In 7, the rust based template parser is simply template.
# *** Add configuration here ***
+requires:
+ lt-version: 7
+
args:
- -k none
checks:
- filter:
+ lt-version: 7
count: 1
match:
dest_ip: 10.16.1.10
src_port: 58352
template.request: 12:Hello World!
template.response: 3:Bye
+- filter:
+ min-version: 7
+ count: 1
+ match:
+ dest_ip: 10.16.1.10
+ dest_port: 7000
+ event_type: template
+ pcap_cnt: 7
+ proto: TCP
+ src_ip: 10.16.1.11
+ src_port: 58352
+ template.request: Hello World!
+ template.response: Bye
- filter:
count: 1
match: