Custom Snort Scripts Not getting invoked

Dear Sir / Ma'am,
I have written a custom snort script designed to print out the payload of a
packet (my_gtp_inspect.lua, attached below).

The command used to invoke snort is as follows

snort -c snortLoc/snort.lua --script-path snortRules/scripts/ -A fast -k
none -r gtp_in_gtp.pcap -q

However, the challenge is that I am unable to register the function as a
part of a rule (my attempt is present within the script file
my_gtp_inspect.lua).

The method mentioned outlined in the documentation says to include the
script name /function name as a keyword in the rule. However, doing so
simply throws an error as invalid keyword.

Rule:
[image: WhatsApp Image 2024-09-03 at 16.24.33_5c488278.jpg]
Error:
[image: ba327a71-0a59-45a6-9a08-b92bfcdfaf20.jpg]

How do we go about getting the packet to pass into the function for further
evaluation?

Your help is greatly appreciated

Regards
Aditya

_______________________________________________
Snort-users mailing list
[email protected]
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

	To unsubscribe, send an email to:
	[email protected]

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette