From: Victor Julien <victor@inliniac.net>
Date: Thu, 31 Jul 2014 16:02:40 +0000 (+0200)
Subject: output-lua: add SCFlowStats
X-Git-Tag: suricata-2.1beta2~126
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0e93a292744a2c9c3faa6e5c29be3882acd21393;p=thirdparty%2Fsuricata.git

output-lua: add SCFlowStats

SCFlowStats gets the packet and byte counts per flow:
    tscnt, tsbytes, tccnt, tcbytes = SCFlowStats()
---

diff --git a/src/output-lua-common.c b/src/output-lua-common.c
index 255c2f9371..d48a29fc8f 100644
--- a/src/output-lua-common.c
+++ b/src/output-lua-common.c
@@ -414,6 +414,45 @@ static int LuaCallbackAppLayerProtoFlow(lua_State *luastate)
     return r;
 }
 
+/** \internal
+ *  \brief fill lua stack with flow stats
+ *  \param luastate the lua state
+ *  \param f flow, locked
+ *  \retval cnt number of data items placed on the stack
+ *
+ *  Places: ts pkts (number), ts bytes (number), tc pkts (number), tc bytes (number)
+ */
+static int LuaCallbackStatsPushToStackFromFlow(lua_State *luastate, const Flow *f)
+{
+    lua_pushnumber(luastate, f->todstpktcnt);
+    lua_pushnumber(luastate, f->todstbytecnt);
+    lua_pushnumber(luastate, f->tosrcpktcnt);
+    lua_pushnumber(luastate, f->tosrcbytecnt);
+    return 4;
+}
+
+/** \internal
+ *  \brief Wrapper for getting AppLayerProto info into a lua script
+ *  \retval cnt number of items placed on the stack
+ */
+static int LuaCallbackStatsFlow(lua_State *luastate)
+{
+    int r = 0;
+    int lock_hint = 0;
+    Flow *f = LuaStateGetFlow(luastate, &lock_hint);
+    if (f == NULL)
+        return LuaCallbackError(luastate, "internal error: no flow");
+
+    if (lock_hint == LUA_FLOW_NOT_LOCKED_BY_PARENT) {
+        FLOWLOCK_RDLOCK(f);
+        r = LuaCallbackStatsPushToStackFromFlow(luastate, f);
+        FLOWLOCK_UNLOCK(f);
+    } else {
+        r = LuaCallbackStatsPushToStackFromFlow(luastate, f);
+    }
+    return r;
+}
+
 /** \internal
  *  \brief fill lua stack with alert info
  *  \param luastate the lua state
@@ -687,6 +726,8 @@ int LogLuaRegisterFunctions(lua_State *luastate)
     lua_setglobal(luastate, "SCFlowTuple");
     lua_pushcfunction(luastate, LuaCallbackAppLayerProtoFlow);
     lua_setglobal(luastate, "SCFlowAppLayerProto");
+    lua_pushcfunction(luastate, LuaCallbackStatsFlow);
+    lua_setglobal(luastate, "SCFlowStats");
 
     lua_pushcfunction(luastate, LuaCallbackStreamingBuffer);
     lua_setglobal(luastate, "SCStreamingBuffer");