mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
35 lines
820 B
Lua
35 lines
820 B
Lua
-- simple fast-log to stdout lua module
|
|
|
|
function init (args)
|
|
local needs = {}
|
|
needs["type"] = "packet"
|
|
needs["filter"] = "alerts"
|
|
return needs
|
|
end
|
|
|
|
function setup (args)
|
|
alerts = 0
|
|
end
|
|
|
|
function log(args)
|
|
ts = SCPacketTimeString()
|
|
sid, rev, gid = SCRuleIds()
|
|
ipver, srcip, dstip, proto, sp, dp = SCPacketTuple()
|
|
msg = SCRuleMsg()
|
|
class, prio = SCRuleClass()
|
|
if class == nil then
|
|
class = "unknown"
|
|
end
|
|
|
|
print (ts .. " [**] [" .. gid .. ":" .. sid .. ":" .. rev .. "] " ..
|
|
msg .. " [**] [Classification: " .. class .. "] [Priority: " ..
|
|
prio .. "] {" .. proto .. "} " ..
|
|
srcip .. ":" .. sp .. " -> " .. dstip .. ":" .. dp)
|
|
|
|
alerts = alerts + 1;
|
|
end
|
|
|
|
function deinit (args)
|
|
print ("Alerted " .. alerts .. " times");
|
|
end
|