Actions
Feature #2914
closedFeature #2283: turn content modifiers into 'sticky buffers'
modernize tls sticky buffers
Effort:
Difficulty:
Label:
Description
For all the current tls sticky buffers:
1. check if mpm and content inspect v2 apis are used
2. set SIGMATCH_INFO_STICKY_BUFFER flag (see src/detect-http-client-body.c)
3. register tls.<buffer name>, set old name as alias.
For older tls.* keywords set 'alternative'. Again see src/detect-http-client-body.c.
Actions