[Oisf-users] [Question] About packet manipulate using suricata

Andreas Herz andi at geekosphere.org
Mon Feb 13 19:55:52 UTC 2017


On 12/02/17 at 22:27, djhong813 at gmail.com wrote:
> Also, I googled and confirmed that Suricata can manipulate packet if I want to. 

Can you be more verbose about that? In IPS mode you can react and
instead of accepting packets you can drop or reject them.

> So I have to send packet to another component after the firewall creating the output and before the packet sending to destination.
> But I have no idea where the packets could be manipulated and which source code could be modified in the Suricata opensource.
> So, could you guys tell me what source code have to modified?

Without more details it's hard to tell what you want to achieve exactly
and how you might succeed.

-- 
Andreas Herz



More information about the Oisf-users mailing list