Project

General

Profile

Actions

Feature #4547

open

pcrexform not support tcp and other protocol

Added by albert wang about 1 year ago. Updated 6 months ago.

Status:
New
Priority:
Normal
Assignee:
-
Target version:
Effort:
Difficulty:
Label:

Description

I want use keyword "pcrexform" to outputs the first captured expression.and use content to check. but alert "transforms must directly follow stickybuffers".

Actions #1

Updated by Victor Julien about 1 year ago

This works as expected. The app-layer buffers are exposed as sticky buffers and support transforms. The regular content inspecting packet/stream payloads don't support this yet.

Actions #2

Updated by Andreas Herz 6 months ago

  • Tracker changed from Support to Feature
  • Target version set to TBD
  • Affected Versions deleted (Support)
Actions

Also available in: Atom PDF