POP is an POP3 decoder for user applications. Given a data buffer, POP will decode the buffer and find POP3 commands and responses. It will also mark the command, data header data body sections and extract the POP3 attachments and decode it appropriately.
POP will handle stateful processing. It saves state between individual packets. However maintaining correct state is dependent on the resassembly of the server side of the stream (ie, a loss of coherent stream data results in a loss of state).
Stream5 should be turned on for POP. Please ensure that the POP ports are added to the stream5 ports for proper reassembly.
The POP preprocessor uses GID 142 to register events.