Feature request: Suricata Rules

When teaching or assisting with Suricata rule development, I often cannot test the Suricata rule against example PCAP.

Adding Suricata WASM to CyberChef could help with network detection development, similar to how CyberChef helps with YARA rules.

More robust solutions like running tests with an IDE that is using Docker/Suricata to assist with rule creation are not always available.

Start by reviewing CyberChef’s existing YARA-rule support and assessing how Suricata WASM could be integrated. Define how users would provide example PCAP data and Suricata rules, and consider the work complete when rules can be tested against PCAP examples within CyberChef.

Written by the indexing model from the issue text.