Project

General

Profile

Actions
Copy link

Feature #4102

closed

plugins: support creating app-layer parser, logger and detect

Added by Jason Ish over 4 years ago. Updated 18 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
8.0.0-beta1
Effort:
Difficulty:
Label:

Description

The idea is that full support for an application protocol can be added as a plugin. This includes the parser, the logger and any detection keywords related to this protocol.

It might be possible to break this down into sub-tasks, but tracking as an entire feature as that is the goal.

Subtasks 6 (0 open — 6 closed)

Documentation #7149: devguide: document adding a app-layer pluginClosedPhilippe AntoineActions
Documentation #7150: devguide: document adding a logging pluginClosedPhilippe AntoineActions
Task #7151: plugins: add template app-layer pluginClosedPhilippe AntoineActions
Task #7152: plugins: add template logger pluginClosedPhilippe AntoineActions
Documentation #7153: devguide: document adding a detection pluginClosedPhilippe AntoineActions
Task #7154: plugins: add template detection pluginClosedPhilippe AntoineActions

Related issues 3 (2 open — 1 closed)

Related to Suricata - Task #4101: tracking: pluginsIn ProgressJason IshActions
Related to Suricata - Task #5053: app-layer: dynamic alproto IDsClosedPhilippe AntoineActions
Blocks Suricata - Story #7148: extensibility: pluginsNewVictor JulienActions
Actions
Copy link
 #1

Updated by Jason Ish over 4 years ago

Actions
Copy link
 #2

Updated by Victor Julien 10 months ago

  • Subject changed from Plugins: Full support for creating a parser, logger and detect for an application protocol as a plugin to plugins: Full support for creating a parser, logger and detect for an application protocol as a plugin
Actions
Copy link
 #3

Updated by Victor Julien 10 months ago

Actions
Copy link
 #4

Updated by Victor Julien 10 months ago

  • Subject changed from plugins: Full support for creating a parser, logger and detect for an application protocol as a plugin to plugins: support creating app-layer parser, logger and detect
  • Target version set to 8.0.0-beta1
Actions
Copy link
 #5

Updated by Victor Julien 10 months ago

  • Subtask #7149 added
Actions
Copy link
 #6

Updated by Victor Julien 10 months ago

  • Subtask #7150 added
Actions
Copy link
 #7

Updated by Victor Julien 10 months ago

  • Subtask #7151 added
Actions
Copy link
 #8

Updated by Victor Julien 10 months ago

  • Subtask #7152 added
Actions
Copy link
 #9

Updated by Victor Julien 10 months ago

  • Subtask #7153 added
Actions
Copy link
 #10

Updated by Victor Julien 10 months ago

  • Subtask #7154 added
Actions
Copy link
 #11

Updated by Jason Ish 4 months ago

  • Related to Task #5053: app-layer: dynamic alproto IDs added
Actions
Copy link
 #12

Updated by Philippe Antoine 3 months ago

  • Assignee changed from Jason Ish to Philippe Antoine

I guess I should do this after #5053 https://github.com/OISF/suricata/pull/12383

Actions
Copy link
 #13

Updated by Philippe Antoine 3 months ago

  • Status changed from New to In Review
Actions
Copy link
 #14

Updated by Shivani Bhardwaj 18 days ago

  • Status changed from In Review to In Progress
  • Target version changed from 8.0.0-beta1 to 8.0.0-rc1

This is a tracker ticket. Code part seems to be covered by https://github.com/OISF/suricata/pull/12966. Doc tickets stop us from closing the ticket, so, I'm moving this tracking ticket to rc1. Please feel free to change.

Actions
Copy link
 #15

Updated by Victor Julien 18 days ago

  • Status changed from In Progress to Closed
  • Target version changed from 8.0.0-rc1 to 8.0.0-beta1
Actions
Copy link

Also available in: Atom PDF