Project

General

Profile

Actions

Feature #4981

closed

Feature #4174: tracking: app-layer frame inspection support

frames: add general <app_proto>.stream frames

Added by Victor Julien about 2 years ago. Updated about 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

A special (built-in?) frame type for matching the entire stream. Would different from general stream matching in 2 ways:

  • performance would be better due to how it would just be considered for the app_proto streams
  • startswith/endswith would apply to start and end of stream instead of stream chunks
Actions

Also available in: Atom PDF