Hi -

I'm looking for either software (or a dirty hack) that will allow me to drop packets that meet very specific rules.

I know everyone is thinking "Snort" + snort-inline or something similar, but extreme simplicity and speed is what I need for my network.

I feel snort may be overkill when I expect to be using <10 signatures. It is research grade bandwidth on a critical link, so I assume a snort cluster would likely bottleneck my environment, and hopefully simpler something could operate without notice.

Kind of an odd question... I know...