[Oisf-devel] Lua Output - Streaming Data

[Victor Julien]

On 11/14/2014 04:15 PM, Gofran, Paul wrote:
> When using the Lua Output feature to stream data, is there any way to
> determine when a flow has ended?   Or to know when a stream is the last
> stream in a flow?
> 
>  
> 
> I’m trying to reassemble a full payload to scan it externally, but don’t
> want to scan it until I know I have the full payload.
> 

It looks like this information isn't exposed to the scripts currently.
Adding it would be trivial, the underlying code has this info in the
form of a set of flags.

Can you open a ticket?

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------