Victor Julien
01cea2ec89
datasets: suppress noisy debug statement
7 years ago
Victor Julien
505b2dd256
log-pcap: don't print (null) for compression method
7 years ago
Victor Julien
fb26268c6b
tcp: don't set event on empty SACK opt
...
TCP_OPT_INVALID_LEN was set if the opt len was 2. While useless
an empty SACK is not uncommon.
Seen on an iOS device talking to an Apple server.
Bug #3254 .
7 years ago
Victor Julien
aae76a84cd
suricata: use version from autoconf
7 years ago
Eric Leblond
9ef2f81ee7
doc/userguide: fix typo
7 years ago
Eric Leblond
821d590f5b
doc/userguide: fix base64 example
...
Add a sticky buffer example and fix the content modifier one.
7 years ago
Eric Leblond
2d11e9394c
detect-base64: fix url in list keywords commands
7 years ago
Pascal Delalande
8e6a2bd42e
doc: removal of disable-rust and path typo for suricatasc
7 years ago
Jason Ish
6eada54fc8
eve/dns: don't log warning if dns log version not set
...
If the DNS log version is not set, we default to v2. This should
not be warning, but better logged at the config level.
A warning will still be logged if the value is set but is not
1 or 2.
7 years ago
Philippe Antoine
989a6461b0
signature: leak fix in DetectAddressParse2
7 years ago
Philippe Antoine
c1e41632c1
config: use logging instead of stderr
7 years ago
Wesley van der Ree
bf1b65558b
mpls: Allow MPLS after vlan.
...
Fixes #2771
7 years ago
Victor Julien
7cca9005fb
dns: minor cleanup
7 years ago
Victor Julien
4164c0bbd6
app-layer: make dns,smb,tls parsers less noisy w/o config
7 years ago
Victor Julien
0526878fee
detect/tls: set alternatives for legacy tls keywords
7 years ago
Victor Julien
3019f10ac7
detect/tls: tls.cert_fingerprint is a sticky buffer
...
Not a content modifier.
7 years ago
Victor Julien
d5ae68afc2
doc: fix version in install doc
7 years ago
Victor Julien
1c27a99827
doc: add upgrade page
7 years ago
Victor Julien
697410cbbf
changelog: update for 5.0.0
7 years ago
Victor Julien
3b5b71afa0
changelog: update 5.0rc1 section with missing entries
7 years ago
Jason Ish
412ae11bad
automake: use tar-ustar for longer filenames
...
According to the automake manual it should be considered
portable these days.
https://www.gnu.org/software/automake/manual/html_node/List-of-Automake-options.html
Required for the dist generation with Rust vendoring.
7 years ago
Jason Ish
718fcbb682
doc: document eve/dns v2 as the default
...
Adds eve/dns v2 format documentation. Update legacy format
to require the version field.
7 years ago
Jason Ish
16221c0b33
suricata.yaml/dns: small cleanups, not that default is v2
...
Note that the eve dns log format is version 2 by default.
Make the value of commented out values their default.
Update the comment on the types to better reflect what it does.
7 years ago
Jeff Lucovsky
42452b327c
mem: Use correct len with strlcpy
7 years ago
Fabrice Fontaine
b026fbb519
configure.ac: fix static build with pcap
...
pcap can depends on nl-3 so use pkg-config to find these dependencies
otherwise all AC_CHECK_LIB calls will fail when building statically
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
7 years ago
Jason Ish
8cf4afabc3
Makefile: prefix suricata-update error with @
...
So only the echo output is displayed. Not the lines themselves.
7 years ago
Jason Ish
03da49bfaa
suricata-update: don't install if requirements not met
...
Don't try to run suricata-update if its not installed.
The 'make install-rules' target would try to run suricata-update
when it was detected that it was bundled, but didn't consider
if suricata-update was actually installed.
7 years ago
Victor Julien
d19ded6c43
stream: fix progress for min_inspect_depth
...
Make sure progress don't exceed raw_progress.
7 years ago
Victor Julien
5f15e7c6a4
smtp: implement min_inspect_depth logic
...
Implement min_inspect_depth for SMTP so that file_data and
regular stream matches don't go out of sync on the stream start.
Added toserver bytes tracking.
Bug #3190 .
7 years ago
Victor Julien
58e48bcb87
debug: make it easier to trace flush logic
7 years ago
Victor Julien
728d19eaac
configure: don't print ERROR if we don't exit
7 years ago
Victor Julien
876f05aa28
eve/dhcp: remove leftover template comments
7 years ago
Victor Julien
9716c24ba1
eve/alert: clean up proto metadata
...
Use a switch statement to select the protocol specific function.
7 years ago
Victor Julien
f66e12f7af
dns: rename rust files and funcs
7 years ago
Victor Julien
842037d327
jansson: remove explicit <jansson.h> includes
...
Header is included from suricata-common.h
7 years ago
Victor Julien
edd2cd626f
jansson: remove HAVE_LIBJANSSON guards
7 years ago
Victor Julien
b4318a11e3
rust: remove build system HAVE_RUST guards
7 years ago
Victor Julien
5e9714e384
rust: remove all HAVE_RUST guards
7 years ago
Philippe Antoine
6921608673
http: updates suricata.yaml comments
...
As well as the userguide documentation about suricata.yaml
7 years ago
Jason Ish
c44f82cf4c
configure: fix python major version check on python 2.6
...
Python 2.6 doesn't use a named tuple for the version info,
instead use the index of the major version which works
on Python 2.6 upwards.
7 years ago
Jason Ish
a3cdef2b4d
rust: run tests with same features as build
...
Cargo check wasn't being passed --features so could have a different
configuration than the build.
7 years ago
Jason Ish
389272f4c7
rustup: handle rustup for sudo and su
...
If rustup is in use, and a user uses sudo or su for the make
install, the install may fail with a "no default toolchain"
error.
To prevent this, detect at configure if rustup is being used,
then set RUSTUP_HOME for all calls to cargo.
7 years ago
Jason Ish
1b6eee829f
python: fixes for installing from path with spaces
...
Related to Redmine issue:
https://redmine.openinfosecfoundation.org/issues/2668
7 years ago
Jason Ish
6e981fd15a
rust: fix build when source directory has spaces in it
...
Redmine issue:
https://redmine.openinfosecfoundation.org/issues/2668
7 years ago
Jason Ish
a1ee536daa
configure: no, followed by reason for python tools
...
This:
Install suricatactl: no, requires distutils
instead of this:
Install suricatasc: requires distutils
7 years ago
Jason Ish
109cf36866
configure: generic instructions for missing python modules
...
Instead of telling the user what packages to install for missing
Python modules, give generic instructions about what module
needs to be installed.
It is getting tricky to get these package names correct
across distributions.
7 years ago
Jason Ish
26dcef1290
suricata-update: build before install
...
Run the Python build independent of install. Prevents files
in the tree becoming owned by root.
7 years ago
Jason Ish
c4b856ea99
configure: detect python major version
...
For informational purposes only when notifying what Python
modules are required during ./configure.
7 years ago
Jason Ish
00ad7a911f
configure: don't detect python version
...
Don't detect the Python version, it is not needed anyways,
all we need is the Python path.
Also, python2 --version prints to stderr, while python3
prints to stdout, leading to some odd output during
./configure (but fixable).
7 years ago
Jason Ish
9111b9df57
doc: cleanup enging logging
...
Attempt cleanup the engine logging a bit.
Also a include a verbatim excerpt of the default configuration
here for reference purposes.
7 years ago