Project

General

Profile

Actions

Feature #3332

closed

Dynamic Loadable Module/Plugin Support

Added by Jason Ish over 4 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

Look into supporting dynamically loadable modules in Suricata (aka plugins). Plugins we may want to support could be:
- inputs (example: pf_ring)
- outputs (example: kafka output)
- detection keywords
- app-layer protocols

Ideally plugins will be written in Rust, but I believe for Rust to load a dynamic module it has to follow a C interface, so in plugins could likely be written in C, Rust, C++, etc.

Also look into the possibility of unwinding panic's provided the plugin was written in Rust (see: https://redmine.openinfosecfoundation.org/issues/3333)


Related issues 1 (1 open0 closed)

Related to Suricata - Task #3828: pfring support: remove in favor of (externally maintained) pluginNewOISF DevActions
Actions #1

Updated by Jason Ish over 4 years ago

  • Description updated (diff)
Actions #2

Updated by Jason Ish about 4 years ago

  • Assignee changed from OISF Dev to Jason Ish
Actions #3

Updated by Jason Ish about 4 years ago

  • Status changed from New to Assigned
Actions #4

Updated by Jason Ish almost 4 years ago

  • Status changed from Assigned to In Review
Actions #5

Updated by Victor Julien almost 4 years ago

  • Related to Task #3828: pfring support: remove in favor of (externally maintained) plugin added
Actions #6

Updated by Victor Julien over 3 years ago

  • Subject changed from Research: Dynamic Loadable Module/Plugin Support to Dynamic Loadable Module/Plugin Support
  • Status changed from In Review to Closed
  • Target version set to 6.0.0beta1
Actions

Also available in: Atom PDF