Re: Is there Deep Packet analyzing plugins for PF?

Denis Lapshin <[email protected]> Wed, 04 Mar 2015 22:41:57 +0300
Newsgroups gmane.os.openbsd.pf
Organization MindAll solutions
Message-ID <[email protected]>
Just have read about Snort and Suricata engines. The second one looks 
more productive in DPI task because of utilizing multi-thread algorithms.

Coult you explain a bit more about "divert" with Suricata to make an 
inline DPI engine.

Thanks

On 04.03.2015 20:06, sadegh solati wrote:
> hi,
> you can use divert with snort or suricata.
> you can make an inline IPS using them.
>
> On Wednesday, March 4, 2015, Denis Lapshin <[email protected] 
> <mailto:[email protected]>> wrote:
>
>     Hi there!
>
>     Interesting in how to make Deep Packet analyzing engine for my
>     OpenBSD box. I'm currently using PF to perform IP headers
>     manipulation. But sometimes I need analyze packets data while
>     packet traversal.
>
>     Please give some recommendations.
>
>     Thanks.
>
>     -- 
>     Denis
>

-- 
Denis