 73 DB AE  ..9.qO.......s..
> E3 87 29 72 6F 31 09 9B B5 85 C2 EF E9 25 32 89  ..)ro1.......%2.
> 39 DC 82 E0 9C BF 3D 2A 35 F0 10 F0 E9 B8 E0 A5  9.....=*5.......
>
> how can i get only the url part? without the hex

[erek@merf]/var/log/snort#snort -\?
Initializing Output Plugins!

-*> Snort! <*-
Version 1.9.0beta (Build 175)
By Martin Roesch (roesch () sourcefire com, www.snort.org)
USAGE: snort [-options] <filter options>
Options:

[...snip...]

        -C         Print out payloads with character data only (no hex)

[...snip...]

[erek@merf]/var/log/snort#man snort

[...snip...]

     -C   Print the character data from the packet  payload  only
          (no hex).

[...snip...]

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net



-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users