<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px;"><div><font face="Arial">Hi,</font></div><div><font face="Arial"><br></font></div><div><div style="font-size: medium;"><font face="Arial">I have few more questions about Suricata:</font></div><div style="font-size: medium;"><font face="Arial"><br></font></div><div style="font-size: medium;"><font face="Arial">1. I want to know is there a way to use api to update/modify </font><span style="font-family: Arial;">suricata.yaml file? Or Is there a </span><span style="font-family: Arial;">way to modify the yaml file using GUI?</span></div><div style="font-size: medium;"><font face="Arial">2. Can I use same suricata instance to do both IDS (for L3,4) and IPS (</font><span style="font-family: Arial;">for L3,L4,L7)?</span></div><div style="font-size: medium;"><font face="Arial">3. Which is better NFQ or AF_Packet?</font></div><div style="font-size: medium;"><font face="Arial">4. If I use NFQ, how should I configure the iptables rules to forward </font><span style="font-family: Arial;">the packets to Suricata IPS?</span></div></div><div style="font-size: medium;"><span style="font-family: Arial;"><br></span></div><div style="font-size: medium;"><span style="font-family: Arial;">Thanks</span></div><div style="font-size: medium;"><span style="font-family: Arial;">Samiksha</span></div><div style="font-size: medium;"><span style="font-family: Arial;"><br></span></div><br></body></html>