Re: [Snort-inline-users] Query

[Nick R. <ni...@ro...>]

> hello ,
>   I am doing a small project in networking . I want to
> compress packets at server side and then send it to
> the receiver where it will be decompressed.My problem
> is where to capture packets and modify it.Snort helps
> in capturing packets but does it support any feature
> that allows me to change contents of packets.
>
> I am really stuck up at this point .Any help will be
> appreciated.
>

  Snort_inline is not built for this type of functionality.  Even if you
did add a compression plugin, you would be disappointed in the speed due
to the overhead.  You should be using client-server model software for
something like this.  I would suggest:

  - Build a kernel module (like Netgraph)
  - Modify a tunnelling technology like GRE/IPIP
  - Look for existing apps that already do this (search google).

FWIW,

Nick Rogness <ni...@ro...>