Reading Strings in Packet

Now I have a task to do:

• I want to know how Snort Inline and HLBR block the outbound packets
• How they read the packets
• Do my proposal is better than the existing ones