Actions
Optimization #3304
opengeneric way to register buffers for logging and detection
Description
Currently creating support for logging protocol fields and matching protocol fields are distinct steps during development.
Goal is to unify this so the protocol parser implementations simply register a buffer/field once.
Updated by Philippe Antoine over 2 years ago
As I see it, the main problem is that detection requires redmine ticket + suricata-verify test + documentation when logging does not
Updated by Philippe Antoine over 1 year ago
Idea about this : using magic rust derive that would parse a struct and see which fiels are annotated for logging and/or detection and create functions to log them or get the buffer/integer for detection
Updated by Philippe Antoine about 1 year ago
@Jason Ish was there not a duplicate ticket for this we talked about yesterday ?
Actions