[Snort-users] Dropping packets using snort

Devdutt Patnaik xendevid at ...11827...
Sun Mar 22 05:14:38 EDT 2009

Hi All,

I was developing a preprocessor plugin in snort and need to drop packets
based on the content.
I have a couple of basic questions :

1 > Does snort operate on a copy of the packet ?
2 > If yes,  does snort-inline work on actual packets ?
3 > Can I block certain packets using a mechanism in snort so that it does
not reach the application.

Thanks in advance.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20090322/29433c7a/attachment.html>

More information about the Snort-users mailing list