This capability now exists in version 11.2.To enable it, you need to
tell the HTTPS parser which smtp ports to use when searching for the
STARTTLS command.To do this, navigate to
/decoder/parsers/config/parsers.options and add something like
It's no possible to delete existing meta keys. But you can configure the
Network browser so it doesn't create the ethernet source and dest meta
keys going forward. This is true of any meta key you don't find useful
for any parser.