Project

General

Profile

Actions
Copy link

Feature #2450

closed

lua: scripts access to calling rule informations

Added by Anonymous about 6 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Benjamin Wilkins
Target version:
7.0.0-beta1
Effort:
low
Difficulty:
low
Label:
Beginner

Description

Hi,
I'm looking for a way to to identify the rule triggered in the lua script called.
That should be useful when several rules are calling the same lua script which have a slightly different behaviour depending on the rule.

All the functions that return informations about the rule (SCRuleIds, SCRuleMsg and SCRuleClass) are not working with "match" lua scripts (reserved for "logging" lua scripts ?)

I also tried to use the ScFlowintGet and ScFlowvarGet functions.
The first one is not useful there because flowints are set in last, so after the call to the lua script.
The second one seems to not work. Bug #2094 is still open and I was not able to get a "not nil" result by myself.

Thank you

Actions
Copy link
 #1

Updated by Andreas Herz about 6 years ago

  • Assignee set to OISF Dev
  • Target version set to TBD
Actions
Copy link
 #2

Updated by Victor Julien almost 6 years ago

  • Assignee changed from OISF Dev to Anonymous
  • Effort set to low
  • Difficulty set to low
Actions
Copy link
 #3

Updated by Andreas Herz about 5 years ago

  • Assignee set to Community Ticket
Actions
Copy link
 #4

Updated by Victor Julien over 4 years ago

  • Label Beginner added
Actions
Copy link
 #5

Updated by Benjamin Wilkins over 2 years ago

I've started work on this ticket(https://github.com/OISF/suricata/pull/6520)and would like to claim it (but can't since I don't have the developer role)

Actions
Copy link
 #6

Updated by Victor Julien over 2 years ago

  • Status changed from New to Assigned
  • Assignee changed from Community Ticket to Benjamin Wilkins
  • Target version changed from TBD to 7.0.0-beta1
Actions
Copy link
 #7

Updated by Victor Julien over 2 years ago

  • Subject changed from lua scripts access to calling rule informations to lua: scripts access to calling rule informations
  • Status changed from Assigned to Closed
Actions
Copy link

Also available in: Atom PDF