scripting:introbro
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revision | Last revisionBoth sides next revision | ||
scripting:introbro [2018/09/28 19:31] – [Two scripting pipelines in Trisul] veera | scripting:introbro [2018/09/28 19:32] – [Two scripting pipelines in Trisul] veera | ||
---|---|---|---|
Line 27: | Line 27: | ||
^ Feature ^ Bro ^ Trisul ^ | ^ Feature ^ Bro ^ Trisul ^ | ||
|language | .bro language | LuaJIT | |language | .bro language | LuaJIT | ||
+ | |docs|[[https:// | ||
|protocol decoding | Bro framework provides fine grained events representing protocol fields to your script. | |protocol decoding | Bro framework provides fine grained events representing protocol fields to your script. | ||
|events | fine grained " | |events | fine grained " | ||
Line 39: | Line 40: | ||
|example|JA3 TLS Fingerprint written [[ https:// | |example|JA3 TLS Fingerprint written [[ https:// | ||
|disadvantage| - | LuaJIT has a 2GB limit on total memory use, therefore your scripts cant allocate too much memory. Use Trisul aggregations instead of building large lookup tables or use LevelDB to store data. | | |disadvantage| - | LuaJIT has a 2GB limit on total memory use, therefore your scripts cant allocate too much memory. Use Trisul aggregations instead of building large lookup tables or use LevelDB to store data. | | ||
- | |docs|[[https:// | ||
scripting/introbro.txt · Last modified: 2018/09/28 23:18 by veera