# Subject: Drop packet by signature event **URL:** \ **Category:** Zeek\ **Created:** [March 25, 2020, 4:26pm UTC](https://community.zeek.org/t/subject-drop-packet-by-signature-event/6059 "2020-03-25T16:26:31Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Vincenzo](https://avatars.discourse-cdn.com/v4/letter/v/e9bcb4/32.png) [@Vincenzo](https://community.zeek.org/u/Vincenzo)\ **Post date:** [March 25, 2020, 4:26pm UTC](https://community.zeek.org/t/subject-drop-packet-by-signature-event/6059/1 "2020-03-25T16:26:31Z")
I have a configuration of FreeBSD with Zeek, my goal is to analyze network traffic on one network interface and block (IPS) the packet to the other interface, if this falls within my list of signatures that I have defined in my signatures.sig. I have searched far and wide for a solution, but I have not come up with feasible solutions for this purpose (since Zeek was not born as IPS, as snort and suricata), do you have any advice? Zeek 3.0.3 FreeBSD 11 bro-netmap installed Thanks very much ---
**Author:** ![Aashish\_Sharma1](https://avatars.discourse-cdn.com/v4/letter/a/a88e57/32.png) [@Aashish\_Sharma1](https://community.zeek.org/u/Aashish_Sharma1)\ **Post date:** [March 25, 2020, 4:41pm UTC](https://community.zeek.org/t/subject-drop-packet-by-signature-event/6059/2 "2020-03-25T16:41:00Z")
> feasible solutions for this purpose (since Zeek was not born as IPS, as > snort and suricata), do you have any advice? Umm, zeek's been doing IPS before snort or surcata were born 😉 I am not sure of specifics on your end (ie how you want to implement it) but You should look at netcontrol-framework and ACLD ([Index of /downloads/acld](https://ee.lbl.gov/downloads/acld/)) in case you want to expand and work with cisco/juniper routers. Aashish ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\ **Post date:** [May 6, 2022, 3:47pm UTC](https://community.zeek.org/t/subject-drop-packet-by-signature-event/6059/3 "2022-05-06T15:47:09Z")