-- eval() is required
-- eval must return a bool (match == true)
function eval ()
- -- you can access a snort buffer as follows
- -- see snort.lua for available buffers
-
-- buf is a luajit cdata
local buf = ffi.C.get_buffer()
-- FIXIT - this gets:
-- bad argument #2 to 'format' (number expected, got cdata)
- --print(string.format('%ld %d:%d:%d %s', pkt.num, evt.gid, evt.sid, evt.rev, str))
+ --print(string.format('%ld %d:%d:%d %s',
+ -- pkt.num, evt.gid, evt.sid, evt.rev, str))
- print(string.format('%d:%d:%d %s', evt.gid, evt.sid, evt.rev, str))
+ print(string.format('%d:%d:%d %s',
+ evt.gid, evt.sid, evt.rev, str))
end
-- plugin table is required