Thanks Risto for the clarification of the types of variables that can be used.
The scripts need to compute the time elapse between a timestamp captured earlier (stored in $+{varname}) and a new timestamp extracted from the new matching pattern and stored in $1. If the time elapsed is less than n seconds I would like to execute action; otherwise, execute action2. Hope it makes sense. Regards, Rafael On Apr 5, 2011, at 2:12 PM, Risto Vaarandi wrote: > hi Rafael, > there are three kind of variables that can be used in SEC rules: > 1) action list variables which are visible in action lists only (e.g., > %t or %s), > 2) match variables which are set by patterns (e.g., $1 or $+{varname}), > 3) Perl variables that are set and used in Perl code snippets > defined/invoked in/from SEC rules. > Since the 'script' field which defines a command line to external > program, only match variables can be used in this field. BTW, what > sort of functionality the external program implements and what data > are held by $my_variable? Maybe there is another way to express the > same idea with a different rule... > kind regards, > risto > > 2011/4/5 Rafael Bonilla <rafael.boni...@gmail.com>: >> Hi, >> >> I'm pretty new to SEC and was wondering if I can use a $my_variable as an >> argument when calling a perl script with the script= option of a >> SingleWithScript rule. >> >> So far I've tried the following: >> type=SingleWithScript >> ptype=RegExp >> pattern=some pattern >> context=some context >> script=someScript.pl $my_variable $0 >> ... >> >> with no success. It seem that the perl script never receives the value >> stored in $my_variable and I know it has a value. >> >> Any suggestions? >> >> Thanks, >> Rafael >> ------------------------------------------------------------------------------ >> Xperia(TM) PLAY >> It's a major breakthrough. An authentic gaming >> smartphone on the nation's most reliable network. >> And it wants your games. >> http://p.sf.net/sfu/verizon-sfdev >> _______________________________________________ >> Simple-evcorr-users mailing list >> Simple-evcorr-users@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users >> ------------------------------------------------------------------------------ Xperia(TM) PLAY It's a major breakthrough. An authentic gaming smartphone on the nation's most reliable network. And it wants your games. http://p.sf.net/sfu/verizon-sfdev _______________________________________________ Simple-evcorr-users mailing list Simple-evcorr-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users