Rusticata is a test crate for network protocol parsers written in Rust.
It was written to show to feasibility of the implementation of safe and efficient parsers
in suricata. The real parsing code is now part of suricata (starting from
version 4.0), and must be configured using the --enable-rust flag.
This project is now a playground for testing parsers, features and code.
This project is based on:
- nom a Rust parser combinator framework
- Many parsers from the rusticata project
Run cargo build for a build in debug mode, cargo build --release for release mode.
Use cargo install to install the library, or set the LD_LIBRARY_PATH environment variable.
rusticata is mostly used to decode application layers in the
pcap-analyzer project.
See its documentation for examples.
This library is licensed under the GNU Lesser General Public License version 2.1, or (at your option) any later version.