Skip to content

Conversation

@samfajobi
Copy link
Contributor

Task: #6142

Ticket

If your pull request is related to a Suricata ticket, please provide
the full URL to the ticket here so this pull request can monitor
changes to the ticket status:

Redmine ticket:


function match(args)
print "inspecting"
a = ScFlowintGet(0)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I do not think this syntax is correct. See: https://docs.suricata.io/en/suricata-8.0.2/lua/libs/flowint.html#flowint-library
Also, check out: tests/lua/lua-flowintlib

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I do not think this syntax is correct. See: https://docs.suricata.io/en/suricata-8.0.2/lua/libs/flowint.html#flowint-library Also, check out: tests/lua/lua-flowintlib

Alright, I will check it out.

Copy link
Contributor Author

@samfajobi samfajobi Nov 13, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I do not think this syntax is correct. See: https://docs.suricata.io/en/suricata-8.0.2/lua/libs/flowint.html#flowint-library Also, check out: tests/lua/lua-flowintlib

Thank you very much for this @inashivb , this works now, apparently the function that was used earlier works with the old-style Lua detection scripts, I had to rewrite them all, I would raise a PR on this soon.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants