Snort mailing list archives

Re: Is it possible to extract URIs and store in a file?


From: waldo kitty <wkitty42 () windstream net>
Date: Mon, 23 Mar 2015 17:45:36 -0400

On 3/22/2015 7:20 AM, Rishabh Shah wrote:
Hi Snort-Experts,

I am looking for an efficient way to extract the URIs from all HTTP GET requests
and store it in a file. The only possible way that I could think of is to
generate an alert for all HTTP traffic and read the URI from snort.alert file,
which would be highly resource intensive.
Any help would be highly appreciated.

in one word? proxy...

to elaborate, a web proxy generally provides the urls for the traffic is 
processes...

FWIW: tools like snort are for Intrusion Detection and Prevention... not for 
jobs like this except possible in very extreme circumstances...

-- 
  NOTE: No off-list assistance is given without prior approval.
        Please *keep mailing list traffic on the list* unless
        private contact is specifically requested and granted.

---
This email has been checked for viruses by Avast antivirus software.
http://www.avast.com


------------------------------------------------------------------------------
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the 
conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: