7d5c170dd2
Remove comparisons with true or false with C bools. |
1 week ago | |
|---|---|---|
| .. | ||
| Makefile.am | ||
| README.md | ||
| plugin.c | ||
| runmode-napatech.c | ||
| runmode-napatech.h | ||
| source-napatech.c | 5 months ago | |
| source-napatech.h | ||
| util-napatech.c | 1 week ago | |
| util-napatech.h | ||
README.md
Napatech Plugin Capture Plugin
Building
To build this plugin, configure Suricata with the --enable-napatech and
optionally the --with-napatech-includes and
--with-napatech-libraries command line options.
Running
/usr/local/suricata/bin/suricata \
--set plugins.0=/usr/local/lib/suricata/napatech.so \
--capture-plugin=napatech
--set plugins.0=/usr/local/lib/suricata/napatech.so
This command line option tells Suricata about this plugin. This could also
be done in suricata.yaml with the following section:
plugins:
- /usr/local/lib/suricata/napatech.so
--capture-plugin=napatech
This is the option that tells Suricata to use a plugin for capture, much like
--pcap tells Suricata to use libpcap or --af-packet tells Suricata to use
AF_PACKET. Here we are telling it to look for a loaded plugin of the name
napatech to provide the capture method.
There is another command line option --capture-plugin-args to pass arbitrary
data on the command line to a capture plugin, but this plugin does not yet handle
data provided through this command line parameter.