[Oisf-users] Is suricata flowint a global variable?

[Victor Julien]

On 06/02/2015 10:12 AM, Yangbo Wu wrote:
> Hello, I want to use flowint to store a global variable. But the
> variable can't use in the rule which is detect another stream flow. It
> is so strange because flowint wiki page said it is a precursor to the
> Global Variables task and we can can compare data from packets in
> unrelated streams. I can't solve the problem, is there someone help me?

As the name implies, a "flow"int is stored per flow and can't be used to
cross flows.

We do have xbits in the new beta, but thats bits only no ints. Those can
be per host and per ip-pair.

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------