ROPE Language Reference - "lift"

The "lift" action takes a specified number of bytes from the packet being inspected, starting at $offset. The lifted bytes are returned as a string and $offset is advanced to point to the next byte in the packet.

If there are fewer than the requested number of bytes available, lift returns a shorter string. An empty return string indicates that the end of the packet has been hit.

The "expect" action is similar, but handles the end-of-packet differently.

"lift" is somewhat like "read" in C (etc).

For example..

lift(4)
4 lift

See Also