[Oisf-users] [Question] About packet manipulate using suricata
Andreas Herz
andi at geekosphere.org
Mon Feb 13 19:55:52 UTC 2017
On 12/02/17 at 22:27, djhong813 at gmail.com wrote:
> Also, I googled and confirmed that Suricata can manipulate packet if I want to.
Can you be more verbose about that? In IPS mode you can react and
instead of accepting packets you can drop or reject them.
> So I have to send packet to another component after the firewall creating the output and before the packet sending to destination.
> But I have no idea where the packets could be manipulated and which source code could be modified in the Suricata opensource.
> So, could you guys tell me what source code have to modified?
Without more details it's hard to tell what you want to achieve exactly
and how you might succeed.
--
Andreas Herz
More information about the Oisf-users
mailing list