template: use the keyword for the tx buffer

Ticket: 3195
OISF · Oct 8, 2024 · 95fe543 · 95fe543
1 parent 3be0daf
commit 95fe543
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/tests/app-layer-template/suricata.yaml b/tests/app-layer-template/suricata.yaml
@@ -11,6 +11,9 @@ outputs:
 
 app-layer:
   protocols:
+    # TODO remove once this string is out of main7
+    template-rust:
+      enabled: yes
     template:
       enabled: yes
       detection-ports:

diff --git a/tests/app-layer-template/test.rules b/tests/app-layer-template/test.rules
@@ -1,2 +1,2 @@
-alert template any any -> any any (msg:"TEST"; content:"Hello"; flow:established,to_server; sid:1; rev:1;)
-alert template any any -> any any (msg:"TEST"; content:"Bye"; flow:established,to_client; sid:2; rev:1;)
+alert template any any -> any any (msg:"TEST"; template.buffer; content:"Hello"; flow:established,to_server; sid:1; rev:1;)
+alert template any any -> any any (msg:"TEST"; template.buffer; content:"Bye"; flow:established,to_client; sid:2; rev:1;)