Actions
Optimization #3304
opengeneric way to register buffers for logging and detection
Description
Currently creating support for logging protocol fields and matching protocol fields are distinct steps during development.
Goal is to unify this so the protocol parser implementations simply register a buffer/field once.
Updated by Victor Julien over 3 years ago
- Subject changed from Make sure output of protocol parsers and keywords are both supported to generic way to register buffers for logging and detection
- Description updated (diff)
Updated by Victor Julien over 3 years ago
- Related to Task #3288: Suricon 2019 brainstorm added
Updated by Victor Julien over 2 years ago
- Related to Task #4101: tracking: plugins added
Updated by Philippe Antoine 5 months ago
As I see it, the main problem is that detection requires redmine ticket + suricata-verify test + documentation when logging does not
Actions