Suricata PF_RING in IPS mode

I think NFQUEUE is they way to go, I’m not aware of ways to reinject things from the AF_PACKET bridge in a similar way.

1 Like