# How about the idea of implementing xint？

**URL:** <https://forum.suricata.io/t/how-about-the-idea-of-implementing-xint/1190>\
**Category:** Rules\
**Tags:** community, centos\
**Created:** [March 6, 2021, 7:04am UTC](https://forum.suricata.io/t/how-about-the-idea-of-implementing-xint/1190 "2021-03-06T07:04:04Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![kimo](https://avatars.discourse-cdn.com/v4/letter/k/848f3c/32.png) [@kimo](https://forum.suricata.io/u/kimo)\
**Post date:** [March 6, 2021, 7:04am UTC](https://forum.suricata.io/t/how-about-the-idea-of-implementing-xint/1190/1 "2021-03-06T07:04:04Z")

</div>

Xbits is a pretty useful keyword in signatures, especially in some cross-stream scenarios where we want to use rules to tag some sensitive behaviour. However, xbits can only be used to set/check tag between streams, just like flowbits.

According to the implementaion of **xbits and flowint** , maybe we can implement a new keyword named **xint** which could be used in stream crossed counting or detecting.

so how about the idea?