Hello,

I've recently run into the following issue:

Suppose the match pattern is "^abcdef" and I'm using streaming mode.

If I call hs_scan_stream with "abc", I get HS_SUCCESS but no callback.  This is what I expect.

However, if I call with "xyz", I still get HS_SUCCESS with no callback.  This is a little confusing because I would expect it to (somehow) tell me that I haven't matched and never will.

Is there any way to know that I can't possibly match?  If not through a return code then maybe by peeking at some internal state?

That is, is there a way to differentiate between no match and no match *yet*?

Thanks for your help.

--
ERIC RONGO
Sr. Software Engineer | Platform & Framework

ericr@extrahop.com