Actions
Feature #5639
closed
EL
EL
datasets: allow matching on extracted domain
Feature #5639:
datasets: allow matching on extracted domain
Effort:
Difficulty:
Label:
Description
When matching on tls.sni or http.host, it is convenient to match on the domain name inside the value instead of matching on the full value. If endswith can be used for one domain in one signature using dataset would be more useful.
Actions