You can use Ethereal to decode it. One Ethereal option is to tell it to decode port y as protocol z. This allows one to decode a port as IM.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Sent: April 13, 2004 11:28 AM To: [EMAIL PROTECTED] Subject: [Full-Disclosure] Decode Messenger conversations from logs Any recommendations for a good IM conversation 'reconstructer' from Iris capture logs. Running Iris on a small network that uses Wingate to share the broadband connection. Unfortunately the built in email/msn etc filters are set to work on certain ports (I guess) and don't decode the traffic in a very human-eye friendly way. So can anybody suggest something that does it instead of Iris or something to run over the logs to get that output? Thanks in advance _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
