Project

General

Profile

Actions
Copy link

Task #2693

open

tracking: libsuricata

Added by Victor Julien over 4 years ago. Updated 7 months ago.

Status:
In Progress
Priority:
Normal
Assignee:
Jason Ish
Target version:
8.0.0-beta1
Effort:
high
Difficulty:
high
Label:

Description

This request came up at Suricon2018, but has come up before. The idea is to turn much of Suricata into a library that can be reused in other tools.

The first step would be to define some of the use cases we'd like to initially support so that an API could be designed for that.

Subtasks 4 (4 open — 0 closed)

Task #4682: tracking: clean up globals and thread localsNewActions
Task #4683: detect: remove sigmatch_table in favor of a dynamic storage optionNewActions
Task #4684: libsuricata: define global context types for instance and per thread storageNewActions
Task #4698: Example program to bootstrap Suricata (an alternate main() for Suricata)AssignedJason IshActions

Related issues 10 (9 open — 1 closed)

Related to Task #2685: SuriCon 2018 brainstormAssignedVictor JulienActions
Related to Task #4097: Suricon 2020 brainstormAssignedVictor JulienActions
Related to Task #4221: Build Suricata into a static and shared libraryClosedJason IshActions
Related to Task #4429: libsuricata: Use cases with examplesNewJason IshActions
Related to Task #4101: tracking: pluginsIn ProgressJason IshActions
Related to Task #4704: unix-socket: separate functionality from the unix socket interfaceNewActions
Related to Task #4742: Make the auto-generated config.h not conflict with other config.h.AssignedJason IshActions
Related to Task #5433: tracking: reduce number of public data structuresAssignedJason IshActions
Related to Task #5488: Suricon 2022 brainstormAssignedVictor JulienActions
Related to Task #2313: tracking: save & restore state when suricata restartsNewOISF DevActions
Actions
Copy link
 #1

Updated by Victor Julien over 4 years ago

  • Related to Task #2685: SuriCon 2018 brainstorm added
Actions
Copy link
 #2

Updated by Andreas Herz about 4 years ago

  • Assignee set to Community Ticket
Actions
Copy link
 #3

Updated by Victor Julien about 3 years ago

  • Assignee changed from Community Ticket to OISF Dev
Actions
Copy link
 #4

Updated by Victor Julien about 3 years ago

  • Description updated (diff)
Actions
Copy link
 #5

Updated by Victor Julien about 3 years ago

One of the use cases that has been brought forward is to be able to integrate the Suricata detection and logging into OVS.

Actions
Copy link
 #6

Updated by Victor Julien over 2 years ago

  • Related to Task #4097: Suricon 2020 brainstorm added
Actions
Copy link
 #7

Updated by Victor Julien over 2 years ago

  • Tracker changed from Feature to Task
  • Subject changed from libsuricata to tracking: libsuricata
  • Status changed from New to Assigned
  • Assignee changed from OISF Dev to Jason Ish
  • Target version changed from TBD to 7.0.0-beta1
Actions
Copy link
 #8

Updated by Jason Ish over 2 years ago

  • Related to Task #4221: Build Suricata into a static and shared library added
Actions
Copy link
 #9

Updated by Jason Ish about 2 years ago

  • Related to Task #4429: libsuricata: Use cases with examples added
Actions
Copy link
 #10

Updated by Jason Ish over 1 year ago

Actions
Copy link
 #11

Updated by Jason Ish over 1 year ago

  • Related to Task #4704: unix-socket: separate functionality from the unix socket interface added
Actions
Copy link
 #12

Updated by Jason Ish over 1 year ago

  • Related to Task #4742: Make the auto-generated config.h not conflict with other config.h. added
Actions
Copy link
 #13

Updated by Jason Ish over 1 year ago

  • Status changed from Assigned to In Progress
Actions
Copy link
 #14

Updated by Victor Julien 11 months ago

  • Related to Task #5433: tracking: reduce number of public data structures added
Actions
Copy link
 #15

Updated by Victor Julien 8 months ago

  • Target version changed from 7.0.0-beta1 to 8.0.0-beta1
Actions
Copy link
 #16

Updated by Philippe Antoine 7 months ago

Use cases :
- Have packets from some other source
- Have some already reassembled stream (SSL proxy)
- Have a very dynamic way to tell which packet which should be handled by this config/ruleset (complexity from global variables), have some way for tenants to remove certain categories, or have a finite set of precompiled rulesets and have a plugin be able to tell which ruleset should be used for each packet
- Have packet returned with metadata like the alerts it has

Idea to persist precompiled ruleset

Actions
Copy link
 #17

Updated by Philippe Antoine 7 months ago

  • Related to Task #5488: Suricon 2022 brainstorm added
Actions
Copy link
 #18

Updated by Philippe Antoine 7 months ago

  • Related to Task #2313: tracking: save & restore state when suricata restarts added
Actions
Copy link

Also available in: Atom PDF