# Help with getting ICMPv6 payload in Lua detection from icmpv6.hdr and needs\["buffer"\] = tostring(true)?

**URL:** <https://forum.suricata.io/t/help-with-getting-icmpv6-payload-in-lua-detection-from-icmpv6-hdr-and-needs-buffer-tostring-true/2749>\
**Category:** Help\
**Created:** [September 4, 2022, 4:45pm UTC](https://forum.suricata.io/t/help-with-getting-icmpv6-payload-in-lua-detection-from-icmpv6-hdr-and-needs-buffer-tostring-true/2749 "2022-09-04T16:45:47Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mark\_Osborne](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/mark_osborne/32/1442_2.png) [@Mark\_Osborne](https://forum.suricata.io/u/Mark_Osborne)\
**Post date:** [September 4, 2022, 4:45pm UTC](https://forum.suricata.io/t/help-with-getting-icmpv6-payload-in-lua-detection-from-icmpv6-hdr-and-needs-buffer-tostring-true/2749/1 "2022-09-04T16:45:47Z")

</div>

Hi,  
I’m just trying to reliably get the ICMPv6 payload contents in Lua detection script, for a project.  
I would like to know if the “needs[“buffer”] = tostring(true)” can supply the sticky buffer from the icmpv6.hdr to Lua detection, when icmpv6.hdr and content: is used in a rule? When I try a simple Lua script with the needs statement, buffer is always nil.  
I noticed this link [Feature #2937: sticky buffer access from lua script - Suricata - Open Information Security Foundation](https://redmine.openinfosecfoundation.org/issues/2937) but wasn’t clear if it is working.  
Or, is there a reliable way to get the ICMPv6 payload in Lua detection, since SCPacketPayload, or the “needs[“payload”] = tostring(true)” isn’t necessarily giving the ICMPv6 payload.

Thank you
