mirror of https://github.com/OISF/suricata
lua: add Ja3SGetString function
Add Ja3SGetString() to return the content of the JA3S string buffer from
the TLS session.
Example:
function init (args)
local needs = {}
needs["protocol"] = "tls"
return needs
end
function setup (args)
filename = SCLogPath() .. "/ja3s_string.log"
file = assert(io.open(filename, "a"))
end
function log (args)
ja3s_string = Ja3SGetString()
if ja3s_string == nil then
return
end
file:write(ja3s_string .. "\n")
file:flush()
end
function deinit (args)
file:close()
end
pull/3874/head
parent
37a0594417
commit
03e8e658d7
Loading…
Reference in New Issue