Snort mailing list archives

Re: Web Content Monitoring - 2nd post


From: "Ricardo Pires" <pires-ricardo () uol com br>
Date: Thu, 4 Sep 2003 13:22:42 -0300

Yes, you can make your own rules according to your needs, or instead you can
use dsniff to save all e-mails. Then you can use grep to find the string you
want.
If you find the string, you already have a copy of the e-mail for you to
view.

Ricardo Pires

----- Original Message ----- 
From: "Ravi" <ravivsn () roc co in>
To: "Deshwal Chand" <CDD () kampsax co in>
Cc: "Snort-Users (E-mail)" <snort-users () lists sourceforge net>
Sent: Thursday, September 04, 2003 9:05 AM
Subject: Re: [Snort-users] Web Content Monitoring - 2nd post


Hi chand,
Yes,you can go for snort.
Write your own rules according to the need and get alerts.
Regards,
Ravi

Deshwal Chand wrote:

HI
We are company working in the field of GIS, a very high security data
zone. We have signed the condentiality agreements with the clients.

We intend to monitor the web contents, specially the e-mails, which are
sent by them using Yahoo or Hotmail etc accounts. The intention is not
to snoop on the users.

I want to get alerts on specific keywords being used in the traffic
going out of the network.
Is it possible using snort.
BR
Chand


-- 


The views presented in this mail are completely mine. The company is not
responsible for whatsoever.
------------------------------------------------------------------------
Ravi Kumar CH
Rendezvous On Chip (i) Pvt Ltd
Hyderabad, India
Ph: +91-40-2335 1214 / 1175 / 1184

ROC home page <http://www.roc.co.in>





-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: