mirror of
https://github.com/OISF/suricata.git
synced 2026-02-03 20:41:46 -05:00
b3dfd3cd8e
SCRuleIds(): returns sid, rev, gid:
function log(args)
sid, rev, gid = SCRuleIds()
SCRuleMsg(): returns msg
function log(args)
msg = SCRuleMsg()
SCRuleClass(): returns class msg and prio:
function log(args)
class, prio = SCRuleClass()
if class == nil then
class = "unknown"
end
34 lines
811 B
Lua
34 lines
811 B
Lua
-- simple fast-log to stdout lua module
|
|
|
|
function init (args)
|
|
local needs = {}
|
|
needs["type"] = "packet"
|
|
needs["filter"] = "alerts"
|
|
return needs
|
|
end
|
|
|
|
function setup (args)
|
|
alerts = 0
|
|
end
|
|
|
|
function log(args)
|
|
sid, rev, gid = SCRuleIds()
|
|
ipver, srcip, dstip, proto, sp, dp = SCPacketTuple()
|
|
msg = SCRuleMsg()
|
|
class, prio = SCRuleClass()
|
|
if class == nil then
|
|
class = "unknown"
|
|
end
|
|
ts = args['ts'];
|
|
|
|
print (ts .. " [**] [" .. gid .. ":" .. sid .. ":" .. rev .. "] " ..
|
|
msg .. " [**] [Classification: " .. class .. "] [Priority: " ..
|
|
prio .. "] {" .. proto .. "} " ..
|
|
srcip .. ":" .. sp .. " -> " .. dstip .. ":" .. dp)
|
|
|
|
alerts = alerts + 1;
|
|
end
|
|
|
|
function deinit (args)
|
|
print ("Alerted " .. alerts .. " times");
|
|
end
|