Project

General

Profile

Actions

Feature #1264

closed

Lua: access to TCP quad / Flow Tuple

Added by Paul Gofran about 8 years ago. Updated almost 8 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

This is a request to provide lua scripts access to the TCP quad. When extracting payloads (ex: needs["payload"]), Lua does not have access to the TCP/IP information at the same time.

Similar to features #1261, #1263

Actions #1

Updated by Peter Manev about 8 years ago

  • Tracker changed from Bug to Feature
Actions #2

Updated by Victor Julien about 8 years ago

In my dev-lua-output branch you can use either:

ipver, srcip, dstip, proto, sp, dp = SCFlowTuple()
ipver, srcip, dstip, proto, sp, dp = SCPacketTuple()

Depending on where the script is hooked in you can use one or the other currently.
Actions #3

Updated by Victor Julien about 8 years ago

  • Status changed from New to Closed
  • Assignee set to Victor Julien
  • Target version set to 2.1beta2
  • % Done changed from 0 to 100
Actions #4

Updated by Victor Julien almost 8 years ago

  • Subject changed from Request for Additional Lua Capabilities - TCP quad to Lua: access to TCP quad / Flow Tuple
Actions

Also available in: Atom PDF