Actions
Feature #4547
openpcrexform not support tcp and other protocol
Effort:
Difficulty:
Label:
Description
I want use keyword "pcrexform" to outputs the first captured expression.and use content to check. but alert "transforms must directly follow stickybuffers".
Updated by Victor Julien over 3 years ago
This works as expected. The app-layer buffers are exposed as sticky buffers and support transforms. The regular content inspecting packet/stream payloads don't support this yet.
Updated by Andreas Herz almost 3 years ago
- Tracker changed from Support to Feature
- Target version set to TBD
- Affected Versions deleted (
Support)
Actions