Suricata
1. What is Suricata
2. Quickstart guide
3. Installation
4. Upgrading
5. Security Considerations
6. Support Status
7. Command Line Options
8. Suricata Rules
9. Rule Management
10. Making sense out of Alerts
11. Performance
12. Configuration
13. Reputation
14. Init Scripts
15. Output
16. Lua support
17. File Extraction
18. Public Data Sets
19. Using Capture Hardware
20. Interacting via Unix Socket
21. Plugins
22. IPS Mode
23. Firewall Mode
24. 3rd Party Integration
25. Man Pages
26. Acknowledgements
27. Licenses
28. Suricata Developer Guide
28.1. Working with the Codebase
28.2. Contributing
28.3. Suricata Internals
28.4. Extending Suricata
28.4.1. Packet Capture
28.4.2. Packet Decoder
28.4.3. App-Layer
28.4.3.1. Application Layer Overview
28.4.3.2. Application Layer Frame Support
28.4.3.3. Parsers
28.4.3.4. Transactions
28.4.4. Detection
28.4.5. Output
28.5. LibSuricata and Plugins
28.6. Upgrading
29. Verifying Suricata Source Distribution Files
30. Appendix
Suricata
28.
Suricata Developer Guide
28.4.
Extending Suricata
28.4.3.
App-Layer
View page source
28.4.3.
App-Layer
28.4.3.1. Application Layer Overview
28.4.3.1.1. Parser
28.4.3.1.2. Logger
28.4.3.1.3. Detection engine
28.4.3.2. Application Layer Frame Support
28.4.3.2.1. Baseline
28.4.3.2.2. General Concepts
28.4.3.2.3. Adding Frame Support to a Parser
28.4.3.2.4. Visual context
28.4.3.3. Parsers
28.4.3.3.1. Callbacks
28.4.3.3.2. Return Types
28.4.3.4. Transactions
28.4.3.4.1. General Concepts
28.4.3.4.2. How the engine uses transactions
28.4.3.4.3. Progress Tracking
28.4.3.4.4. Examples
28.4.3.4.5. Work In Progress changes
28.4.3.4.6. Common words and abbreviations