upstream/suricata
1
0
Fork 0
mirror of https://github.com/OISF/suricata.git synced 2026-04-15 14:30:01 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
suricata/plugins/napatech
History
Jason Ish a11aaadd86 plugins: add --plugin command line option to load plugins 
Add --plugin <PATH> to load an additional plugin from the command
line. This is more convenient than "--set plugins.X" especially when
you may already have a plugins loaded and you want to load an
additional one.

Ticket: 8463
2026-04-13 05:01:53 +00:00
..
Makefile.am napatech: add as plugin 2024-10-12 11:03:34 +02:00
plugin.c util-device: break into public and private definitions 2025-04-30 22:22:25 +02:00
README.md plugins: add --plugin command line option to load plugins 2026-04-13 05:01:53 +00:00
runmode-napatech.c capture/napatech: 0-pad thread names 2026-03-23 21:10:04 +00:00
runmode-napatech.h napatech: add as plugin 2024-10-12 11:03:34 +02:00
source-napatech.c src: doc: remove more double-space typos 2026-01-14 12:49:11 +00:00
source-napatech.h napatech: add as plugin 2024-10-12 11:03:34 +02:00
util-napatech.c src: doc: remove more double-space typos 2026-01-14 12:49:11 +00:00
util-napatech.h napatech: add as plugin 2024-10-12 11:03:34 +02:00

README.md

Napatech Plugin Capture Plugin

Building

To build this plugin, configure Suricata with the --enable-napatech and optionally the --with-napatech-includes and --with-napatech-libraries command line options.

Running

/usr/local/suricata/bin/suricata \
    --plugin /usr/local/lib/suricata/napatech.so \
    --capture-plugin=napatech

--plugin /usr/local/lib/suricata/napatech.so

This command line option tells Suricata about this plugin in addition to any plugins listed in suricata.yaml. This could also be done in suricata.yaml with the following section:

plugins:
  - /usr/local/lib/suricata/napatech.so

--capture-plugin=napatech

This is the option that tells Suricata to use a plugin for capture, much like --pcap tells Suricata to use libpcap or --af-packet tells Suricata to use AF_PACKET. Here we are telling it to look for a loaded plugin of the name napatech to provide the capture method.

There is another command line option --capture-plugin-args to pass arbitrary data on the command line to a capture plugin, but this plugin does not yet handle data provided through this command line parameter.