You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

History

Jason Ish 25e32f4f7a output: delayed initialization for custom loggers When a plugin is first initialized, it is too early to register transaction loggers. Instead, a plugin can register a callback to be called when Suricata is ready for outputs like transaction loggers to be registered. Likewise for library users, there is a window in SuricataInit where transaction loggers can be registered that library users don't have access to. So a lifecycle callback useful here as well. Ticket #7236		1 year ago
..
altemplate	rust: bindgen app-layer-detect-proto.h	1 year ago
c-custom-loggers	output: delayed initialization for custom loggers	1 year ago
c-json-filetype	conf: prefix conf API with SC	2 years ago
ci-capture	examples/lib: use packet setter functions	2 years ago
README.md	plugin: add in-tree app-layer template plugin for testing	2 years ago

Example Plugins

c-json-filetype

An example plugin of an EVE/JSON filetype plugin. This type of plugin is useful if you want to send EVE output to custom destinations.

A minimal capture plugin that can be used as a template, but also used for testing capture plugin loading and registration in CI.

An app-layer template plugin with logging and detection. Most code copied from rust/src/applayertemplate