Suricata

Thank you for your reply.

Since you mentioned that suricata does not (yet) have a packet scrubbing feature, is there any short term plan to implement it?

There are no plans for it at this time. Perhaps you or someone else in the community can take on the effort.

I understand that suricata does not have the normalization feature.

Your advice is appreciated to the following problem

1) I have a suricata up and running with rules generating alerts.

2) "abnormal" TCP/IP traffic/packets was identified based on rules.

3) From what I do see as features on suricata is: drop (reject), pass, alert

4) GOAL: is to clear some fields on packets instead of dropping the whole packets/traffic

Question: 
 Is Suricata capable of 4)? if not what is your recommendation to reach this goal?

Thank you in advance

No, not at this time.