Trisul Network Analytics
Developer Zone

**This is an old revision of the document!** ----

====== Getting started with Trisul LUA Scripting ====== Using plain LuaJIT you can extend Trisul's functionality in a number of ways. ===== Concepts ===== [[https://github.com/trisulnsm/trisul-scripts/tree/master/lua/skeletons|Skeleton Lua scripts]] you can copy and fill out [[https://www.trisul.org/docs/lua/selector.html|LUA Script selector]] - to help you pick the type of scripting API you need to use to accomplish a variety of tasks [[scripting:introbro|Bro IDS scripting vs Trisul scripting]] [[lua:structure|How to structure your scripts]] ===== Basics ===== Links to step by step tutorials Tutorial 1 : [[https://www.trisul.org/docs/lua/tutorial1.html|A Hello World]] Tutorial 2 : A [[https://www.trisul.org/docs/lua/tutorial2.html|packet length counter]] ===== Techniques used in sample scripts ===== [[lua:ua-parser|Trisul script to use UA-Parser regex to track HTTP User Agents]] ===== LuaJIT tips ===== [[lua:jittips|LuaJIT performance tips]] ===== QUIC analyzer ===== [[lua:quic|Explains the Trisul Google QUIC protocol analyzer script]]