Snort
[Top] [All Lists]

Re: [Snort-users] Log HTTP(S) URLs

To: "Manu" <manu@yms.ath.cx>, "Snort Users" <snort-users@lists.sourceforge.net>
Subject: Re: [Snort-users] Log HTTP(S) URLs
From: "Petersen, Mark" <MPetersen@gs1us.org>
Date: Thu, 15 Mar 2007 14:14:40 -0500
Delivered-to: sp-com-lists@consult.net
Delivered-to: snort-list@securepoint.com
In-reply-to: <4f1ffe79a4490d5ba22a615d42256294@localhost>
List-archive: <http://sourceforge.net/mailarchive/forum.php?forum=snort-users>
List-help: <mailto:snort-users-request@lists.sourceforge.net?subject=help>
List-id: "Snort users talk about... Snort!" <snort-users.lists.sourceforge.net>
List-post: <mailto:snort-users@lists.sourceforge.net>
List-subscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=subscribe>
List-unsubscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=unsubscribe>
References: <200703151129.26744.patrik.israelsson@sentor.se> <4f1ffe79a4490d5ba22a615d42256294@localhost>
Sender: snort-users-bounces@lists.sourceforge.net
Thread-index: AcdnAgBvNDaBMPFVRSG3jwklAHs0BQAM5Emg
Thread-topic: [Snort-users] Log HTTP(S) URLs
This is a little off topic, but if you really want to do this you can
use an SSL accelerator and terminate the SSL session there.  Then the
request is sent plain text to the webserver(s), offloading SSL overhead
in the process.  I believe there are l

Internet -- SSL Accelerator -(network tap)- Web Server(s)

You can use apache to handle this, look at dedicated hardware, or come
up with your own solution.

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

<Prev in Thread] Current Thread [Next in Thread>