spelling corrections documented in redmine bug#533

pull/40/head
pi-rho 13 years ago
parent 408548c2c4
commit 0df4c5838d

@ -1710,7 +1710,7 @@ char *htp_tx_progress_as_string(htp_tx_t *tx) {
return "DONE"; return "DONE";
} }
return "UNKOWN"; return "UNKNOWN";
} }
bstr *htp_unparse_uri_noencode(htp_uri_t *uri) { bstr *htp_unparse_uri_noencode(htp_uri_t *uri) {

@ -21,7 +21,7 @@
* \author Eric Leblond <eric@regit.org> * \author Eric Leblond <eric@regit.org>
* *
* Logs alerts in a line based text format suitable for interaction * Logs alerts in a line based text format suitable for interaction
* with wireshark or an other pcap file analysis tools. * with wireshark or another pcap file analysis tools.
* *
* The format of the logging is: * The format of the logging is:
* Packet number:GID of matching signature:SID of signature:REV of signature:Flow:To Server:To Client:0:0:Signature Message * Packet number:GID of matching signature:SID of signature:REV of signature:Flow:To Server:To Client:0:0:Signature Message

@ -76,7 +76,7 @@ static int DetectDepthSetup (DetectEngineCtx *de_ctx, Signature *s, char *depths
DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_PMATCH]); DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_PMATCH]);
if (pm == NULL) { if (pm == NULL) {
SCLogError(SC_ERR_DEPTH_MISSING_CONTENT, "depth needs " SCLogError(SC_ERR_DEPTH_MISSING_CONTENT, "depth needs "
"preceeding content option for dcerpc sig"); "preceding content option for dcerpc sig");
if (dubbed) if (dubbed)
SCFree(str); SCFree(str);
return -1; return -1;
@ -100,7 +100,7 @@ static int DetectDepthSetup (DetectEngineCtx *de_ctx, Signature *s, char *depths
DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_HUADMATCH]); DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_HUADMATCH]);
if (pm == NULL) { if (pm == NULL) {
SCLogError(SC_ERR_DEPTH_MISSING_CONTENT, "depth needs " SCLogError(SC_ERR_DEPTH_MISSING_CONTENT, "depth needs "
"preceeding content, uricontent option, http_client_body, " "preceding content, uricontent option, http_client_body, "
"http_server_body, http_header option, http_raw_header option, " "http_server_body, http_header option, http_raw_header option, "
"http_method option, http_cookie, http_raw_uri, " "http_method option, http_cookie, http_raw_uri, "
"http_stat_msg, http_stat_code or http_user_agent option"); "http_stat_msg, http_stat_code or http_user_agent option");
@ -177,7 +177,7 @@ static int DetectDepthSetup (DetectEngineCtx *de_ctx, Signature *s, char *depths
break; break;
default: default:
SCLogError(SC_ERR_DEPTH_MISSING_CONTENT, "depth needs a preceeding " SCLogError(SC_ERR_DEPTH_MISSING_CONTENT, "depth needs a preceding "
"content (or uricontent) option"); "content (or uricontent) option");
goto error; goto error;
} }

@ -175,7 +175,7 @@ static int DetectDistanceSetup (DetectEngineCtx *de_ctx, Signature *s,
DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_HUADMATCH]); DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_HUADMATCH]);
if (pm == NULL) { if (pm == NULL) {
SCLogError(SC_ERR_WITHIN_MISSING_CONTENT, "within needs " SCLogError(SC_ERR_WITHIN_MISSING_CONTENT, "within needs "
"preceeding content, uricontent option, http_client_body, " "preceding content, uricontent option, http_client_body, "
"http_server_body, http_header, http_raw_header, http_method, " "http_server_body, http_header, http_raw_header, http_method, "
"http_cookie, http_raw_uri, http_stat_msg, http_stat_code " "http_cookie, http_raw_uri, http_stat_msg, http_stat_code "
"or http_user_agent option"); "or http_user_agent option");
@ -193,7 +193,7 @@ static int DetectDistanceSetup (DetectEngineCtx *de_ctx, Signature *s,
cd = (DetectContentData *)pm->ctx; cd = (DetectContentData *)pm->ctx;
if (cd == NULL) { if (cd == NULL) {
SCLogError(SC_ERR_DISTANCE_MISSING_CONTENT, "distance needs two " SCLogError(SC_ERR_DISTANCE_MISSING_CONTENT, "distance needs two "
"preceeding content or uricontent options"); "preceding content or uricontent options");
goto error; goto error;
} }
@ -305,7 +305,7 @@ static int DetectDistanceSetup (DetectEngineCtx *de_ctx, Signature *s,
default: default:
SCLogError(SC_ERR_DISTANCE_MISSING_CONTENT, "distance needs two " SCLogError(SC_ERR_DISTANCE_MISSING_CONTENT, "distance needs two "
"preceeding content or uricontent options"); "preceding content or uricontent options");
goto error; goto error;
} }

