Alproto_ts and alproto_tc from SCFlowAppLayerProto

Help
1

Hi,

alproto, alproto_ts, alproto_tc, alproto_orig, alproto_expect = SCFlowAppLayerProto()

Documentation does not describe what is the meaning of alproto_ts, alproto_tc. By experimentation I figured out that those variables can take values “tls”, but in what cases do they get those values ? Can anyone describe what is the meaning of those two variables and when they are set to “tls” ?

2

I agree that the documentation is not very clear about that. So what I would read from a quick grep in the source tree is that the _ts suffix means to server and _tc to client.

1 Like