Suricata fails to see SMB file
Suricata fails to alert on a smb signature related to a file extraction.
Investigating a bit the issue the "file_data" keyword does not match (PrefilterTxFiledata) because a file is never seen by Suricata.
Attaching pcap and signature.
No data to display