[Snort-devel] Dropping packets using snort

Devdutt Patnaik xendevid at ...2499...
Sun Mar 22 21:27:24 EDT 2009


Hi All,

I was developing a preprocessor plugin in snort and need to drop packets
based on the content.
I have a couple of basic questions :

1 > Does snort operate on a copy of the packet ?
2 > If yes,  does snort-inline work on actual packets ?
3 > Can I block certain packets using a mechanism in snort so that it does
not reach the application.

Thanks in advance.

-D
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20090322/73c28d32/attachment.html>


More information about the Snort-devel mailing list