Hello,
I created a Lua script to get some information from packets and it defined flowvar like that:
“flowvars”:[{“Version”:“Q008”}]"
Is it possible to compare flowvar directly in the suricata rule?
Like that for example:
flowvar: “Version”, =, “Q008”;
Thank you in advance,
Regards