pcrexform not support tcp and other protocol
I want use keyword "pcrexform" to outputs the first captured expression.and use content to check. but alert "transforms must directly follow stickybuffers".
This works as expected. The app-layer buffers are exposed as sticky buffers and support transforms. The regular content inspecting packet/stream payloads don't support this yet.
- Tracker changed from Support to Feature
- Target version set to TBD
- Affected Versions deleted (
- Assignee set to Community Ticket
Also available in: Atom