@ -231,7 +231,7 @@ DetectDsizeData *DetectDsizeParse (char *rawstr)
} }
} }
SCLogDebug("dsize parsed succesfully dsize: %"PRIu16" dsize2: %"PRIu16"",dd->dsize,dd->dsize2); SCLogDebug("dsize parsed successfully dsize: %"PRIu16" dsize2: %"PRIu16"",dd->dsize,dd->dsize2);
SCFree(value1); SCFree(value1);
SCFree(mode); SCFree(mode);

@ -1284,7 +1284,7 @@ void SigGroupHeadPrintContentCnt(DetectEngineCtx *de_ctx, SigGroupHead *sgh)
* \param sgh Pointer to the SigGroupHead. * \param sgh Pointer to the SigGroupHead.
* *
* \retval 0 On success, i.e. on either the detection engine context being NULL * \retval 0 On success, i.e. on either the detection engine context being NULL
* or on succesfully allocating memory and updating it with relevant * or on successfully allocating memory and updating it with relevant
* data. * data.
* \retval -1 On failure. * \retval -1 On failure.
*/ */
@ -1364,7 +1364,7 @@ int SigGroupHeadClearContent(SigGroupHead *sh)
* \param sgh Pointer to the SigGroupHead. * \param sgh Pointer to the SigGroupHead.
* *
* \retval 0 On success, i.e. on either the detection engine context being NULL * \retval 0 On success, i.e. on either the detection engine context being NULL
* or on succesfully allocating memory and updating it with relevant * or on successfully allocating memory and updating it with relevant
* data. * data.
* \retval -1 On failure. * \retval -1 On failure.
*/ */
@ -1444,7 +1444,7 @@ int SigGroupHeadClearUricontent(SigGroupHead *sh)
* \param sgh Pointer to the SigGroupHead. * \param sgh Pointer to the SigGroupHead.
* *
* \retval 0 On success, i.e. on either the detection engine context being NULL * \retval 0 On success, i.e. on either the detection engine context being NULL
* or on succesfully allocating memory and updating it with relevant * or on successfully allocating memory and updating it with relevant
* data. * data.
* \retval -1 On failure. * \retval -1 On failure.
*/ */

@ -169,7 +169,7 @@ static int DetectHttpCookieSetup (DetectEngineCtx *de_ctx, Signature *s, char *s
s->sm_lists_tail[DETECT_SM_LIST_HCDMATCH]); s->sm_lists_tail[DETECT_SM_LIST_HCDMATCH]);
if (pm == NULL) { if (pm == NULL) {
SCLogError(SC_ERR_HTTP_COOKIE_RELATIVE_MISSING, "http_cookie with " SCLogError(SC_ERR_HTTP_COOKIE_RELATIVE_MISSING, "http_cookie with "
"a distance or within requires preceeding http_cookie " "a distance or within requires preceding http_cookie "
"content, but none was found"); "content, but none was found");
goto error; goto error;
} }

