Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[IDEA] Implement callbacks for specific signal handling in filters #206

Open
frikilax opened this issue Oct 1, 2020 · 0 comments
Open
Labels
enhancement New feature or request

Comments

@frikilax
Copy link
Member

frikilax commented Oct 1, 2020

What is your feature about ?
It would be nice to be able to register callback functions to trigger specific functionalities when signals are received.

Describe what you'd like
the handling of signals is currently handled by the core, to reopen file descriptors in the Logger after a log rotate.
There are some (many) use-cases when it would be interesting to reopen other files/update models and internal memory maps when a signal is sent to a filter:

  • reload hostlookup maps
  • reload DGA tensorflow model
  • reload yara rules
  • ...

This would prevent users from restarting filters when a file is updated.

Additional context
The functionality could take the form of a Core interface defining and using a list of callbacks to call on each signal, with the ability to add callbacks depending on the needs.

@frikilax frikilax added the enhancement New feature or request label Oct 1, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant