====== Getting started with Trisul LUA Scripting ======

Using plain LuaJIT you can extend Trisul's functionality in a number of ways. 

===== Concepts =====

[[https://github.com/trisulnsm/trisul-scripts/tree/master/lua/skeletons|Skeleton Lua scripts]] you can copy and fill out

[[https://www.trisul.org/docs/lua/selector.html|LUA Script selector]] - to help you pick the type of scripting API you need to use to accomplish a variety of tasks 

[[scripting:introbro|Bro IDS scripting vs Trisul scripting]]

[[lua:structure|How to structure your scripts]]

===== Tutorials =====

Links to step by step tutorials

  * **Tutorial 1** : [[https://www.trisul.org/docs/lua/tutorial1.html|A Hello World]]
  * **Tutorial 2** : A [[https://www.trisul.org/docs/lua/tutorial2.html|packet length counter]] 
  * **Tutorial 3** : A basic TCP [[https://github.com/trisulnsm/trisul-scripts/tree/master/lua/tutorial/tutorial3|based DNP3 analyzer]]
  * **Tutorial 4** : A step-by-step guide to working with resources (Logs) [[https://github.com/trisulnsm/trisul-scripts/tree/master/lua/tutorial/tutorial4|by writing a URLHaus IOC checker]]

===== LuaJIT tips =====

[[lua:jittips|LuaJIT performance tips]]

===== Techniques =====

[[lua:logtail|Log tailing]] : Lua snippet to watch a directory of logfiles and tail them into your LUA code.