Project

General

Profile

Actions

Support #4547

open

pcrexform not support tcp and other protocol

Added by albert wang 3 months ago. Updated 3 months ago.

Status:
New
Priority:
Normal
Assignee:
-
Affected Versions:
Label:

Description

I want use keyword "pcrexform" to outputs the first captured expression.and use content to check. but alert "transforms must directly follow stickybuffers".

Actions #1

Updated by Victor Julien 3 months ago

This works as expected. The app-layer buffers are exposed as sticky buffers and support transforms. The regular content inspecting packet/stream payloads don't support this yet.

Actions

Also available in: Atom PDF