[Oisf-devel] Lua Output - Streaming Data

Victor Julien victor at inliniac.net
Fri Nov 14 16:44:58 UTC 2014

On 11/14/2014 04:15 PM, Gofran, Paul wrote:
> When using the Lua Output feature to stream data, is there any way to
> determine when a flow has ended?   Or to know when a stream is the last
> stream in a flow?
> I’m trying to reassemble a full payload to scan it externally, but don’t
> want to scan it until I know I have the full payload.

It looks like this information isn't exposed to the scripts currently.
Adding it would be trivial, the underlying code has this info in the
form of a set of flags.

Can you open a ticket?

Victor Julien
PGP: http://www.inliniac.net/victorjulien.asc

More information about the Oisf-devel mailing list