Re: Download packet
"G Ramon Gomez" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <622FD37285F1584386F5F83D9D233C9C02070B80@SMF-ENTXM-001.sac.ragingwire.net> |
You already have packet payload in Prewikka, so I don't expect that this would be hard to implement. Still, the question would be, "who is gonna write the code?" It's not a widely-requested feature, so it probably wouldn't be on the hot list. Your best bet is to open a ticket on Trac asking for the feature to be added. Well, actually, your *best* bet is to write the code yourself, and submit it for inclusion. No one ever does that, though. :) - Ramon -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Konrad Kosmowski Sent: Tuesday, February 19, 2008 11:16 PM To: [email protected] Subject: [prelude-user] Download packet Is there any way to download the packet associated with alert? It would be a nice option to have in Prewikka so you can click a link and download associated packet in a format (libpcap) that you can then open in Wireshark on client. Some of comercial IPS do that (like Mc Afee Intrushield). _______________________________________________ Prelude-user site list [email protected] http://www.prelude-ids.org/mailman/listinfo/prelude-user _______________________________________________ Prelude-user site list [email protected] http://www.prelude-ids.org/mailman/listinfo/prelude-user