Project

General

Profile

Actions
Copy link

Feature #4102

open

plugins: support creating app-layer parser, logger and detect

Added by Jason Ish over 4 years ago. Updated about 1 month ago.

Status:
In Review
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
8.0.0-beta1
Effort:
Difficulty:
Label:

Description

The idea is that full support for an application protocol can be added as a plugin. This includes the parser, the logger and any detection keywords related to this protocol.

It might be possible to break this down into sub-tasks, but tracking as an entire feature as that is the goal.

Subtasks 6 (6 open — 0 closed)

Documentation #7149: devguide: document adding a app-layer pluginIn ReviewPhilippe AntoineActions
Documentation #7150: devguide: document adding a logging pluginIn ReviewPhilippe AntoineActions
Task #7151: plugins: add template app-layer pluginIn ReviewPhilippe AntoineActions
Task #7152: plugins: add template logger pluginIn ReviewPhilippe AntoineActions
Documentation #7153: devguide: document adding a detection pluginIn ReviewPhilippe AntoineActions
Task #7154: plugins: add template detection pluginIn ReviewPhilippe AntoineActions

Related issues 3 (2 open — 1 closed)

Related to Suricata - Task #4101: tracking: pluginsIn ProgressJason IshActions
Related to Suricata - Task #5053: app-layer: dynamic alproto IDsClosedPhilippe AntoineActions
Blocks Suricata - Story #7148: extensibility: pluginsNewVictor JulienActions
Actions
Copy link
 #1

Updated by Jason Ish over 4 years ago

Actions
Copy link
 #2

Updated by Victor Julien 8 months ago

  • Subject changed from Plugins: Full support for creating a parser, logger and detect for an application protocol as a plugin to plugins: Full support for creating a parser, logger and detect for an application protocol as a plugin
Actions
Copy link
 #3

Updated by Victor Julien 8 months ago

Actions
Copy link
 #4

Updated by Victor Julien 8 months ago

  • Subject changed from plugins: Full support for creating a parser, logger and detect for an application protocol as a plugin to plugins: support creating app-layer parser, logger and detect
  • Target version set to 8.0.0-beta1
Actions
Copy link
 #5

Updated by Victor Julien 8 months ago

  • Subtask #7149 added
Actions
Copy link
 #6

Updated by Victor Julien 8 months ago

  • Subtask #7150 added
Actions
Copy link
 #7

Updated by Victor Julien 8 months ago

  • Subtask #7151 added
Actions
Copy link
 #8

Updated by Victor Julien 8 months ago

  • Subtask #7152 added
Actions
Copy link
 #9

Updated by Victor Julien 8 months ago

  • Subtask #7153 added
Actions
Copy link
 #10

Updated by Victor Julien 8 months ago

  • Subtask #7154 added
Actions
Copy link
 #11

Updated by Jason Ish about 1 month ago

  • Related to Task #5053: app-layer: dynamic alproto IDs added
Actions
Copy link
 #12

Updated by Philippe Antoine about 1 month ago

  • Assignee changed from Jason Ish to Philippe Antoine

I guess I should do this after #5053 https://github.com/OISF/suricata/pull/12383

Actions
Copy link
 #13

Updated by Philippe Antoine about 1 month ago

  • Status changed from New to In Review
Actions
Copy link

Also available in: Atom PDF