[Oisf-users] Would it be possible to run a query per http request?

Eliezer Croitoru eliezer at ngtech.co.il
Fri Nov 25 12:35:18 UTC 2016


Hey,

I am working with proxies for quite some time and I was wondering if it
would be possible to use surricata the next way:
- Inspect http request
- Verify against a DB the request URL
- Deny or Allow the http request

I think that Surricata have an advantage over a proxy for plain http since
it can be less "invasive".
Would it be possible? If so what are the recommendations?

Thanks,
Eliezer

----
Eliezer Croitoru
Linux System Administrator
Mobile: +972-5-28704261
Email: eliezer at ngtech.co.il





More information about the Oisf-users mailing list