mirror of https://github.com/OISF/suricata
cybersecurityidsintrusion-detection-systemintrusion-prevention-systemipsnetwork-monitornetwork-monitoringnsmsecuritysuricatathreat-hunting
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Allow a script to set the 'stream' buffer type. This will add the
script to the PMATCH list.
Example script:
alert tcp any any -> any any (content:"html"; lua:stream.lua; sid:1;)
function init (args)
local needs = {}
needs["stream"] = tostring(true)
return needs
end
-- return match via table
function match(args)
local result = {}
b = tostring(args["stream"])
o = tostring(args["offset"])
bo = string.sub(b, o);
print (bo)
return result
end
return 0
|
12 years ago | |
|---|---|---|
| benches | 17 years ago | |
| contrib | 13 years ago | |
| doc | 14 years ago | |
| lua | 12 years ago | |
| m4 | 17 years ago | |
| qa | 12 years ago | |
| rules | 12 years ago | |
| scripts | 12 years ago | |
| src | 12 years ago | |
| .gitignore | 13 years ago | |
| .travis.yml | 12 years ago | |
| COPYING | 17 years ago | |
| ChangeLog | 12 years ago | |
| LICENSE | 17 years ago | |
| Makefile.am | 13 years ago | |
| Makefile.cvs | 17 years ago | |
| acsite.m4 | 17 years ago | |
| autogen.sh | 14 years ago | |
| classification.config | 17 years ago | |
| config.rpath | 13 years ago | |
| configure.ac | 12 years ago | |
| doxygen.cfg | 12 years ago | |
| reference.config | 15 years ago | |
| suricata.yaml.in | 12 years ago | |
| threshold.config | 14 years ago | |