Xbits is a pretty useful keyword in signatures, especially in some cross-stream scenarios where we want to use rules to tag some sensitive behaviour. However, xbits can only be used to set/check tag between streams, just like flowbits.
According to the implementaion of xbits and flowint, maybe we can implement a new keyword named xint which could be used in stream crossed counting or detecting.
so how about the idea?