@ -103,7 +103,7 @@ static int DetectHttpMethodSetup(DetectEngineCtx *de_ctx, Signature *s, char *st
if (s->sm_lists_tail[DETECT_SM_LIST_PMATCH] == NULL) { if (s->sm_lists_tail[DETECT_SM_LIST_PMATCH] == NULL) {
SCLogError(SC_ERR_HTTP_METHOD_NEEDS_PRECEEDING_CONTENT, "http_method " SCLogError(SC_ERR_HTTP_METHOD_NEEDS_PRECEEDING_CONTENT, "http_method "
"modifies preceeding \"content\", but none was found"); "modifies preceding \"content\", but none was found");
SCReturnInt(-1); SCReturnInt(-1);
} }
@ -111,7 +111,7 @@ static int DetectHttpMethodSetup(DetectEngineCtx *de_ctx, Signature *s, char *st
DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_PMATCH]); DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_PMATCH]);
if (sm == NULL) { if (sm == NULL) {
SCLogError(SC_ERR_HTTP_METHOD_NEEDS_PRECEEDING_CONTENT, "http_method " SCLogError(SC_ERR_HTTP_METHOD_NEEDS_PRECEEDING_CONTENT, "http_method "
"modifies preceeding \"content\", but none was found"); "modifies preceding \"content\", but none was found");
SCReturnInt(-1); SCReturnInt(-1);
} }
@ -152,7 +152,7 @@ static int DetectHttpMethodSetup(DetectEngineCtx *de_ctx, Signature *s, char *st
s->sm_lists_tail[DETECT_SM_LIST_HMDMATCH]); s->sm_lists_tail[DETECT_SM_LIST_HMDMATCH]);
if (pm == NULL) { if (pm == NULL) {
SCLogError(SC_ERR_HTTP_METHOD_RELATIVE_MISSING, "http_method with " SCLogError(SC_ERR_HTTP_METHOD_RELATIVE_MISSING, "http_method with "
"a distance or within requires preceeding http_method " "a distance or within requires preceding http_method "
"content, but none was found"); "content, but none was found");
goto error; goto error;
} }

@ -88,7 +88,7 @@ static int DetectNocaseSetup (DetectEngineCtx *de_ctx, Signature *s, char *nulls
DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_HCDMATCH], DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_HCDMATCH],
DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_HUADMATCH]); DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_HUADMATCH]);
if (pm == NULL) { if (pm == NULL) {
SCLogError(SC_ERR_NOCASE_MISSING_PATTERN, "\"nocase\" needs a preceeding " SCLogError(SC_ERR_NOCASE_MISSING_PATTERN, "\"nocase\" needs a preceding "
"content, uricontent, http_client_body, http_server_body, " "content, uricontent, http_client_body, http_server_body, "
"http_header, http_method, http_uri, http_cookie, " "http_header, http_method, http_uri, http_cookie, "
"http_raw_uri, http_stat_msg, http_stat_code or http_user_agent " "http_raw_uri, http_stat_msg, http_stat_code or http_user_agent "
@ -115,7 +115,7 @@ static int DetectNocaseSetup (DetectEngineCtx *de_ctx, Signature *s, char *nulls
break; break;
/* should never happen */ /* should never happen */
default: default:
SCLogError(SC_ERR_NOCASE_MISSING_PATTERN, "\"nocase\" needs a preceeding " SCLogError(SC_ERR_NOCASE_MISSING_PATTERN, "\"nocase\" needs a preceding "
"content, uricontent, http_client_body, http_server_body, " "content, uricontent, http_client_body, http_server_body, "
"http_header, http_method, http_uri, http_cookie or " "http_header, http_method, http_uri, http_cookie or "
"http_raw_uri option"); "http_raw_uri option");

@ -74,7 +74,7 @@ int DetectOffsetSetup (DetectEngineCtx *de_ctx, Signature *s, char *offsetstr)
DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_PMATCH]); DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_PMATCH]);
if (pm == NULL) { if (pm == NULL) {
SCLogError(SC_ERR_OFFSET_MISSING_CONTENT, "offset needs " SCLogError(SC_ERR_OFFSET_MISSING_CONTENT, "offset needs "
"preceeding content option for dcerpc sig"); "preceding content option for dcerpc sig");
if (dubbed) if (dubbed)
SCFree(str); SCFree(str);
return -1; return -1;
@ -98,7 +98,7 @@ int DetectOffsetSetup (DetectEngineCtx *de_ctx, Signature *s, char *offsetstr)
DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_HUADMATCH]); DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_HUADMATCH]);
if (pm == NULL) { if (pm == NULL) {
SCLogError(SC_ERR_OFFSET_MISSING_CONTENT, "offset needs " SCLogError(SC_ERR_OFFSET_MISSING_CONTENT, "offset needs "
"preceeding content or uricontent option, http_client_body, " "preceding content or uricontent option, http_client_body, "
"http_header, http_raw_header, http_method, " "http_header, http_raw_header, http_method, "
"http_cookie, http_raw_uri, http_stat_msg, " "http_cookie, http_raw_uri, http_stat_msg, "
"http_stat_code or http_user_agent option"); "http_stat_code or http_user_agent option");
@ -176,7 +176,7 @@ int DetectOffsetSetup (DetectEngineCtx *de_ctx, Signature *s, char *offsetstr)
break; break;
default: default:
SCLogError(SC_ERR_OFFSET_MISSING_CONTENT, "offset needs a preceeding" SCLogError(SC_ERR_OFFSET_MISSING_CONTENT, "offset needs a preceding"
" content keyword"); " content keyword");
goto error; goto error;
} }

