183 Commits (master)

Author	SHA1	Message	Date
Victor Julien	1eed3f2233	ipv6: add event for ipv6 packet with icmpv4 header	12 years ago
Victor Julien	150b0c5ae0	ipv6: add option to detect HOP/DST headers with only padding. Detect unknown DST/HOP opts.	12 years ago
Victor Julien	9f519e95a2	http: add event for libhtp detection of request port not matching tcp port.	12 years ago
Victor Julien	e1321f9ae6	stream: change how retransmissions are handled and detected.	13 years ago
Victor Julien	3f6ecff260	stream: disable retransmission packet before last ack sig as it is fairly common in regular traffic	13 years ago
Victor Julien	bc37cb6b8e	stream: detect retransmissions on closewait and finwait2 states	13 years ago
Victor Julien	9094eb4783	stream: ignore ack value if ack flag is not set. Add stream.pkt_broken_ack event for when ack value is not 0 and ack flag not set.	13 years ago
Victor Julien	6f76ac176d	stream: add option to match on overlapping data ... Set event on overlapping data segments that have different data. Add stream-events option stream-event:reassembly_overlap_different_data and add an example rule. Issue 603.	13 years ago
Eric Leblond	def0270de7	decode: decode IPv6-in-IPv6 ... This patch adds decoding of IPv6-in-IPv6. It also adds some events for invalid packets. This patch should fix #514.	13 years ago
Eric Leblond	09fa0b9542	Add support for IPv4-in-IPv6 ... This patch adds support for IPv4-in-IPv6 and should fix #462.	13 years ago
Victor Julien	c44f4c13fc	stream: improve TCP flags handling	13 years ago
Victor Julien	e3764b90c3	tls: debug compilation fixes, new tls decoder rule for tls.error_message_encountered event.	13 years ago
Victor Julien	b976ff228a	ipv6: fix an AH header parsing issue. Add decoder event for non-null reserved fields.	13 years ago
Victor Julien	887b4e0b6a	Disable some stream rules by default, fix sid no typo.	13 years ago
Victor Julien	e624c56c83	Add TLS decoder event rule file.	13 years ago
Victor Julien	374947c354	ipv6: properly deal with packets containing a FH header that has offset 0 and no more frags flag set.	13 years ago
Victor Julien	aded3c5578	http: 'HTTP Host header ambiguous' after libhtp update. It now fires if hostname is present both in URL and Host header and the 2 are not equal.	13 years ago
Victor Julien	e21d8cdf01	file extract: improve multipart parsing and set events on some error conditions.	13 years ago
Victor Julien	93df717aa9	Add files.rules to the dist.	13 years ago
Victor Julien	93d121bf21	Update app layer events for HTTP now that libhtp has fixes for some response errors.	13 years ago
Victor Julien	ea34aeff3d	Add missing Makefile.am files for rules/ and doc/ dir.	13 years ago
Victor Julien	132d9d1789	Add http-events.rules with an example rule for each HTTP event.	13 years ago
Victor Julien	5a1a443701	Add example smtp decoding events rules file.	13 years ago
Victor Julien	fd4e1460cf	Add checksum validation rules to decoder events rules.	13 years ago
Victor Julien	ddfa5c49c6	Stream engine: gap handling ... Set a stream event for stream gaps. Add a (disabled by default) signature to the stream-event.rules.	13 years ago
Victor Julien	b3e1679321	file handling: add example files.rules file ... Adding a rule file with various examples for using the fileext, filename, filemagic and filestore keywords.	13 years ago
Victor Julien	d9ad1b00b3	Clean up SID allocation for decoder and stream rules.	13 years ago
Eric Leblond	552c6731b2	Add signature file for stream events. ... This patch adds a rules/stream-events.rules file which contains alert related to all stream events.	14 years ago
Victor Julien	83c3f15812	Minor fixes in defrag engine, shrink DefragTracker_ structure.	14 years ago
Jason Ish	0385f72669	Use separate frag decoder events for IPv4 and IPv6.	14 years ago
Jason Ish	de1c40c44f	Set decoder event on fragment overlaps.	14 years ago
Jason Ish	6da9c64a28	Set decoder event when re-assembled fragments would exceed max IP packet size.	14 years ago
Victor Julien	6a048f2d69	Include initial version of decoder-event rules.	14 years ago