After Gibson, Brian <gbrits@techconcepts.co.za> explained his requirement for capturing and storing AOL Instant Messages, Mike Forrester <[EMAIL PROTECTED]> suggested:
You could always capture the packets via ethereal with a filter. It supposedly can parse the AIM protocol and you can just log the output. It'd require a little scripting, but should be fairly painless.
Mike
BTW - the registry also has some info on who the person has talked to, but not what they said.
I've heard of US sites (with similar regulatory requirements for a total capture) which use NFR and a N-code filter to pull out, label, and log IM content. (See: <www.nfr.com>)
You might want to post a query to the NFR-user's mailing list at: <[EMAIL PROTECTED]>.
Surete,
(PS. I do some consulting for NFR, and so have a bias -- but I presume most IDS could do this.)
