go-suricata

gonids

gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/

suricataparser

Pure python parser for Snort/Suricata rules.

rust-suricatax-rule-parser

This project is an experimental Suricata rule parser written in Rust, designed to abstract away low-level parsing details and provide structured rule representations. It enables applications to work with rule elements in a meaningful way without dealing with raw rule syntax. ## Key Features - **Structured Rule Representation** — Parses Suricata rules into Rust data structures, removing low-level parsing complexity. - **JSON/YAML Conversion** — Leverages Serde to easily convert parsed rules into JSON or YAML formats via the included `rjs` tool. - **Abstract Rule Parsing** — Provides a higher-level abstraction over rule elements, allowing applications to focus on applying meaning to structured data. ## Philosophy The parser aims to simplify Suricata rule processing by offering a clean, structured interface that abstracts parsing details, making it easier to integrate rule analysis into other applications.