<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Dear All,<div> We are using pf_ring now to capture packets. IT works well and its data structure allow us to be to get till level 3 protocol. We need is that level 4 and level protocol, url if exist and icmp and arp packets break down. We check that suricata have all this done but how does it get the packet from PF_RING and does the dissection. We just need some part of the dissection from suricata. Any help on this ?</div> </div></body>
</html>