Actions
Feature #4981
closedFeature #4174: tracking: app-layer frame inspection support
frames: add general <app_proto>.stream frames
Effort:
Difficulty:
Label:
Description
A special (built-in?) frame type for matching the entire stream. Would different from general stream matching in 2 ways:
- performance would be better due to how it would just be considered for the app_proto streams
- startswith/endswith would apply to start and end of stream instead of stream chunks
Actions