suricata/examples/plugins/README.md

# Example Plugins

## c-json-filetype

An example plugin of an EVE/JSON filetype plugin. This type of plugin
is useful if you want to send EVE output to custom destinations.

## ci-capture

A minimal capture plugin that can be used as a template, but also used
for testing capture plugin loading and registration in CI.

## altemplate

An app-layer template plugin with logging and detection.
Most code copied from rust/src/applayertemplate
examples: add an example plugin of an eve filetype This is an example of what adding plugin examples to the Suricata repo could look like. This plugin is an example plugin for an EVE filetype. It could be extended to support outputs like Redis, syslog, etc. There is one issue with adding plugins like this to an autotools project, the project can't be built with --disable-shared, which is more of an autotools limitation, and not really a Suricata issue. Suricata built with --disable-shared will load plugins just fine. Note that the examples directory was added as DIST_SUBDIRS as we don't want normal builds to recurse into it and attempt to build the plugin, its just an example, but we still need to keep distcheck happy. 2 years ago			`# Example Plugins`

			`## c-json-filetype`

			`An example plugin of an EVE/JSON filetype plugin. This type of plugin`
			`is useful if you want to send EVE output to custom destinations.`
examples: minimal example capture plugin for ci Create a mininal capture plugin that injects one packet. While it can also be a template, we should be able to run this in CI to test the loading and registration of the capture plugin mechanisms. 1 year ago
			`## ci-capture`

			`A minimal capture plugin that can be used as a template, but also used`
			`for testing capture plugin loading and registration in CI.`
plugin: add in-tree app-layer template plugin for testing Ticket: 7151 Ticket: 7152 Ticket: 7154 8 months ago
			`## altemplate`

			`An app-layer template plugin with logging and detection.`
			`Most code copied from rust/src/applayertemplate`