RE: AIM decoding

[Joe Lawson <jlawson () financeware com>]

Not really snort related but...

http://www.aimsniff.com/


-----Original Message-----
From: Erek Adams [mailto:erek () snort org]
Sent: Wednesday, September 17, 2003 10:00 AM
To: JJ
Cc: snort-users () lists sourceforge net
Subject: Re: [Snort-users] AIM decoding


On Wed, 17 Sep 2003, JJ wrote:

> I'm working decoding all of the AIM messages my snort box captures.
>
> I can pull out the text using some pretty low-tech means, but I'd like
> to know if someone else has written an AIM decoder which will decode the
> data from CHAT AIM send message and CHAT AIM receive message alerts and
> be able to tell who said what, to whom, and when.
>
> Has anyone gotten code like this working yet?

Yep.  A few years ago.

> I hope I don't have to start sniffing through the Net::AIM module. . .

http://monkey.org/~dugsong/dsniff/

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users