Project

General

Profile

Actions
Copy link

Feature #1264

closed

Lua: access to TCP quad / Flow Tuple

Added by Paul Gofran about 10 years ago. Updated almost 10 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Victor Julien
Target version:
2.1beta2
Effort:
Difficulty:
Label:

Description

This is a request to provide lua scripts access to the TCP quad. When extracting payloads (ex: needs["payload"]), Lua does not have access to the TCP/IP information at the same time.

Similar to features #1261, #1263

Actions
Copy link
 #1

Updated by Peter Manev about 10 years ago

  • Tracker changed from Bug to Feature
Actions
Copy link
 #2

Updated by Victor Julien about 10 years ago

In my dev-lua-output branch you can use either:

ipver, srcip, dstip, proto, sp, dp = SCFlowTuple()
ipver, srcip, dstip, proto, sp, dp = SCPacketTuple()

Depending on where the script is hooked in you can use one or the other currently.
Actions
Copy link
 #3

Updated by Victor Julien about 10 years ago

  • Status changed from New to Closed
  • Assignee set to Victor Julien
  • Target version set to 2.1beta2
  • % Done changed from 0 to 100
Actions
Copy link
 #4

Updated by Victor Julien almost 10 years ago

  • Subject changed from Request for Additional Lua Capabilities - TCP quad to Lua: access to TCP quad / Flow Tuple
Actions
Copy link

Also available in: Atom PDF