https://github.com/jasonish/suricatax-rule-parser-rs

https://github.com/jasonish/suricatax-rule-parser-rs

Last synced: about 2 months ago
JSON representation

• Host: GitHub
• URL: https://github.com/jasonish/suricatax-rule-parser-rs
• Owner: jasonish
• License: apache-2.0
• Created: 2021-10-28T14:19:54.000Z (almost 3 years ago)
• Default Branch: main
• Last Pushed: 2024-05-09T17:50:53.000Z (4 months ago)
• Last Synced: 2024-05-09T19:09:04.323Z (4 months ago)
• Language: Rust
• Size: 79.1 KB
• Stars: 7
• Watchers: 3
• Forks: 2
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE-APACHE

Awesome Lists containing this project

• awesome-suricata - rust-suricatax-rule-parser - Experimental Suricata Rule Parser in Rust. (Programming Libraries and Toolkits)

README

        
# Experimental Suricata Rule Parser in Rust

This is an experimental Suricata rule parser that is trying to represent rules

in a format somewhat like an abstract rule parser. It could remove the low level

details of rule parsing from applications, leaving the application to apply

meaning to structured rule elements.

## Tools

### rjs

`rjs` is an example application that can convert rules to JSON or YAML. This

isn't hard to do once rules are parsed into Rust data structures. Leveraging the

power of Serde, it is easy to convert the rules to JSON or YAML.

Example usage:

```

cargo run -p rjs -- /var/lib/suricata/rules/suricata.rules | jq

```