[Snort-inline-users] snort inline replace length

[Scott M. <mil...@ch...>]

Hi
I was wondering if it was at all possible to code the ability to have  
a different length content when using replace, possibly by having  
snort look at the size of the replace string and then modify the  
packet size by changing the TCP length values?? Assuming that the  
current reason it doesn't work is because the TCP length wouldn't  
match...

scott