IPS mode for Napatech Card
Hi Team , Suricata only support napatech with IDS mode
and there is no other way around with napatech cards to make it run IPS mode
So I request you to add IPS functionality with napatech as napatech configuration in suricata.yaml allows inline option
in that way I can receive data from 1 port , drop alerts , and move data out from port 2.
Updated by Phil Young 10 months ago
- Status changed from New to Resolved
- Assignee changed from Phil Young to Chatak Kumar
This functionality is already part of the Napatech Capture Method; and has been for some time. Please see the section on "Inline Operation" in https://github.com/OISF/suricata/blob/master/doc/userguide/capture-hardware/napatech.rst. If you need further support please send an e-mail to firstname.lastname@example.org and someone will help you with the configuration.