This is a program that will parse the snort messages from your alert log file and display them in a way that is easy to understand. This gives the option to just see the messages for the current day by default and allows you to view specific days or all days with command line argument

Download Snort Log Parser

Example output:

08/30 03:10:47  TCP  64.246.165.150:56040 -> 65.29.17.55:80       (http_inspect) NON-RFC HTTP DELIMITER    13   
08/30 07:11:27  TCP  65.29.17.55:1492     -> 64.49.216.105:80     WEB-CGI redirect access                  895  
08/30 07:16:18  TCP  65.29.17.55:1858     -> 63.165.133.10:80     WEB-CGI redirect access                  895  
08/30 07:29:41  TCP  65.29.17.55:2030     -> 64.233.179.104:80    WEB-IIS %2E-asp access                   972

Only registered users can write comments.
Please login or register.

Powered by AkoComment 1.0 beta 2!