Snort mailing list archives

Can I change the destination MAC address of packets using Snort?


From: Junzhi Gong <jug257 () g harvard edu>
Date: Thu, 13 Dec 2018 12:06:08 -0500

Hi all,

I want to make Snort work in an NFV chain, and other network functions are DPDK applications. I bind snort to 2 NICs 
(one is the input NIC, and one is the output NIC) using netmap. The destination MAC address is the input NIC, and snort 
will not change the destination address after processing the packet. Therefore, I cannot make the packet forwarded to a 
target DPDK network function (which binds another NIC with a different MAC address).

Is it a possible way to change the destination MAC address of packets after snort sending out the packet, so I can make 
the packet forwarded to the target DPDK network function. 

Thanks!

Best,
Junzhi
_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette


Current thread: