geedge-jira/md/OMPUB-1353.md

# 业主有关为Self-defined Attribute功能提供样例脚本的需求

| ID | Creation Date | Assignee | Status |
|----|----------------|----------|--------|
| OMPUB-1353 | 2024-07-04T19:54:26.000+0800 | 杨威 | 完成 |


---

业主希望通过我们提供一个lua样例脚本，之后来自行编辑该脚本实现Self-defined Attribute的功能。

建议为业主提供一个lua样例脚本：
1.该脚本仅能提取某个常见协议的1～2个字段。
2.运行时不会对生产环境产生较大的负载。

该样例给出后会告知运行脚本后引入的风险和产生的后果。

**fengweihao** commented on *2024-07-10T15:18:02.787+0800*:

Lua脚本功能：
 * 从数据包中根据特征提取QQ号

使用方式：
 * 上传Lua脚本
!image-2024-07-10-15-11-46-817.png|width=467,height=325!
 * 创建自定义特征

            !image-2024-07-10-15-13-02-831.png|width=457,height=313!
 * 创建自定义APP
!image-2024-07-10-15-15-09-322.png|width=457,height=328!
 * 查看命中结果：

         !image-2024-07-10-15-17-31-258.png|width=476,height=227!



---



# Attachments

Attachment: extract_qq_id.lua

[extract_qq_id.lua](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/59885/extract_qq_id.lua)



Attachment: image-2024-07-10-15-11-46-817.png

![image-2024-07-10-15-11-46-817.png](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/59887/image-2024-07-10-15-11-46-817.png)



Attachment: image-2024-07-10-15-13-02-831.png

![image-2024-07-10-15-13-02-831.png](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/59890/image-2024-07-10-15-13-02-831.png)



Attachment: image-2024-07-10-15-15-09-322.png

![image-2024-07-10-15-15-09-322.png](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/59891/image-2024-07-10-15-15-09-322.png)



Attachment: image-2024-07-10-15-17-31-258.png

![image-2024-07-10-15-17-31-258.png](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/59893/image-2024-07-10-15-17-31-258.png)