[Snort-inline-users] Blocking Anomalous Events

[Josh B. <jos...@li...>]

Does Snort-Inline block on the anomalous activities it finds with the
decoding options, experimental tcp options, ip options, and ttcp alerts?

Will it actually block these packets or just alert on them like it does
with most of the preprocessors?  If it doesn't would it be difficult to
add?