[Snort-inline-users] stream4 reassembly and snort-inline

[William M. <Wil...@kc...>]

Regarding stream4 reassembly and snort_inline, Is the problem that we a=
re
taking traffic out of libipq i.e. iptables instead of libpcap, and tryi=
ng
to reassemble traffic that snort_inline does not understand?  I know th=
at
iptables is only meant to be a packet filter, but has anybody heard of
anything possibly in the patch-o-matic that will handle stream reassemb=
ly
before it gets to snort_inline?

Regards,

Will=