Trisul LUA API Samples
The Trisul LUA API allows you to program the Trisul real time network analytics engine.
This repository contains a number of working samples demonstrating various types of scripts.
Where do I start?
The first three places you need to know are :
- The Trisul LUA API Documentation
tutorialsdirectory contains scripts that are used in the Trisul LUA tutorials
skeletonsdirectory contains well commented skeletons of various types of scripts you can use to get started.
Next, the actual scripts are split into two directories.
In Trisul, LUA scripts that run on the "fast" path are called Frontend scripts and those that run on the "metric streams" are called Backend scripts. For more see Frontend vs Backend
The directories here are organized that way
frontend- Frontend scripts Contains samples of frontend scripts. Examples are TCP Reassembly, HTTP File Reconstruction etc
backend- Backend scripts Contains samples of flow monitors, passive DNS, etc
Create an issue here on Github