[Oisf-users] Feature Roadmap: Comparing fields in a pcap

[Matt Jonkman]

We're in the middle of rebuilding the roadmap based on progress, it'll
be up soon.

But we have a feature that'll likely get you what you're looking for.
Global Variables will allow you to capture bytes into a variable that
persists between streams, and you can then compare variables.

Not in there now, but very soon!

Matt


On 1/5/10 10:07 AM, Geoff Whittington wrote:
> Hello,
> 
> Is there a published roadmap regarding future features? I am looking
> forward to being able to compare two fields in network traffic; like a
> byte_test hybrid that can test two sets of bytes with greater than,
> less than, equal, etc.
> 
> Cheers,
>  - Geoff
> _______________________________________________
> Oisf-users mailing list
> Oisf-users at openinfosecfoundation.org
> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users

-- 

----------------------------------------------------
Matthew Jonkman
Emerging Threats
Open Information Security Foundation (OISF)
Phone 765-429-0398
Fax 312-264-0205
http://www.emergingthreats.net
http://www.openinfosecfoundation.org
----------------------------------------------------

PGP: http://www.jonkmans.com/mattjonkman.asc