@ -1068,7 +1068,7 @@ static int SigValidate(Signature *s) {
DETECT_BYTEJUMP, sm->prev); DETECT_BYTEJUMP, sm->prev);
if (pm == NULL) { if (pm == NULL) {
SCLogError(SC_ERR_DISTANCE_MISSING_CONTENT, "within needs two " SCLogError(SC_ERR_DISTANCE_MISSING_CONTENT, "within needs two "
"preceeding content or uricontent options"); "preceding content or uricontent options");
SCReturnInt(0); SCReturnInt(0);
} else { } else {
break; break;

@ -67,7 +67,7 @@ static int DetectRawbytesSetup (DetectEngineCtx *de_ctx, Signature *s, char *nul
SigMatch *pm = SigMatchGetLastSMFromLists(s, 2, SigMatch *pm = SigMatchGetLastSMFromLists(s, 2,
DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_PMATCH]); DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_PMATCH]);
if (pm == NULL) { if (pm == NULL) {
SCLogError(SC_ERR_RAWBYTES_MISSING_CONTENT, "\"rawbytes\" needs a preceeding content option"); SCLogError(SC_ERR_RAWBYTES_MISSING_CONTENT, "\"rawbytes\" needs a preceding content option");
SCReturnInt(-1); SCReturnInt(-1);
} }
@ -83,7 +83,7 @@ static int DetectRawbytesSetup (DetectEngineCtx *de_ctx, Signature *s, char *nul
break; break;
} }
default: default:
SCLogError(SC_ERR_RAWBYTES_MISSING_CONTENT, "\"rawbytes\" needs a preceeding content option"); SCLogError(SC_ERR_RAWBYTES_MISSING_CONTENT, "\"rawbytes\" needs a preceding content option");
SCReturnInt(-1); SCReturnInt(-1);
} }

@ -103,7 +103,7 @@ int DetectReplaceSetup(DetectEngineCtx *de_ctx, Signature *s, char *replacestr)
DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_PMATCH]); DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_PMATCH]);
if (pm == NULL) { if (pm == NULL) {
SCLogError(SC_ERR_WITHIN_MISSING_CONTENT, "replace needs" SCLogError(SC_ERR_WITHIN_MISSING_CONTENT, "replace needs"
"preceeding content option for raw sig"); "preceding content option for raw sig");
SCFree(str); SCFree(str);
return -1; return -1;
} }

@ -178,7 +178,7 @@ static int DetectWithinSetup (DetectEngineCtx *de_ctx, Signature *s, char *withi
DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_HUADMATCH]); DETECT_CONTENT, s->sm_lists_tail[DETECT_SM_LIST_HUADMATCH]);
if (pm == NULL) { if (pm == NULL) {
SCLogError(SC_ERR_WITHIN_MISSING_CONTENT, "\"within\" requires " SCLogError(SC_ERR_WITHIN_MISSING_CONTENT, "\"within\" requires "
"preceeding content, uricontent, http_client_body, " "preceding content, uricontent, http_client_body, "
"http_server_body, http_header, http_raw_header, " "http_server_body, http_header, http_raw_header, "
"http_method, http_cookie, http_raw_uri, " "http_method, http_cookie, http_raw_uri, "
"http_stat_msg, http_stat_code or http_user_agent " "http_stat_msg, http_stat_code or http_user_agent "
@ -307,7 +307,7 @@ static int DetectWithinSetup (DetectEngineCtx *de_ctx, Signature *s, char *withi
default: default:
SCLogError(SC_ERR_WITHIN_MISSING_CONTENT, "within needs two " SCLogError(SC_ERR_WITHIN_MISSING_CONTENT, "within needs two "
"preceeding content or uricontent options"); "preceding content or uricontent options");
goto error; goto error;
} }

