Latest status on using suricata via C

[Chelsea_Robinson]

I’m wondering what the latest status is on using Suricata via C. Is there something that could be used, even if it is in beta or on a non master branch?

This is a follow up on this thread from about a year ago:

Programmatically send packets to Suricata in C

How would one go about sending packets to Suricata 7 via C code? I’ve looked around in the source code for a while. I’ve gotten a bit confused with how a packet is initially received, sent to the engine and then classified as triggering a rule or not. Also, Suricata would be run in process. It would not be a separate service or a process. An example of what the C method might look like would be: int process_packet(void* data, int data_len, int tenant, struct suricata_rules* rules); The defini…

[ish (Jason Ish)]

You can follow this PR, and next revisions of it: [draft] lib: example usage and "lib" runmode - v4 by jasonish · Pull Request #11711 · OISF/suricata · GitHub

You’ll want to look at the example program: [draft] lib: example usage and "lib" runmode - v4 by jasonish · Pull Request #11711 · OISF/suricata · GitHub

It is still work in progress though.