Project

General

Profile

Actions

Feature #4547

open

pcrexform not support tcp and other protocol

Added by albert wang over 3 years ago. Updated over 1 year ago.

Status:
New
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:

Description

I want use keyword "pcrexform" to outputs the first captured expression.and use content to check. but alert "transforms must directly follow stickybuffers".

Actions #1

Updated by Victor Julien over 3 years ago

This works as expected. The app-layer buffers are exposed as sticky buffers and support transforms. The regular content inspecting packet/stream payloads don't support this yet.

Actions #2

Updated by Andreas Herz over 2 years ago

  • Tracker changed from Support to Feature
  • Target version set to TBD
  • Affected Versions deleted (Support)
Actions #3

Updated by Philippe Antoine over 1 year ago

  • Assignee set to Community Ticket
Actions

Also available in: Atom PDF