From: Mats Klepsland <mats.klepsland@gmail.com>
Date: Fri, 10 Mar 2017 06:23:30 +0000 (+0100)
Subject: doc: add documentation for Lua SCFlowTimestamps
X-Git-Tag: suricata-4.0.0-beta1~241
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7b1dae625121a2bbfb72054e8bc1aba102356e69;p=thirdparty%2Fsuricata.git

doc: add documentation for Lua SCFlowTimestamps
---

diff --git a/doc/userguide/output/lua-output.rst b/doc/userguide/output/lua-output.rst
index 21e278a5e2..adef654a05 100644
--- a/doc/userguide/output/lua-output.rst
+++ b/doc/userguide/output/lua-output.rst
@@ -147,6 +147,17 @@ flow
       return needs
   end
 
+SCFlowTimestamps
+~~~~~~~~~~~~~~~~
+
+Get timestamps (seconds and microseconds) of the first and the last packet from
+the flow.
+
+::
+
+  startts, lastts = SCFlowTimestamps()
+  startts_s, lastts_s, startts_us, lastts_us = SCFlowTimestamps()
+
 SCFlowTimeString
 ~~~~~~~~~~~~~~~~