We released an open source LuaJIT based protocol dissection framework called BITMAUL. This allows you to rapidly develop fast and safe protocol decoders.

BITMAUL can be found on its GitHUB page https://github.com/trisulnsm/bitmaul

BITMAUL is a standalone library that doesnt need Trisul, but we designed it to fit our use case.

A recurring demand from Trisul script developers is to decode protocols and then either meter the traffic or to generate “logs”. BITMAUL dramatically simplifies this process because it handles both TCP message segmentation as well as the bits level protocol dissection. You can go as deep as you want in any protocol or just decode it enough to generate metrics, resources (logs), alerts, or other kinds of action.

HTTP header parsing benchmark