[Oisf-devel] Suricata FN on http reply with file_data.

[Victor Julien]

On 06/29/2012 12:25 AM, rmkml wrote:
> Hi Victor,
> 
> Yes Im understand, for memory/performance reason,
> but for a only content with distance (after file_data): why not simply
> flag like flowbits on this "special" case?

What do you mean? Don't understand how "flag like flowbits" would be
related.

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------