This parameter is optional and allows to apply the signature to certain traffic flows. It allows to create signatures that will analyze traffic from client, from server or in both directions.
.flow=<MODE>;
where <MODE> can take following values:
|
Name |
Description |
|---|---|
|
from_client |
Analyze traffic from client. |
|
from_server |
Analyze traffic from server. |
|
bi_directional |
Analyze traffic in both directions. |