snort-inline-users

[Snort-inline-users] modify packets

[Marco F. <m.f...@gm...>]

hi,
I'm working with snort_inline version 2.3.0-RC1, and I would like to know
how can I write a preprocessor to modify the packets. At least I would like
to know if there is some tutorial or something similar to learn how to
modify packets.
Regards
Marco

Re: [Snort-inline-users] modify packets

[Will M. <wil...@gm...>]

You can use the replace keyword to replace content matches.  What
exactly are you trying to accomplish?

Regards,

Will

On 4/19/06, Marco Falomi <m.f...@gm...> wrote:
> hi,
>  I'm working with snort_inline version 2.3.0-RC1, and I would like to kno=
w
> how can I write a preprocessor to modify the packets. At least I would li=
ke
> to know if there is some tutorial or something similar to learn how to
> modify packets.
>  Regards
>  Marco
>