@ -698,7 +698,7 @@ int SigLoadSignatures(DetectEngineCtx *de_ctx, char *sig_file, int sig_file_excl
} }
} else { } else {
/* we report the total of files and rules successfully loaded and failed */ /* we report the total of files and rules successfully loaded and failed */
SCLogInfo("%" PRId32 " rule files processed. %" PRId32 " rules succesfully loaded, %" PRId32 " rules failed", cntf, cnt, sigtotal-cnt); SCLogInfo("%" PRId32 " rule files processed. %" PRId32 " rules successfully loaded, %" PRId32 " rules failed", cntf, cnt, sigtotal-cnt);
} }
if (ret < 0 && de_ctx->failure_fatal) { if (ret < 0 && de_ctx->failure_fatal) {

@ -191,7 +191,7 @@ void *ParseAFPConfig(const char *iface)
aconf->iface); aconf->iface);
ConfGetChildValueBool(if_root, "defrag", (int *)&defrag); ConfGetChildValueBool(if_root, "defrag", (int *)&defrag);
if (defrag) { if (defrag) {
SCLogInfo("Using defrag kernel functionnality for AF_PACKET (iface %s)", SCLogInfo("Using defrag kernel functionality for AF_PACKET (iface %s)",
aconf->iface); aconf->iface);
defrag = PACKET_FANOUT_FLAG_DEFRAG; defrag = PACKET_FANOUT_FLAG_DEFRAG;
} }

@ -1035,7 +1035,7 @@ SCLogOPIfaceCtx *SCLogInitOPIfaceCtx(const char *iface_name,
if (log_level < SC_LOG_NONE || log_level > SC_LOG_DEBUG) { if (log_level < SC_LOG_NONE || log_level > SC_LOG_DEBUG) {
#ifndef UNITTESTS #ifndef UNITTESTS
printf("Warning: Supplied log_level_override for op_interface \"%s\" " printf("Warning: Supplied log_level_override for op_interface \"%s\" "
"is invalid. Defaulting to not specifing an override\n", "is invalid. Defaulting to not specifying an override\n",
iface_name); iface_name);
#endif #endif
log_level = SC_LOG_NOTSET; log_level = SC_LOG_NOTSET;

@ -74,7 +74,7 @@ int RunModeSetLiveCaptureAuto(DetectEngineCtx *de_ctx,
if (ModThreadsCount(aconf) > 1) { if (ModThreadsCount(aconf) > 1) {
SCLogWarning(SC_ERR_UNIMPLEMENTED, "'Auto' running mode does not honor 'threads'" SCLogWarning(SC_ERR_UNIMPLEMENTED, "'Auto' running mode does not honor 'threads'"
" variable (set on '%s'). Please use an other mode as" " variable (set on '%s'). Please use another mode as"
" 'autofp' or 'worker'", " 'autofp' or 'worker'",
live_dev); live_dev);
} }
@ -125,7 +125,7 @@ int RunModeSetLiveCaptureAuto(DetectEngineCtx *de_ctx,
if (ModThreadsCount(aconf) > 1) { if (ModThreadsCount(aconf) > 1) {
SCLogWarning(SC_ERR_UNIMPLEMENTED, "'Auto' running mode does not honor 'threads'" SCLogWarning(SC_ERR_UNIMPLEMENTED, "'Auto' running mode does not honor 'threads'"
" variable (set on '%s'). Please use an other mode as" " variable (set on '%s'). Please use another mode as"
" 'autofp' or 'worker'", " 'autofp' or 'worker'",
live_dev); live_dev);
} }

@ -84,7 +84,7 @@ outputs:
# a line based log to used with pcap file study. # a line based log to used with pcap file study.
# this module is dedicated to offline pcap parsing (empty output # this module is dedicated to offline pcap parsing (empty output
# if used with an other kind of input). It can interoperate with # if used with another kind of input). It can interoperate with
# pcap parser like wireshark via the suriwire plugin. # pcap parser like wireshark via the suriwire plugin.
- pcap-info: - pcap-info:
enabled: no enabled: no

Loading…
Cancel
Save