]> git.ipfire.org Git - thirdparty/suricata.git/commit
examples: add an example plugin of an eve filetype 9829/head
authorJason Ish <jason.ish@oisf.net>
Mon, 30 Oct 2023 23:25:12 +0000 (17:25 -0600)
committerVictor Julien <victor@inliniac.net>
Fri, 17 Nov 2023 21:24:17 +0000 (22:24 +0100)
commitd2b25af3f4a21806efc3e38ebbe6e66b7dc5c0d4
tree33a313eedcc54eed3163e024be14159bec2b0021
parenta649a92afd4ed71b264ee1df408875322d9dfaf9
examples: add an example plugin of an eve filetype

This is an example of what adding plugin examples to the Suricata repo
could look like.

This plugin is an example plugin for an EVE filetype. It could be
extended to support outputs like Redis, syslog, etc.

There is one issue with adding plugins like this to an autotools
project, the project can't be built with --disable-shared, which is
more of an autotools limitation, and not really a Suricata issue.
Suricata built with --disable-shared will load plugins just fine.

Note that the examples directory was added as DIST_SUBDIRS as we don't
want normal builds to recurse into it and attempt to build the plugin,
its just an example, but we still need to keep distcheck happy.
.github/workflows/builds.yml
Makefile.am
configure.ac
examples/plugins/README.md [new file with mode: 0644]
examples/plugins/c-json-filetype/.gitignore [new file with mode: 0644]
examples/plugins/c-json-filetype/Makefile.am [new file with mode: 0644]
examples/plugins/c-json-filetype/Makefile.example [new file with mode: 0644]
examples/plugins/c-json-filetype/README.md [new file with mode: 0644]
examples/plugins/c-json-filetype/filetype.c [new file with mode: 0644]