108 Commits (031cbbe8689cccd34ae20707c19d9a578c1c011c)

Author	SHA1	Message	Date
Eric Leblond	e176be6fcc	Use unlikely for error treatment. ... When handling error case on SCMallog, SCCalloc or SCStrdup we are in an unlikely case. This patch adds the unlikely() expression to indicate this to gcc. This patch has been obtained via coccinelle. The transformation is the following: @istested@ identifier x; statement S1; identifier func =~ "(SCMalloc|SCStrdup|SCCalloc)"; @@ x = func(...) ... when != x - if (x == NULL) S1 + if (unlikely(x == NULL)) S1	14 years ago
Victor Julien	8f71333e12	file: implement filesize keyword. #489.	14 years ago
pi-rho	0df4c5838d	spelling corrections documented in redmine bug#533	14 years ago
Victor Julien	c9e93ec52c	filemd5: add support code for md5 handling for signatures.	14 years ago
Victor Julien	cdba2f50d1	Various fixes and improvements based on feedback by Coverity analyzer.	15 years ago
Anoop Saldanha	4810ee9c5f	All uricontent modified patterns now are DETECT_CONTENT and not DETECT_URICONTENT. Step towards unifying all content based patterns. Makes way for easier management of patterns	15 years ago
Victor Julien	d5ed28b065	Remove SIG_FLAG_MPM flag.	15 years ago
Victor Julien	4992f7c417	Remove SIG_FLAG_MPM_URI flag. It was checked but never set.	15 years ago
Victor Julien	9b62ec65ab	Make sure filemagic works properly regardless of filestore being in use for a flow.	15 years ago
Victor Julien	23e01d23d3	Implement filestore keyword, including a way for the stateful detection engine to conclude that a file will never have to be stored.	15 years ago
Anoop Saldanha	17f3f36d38	packet keywords only added for packet mpm. Rest in stream mpm. Update detection engine to handle the same	15 years ago
Anoop Saldanha	ed3b44b3b5	fix parsing content keywords. We are more strict now. All content keywords need to be enclosed in double quotes. Better validation for sid, priority and rev keywords	15 years ago
Victor Julien	4b52823ab6	Use 64 bit mask on 64-bit systems.	15 years ago
Victor Julien	e5b6c0f518	Check 32 masks per run instead of 16 in the SIMD code.	15 years ago
Victor Julien	2dbfdd40af	Clean up new SIMD mask checking code, improve non-SIMD checks.	15 years ago
Victor Julien	b421019cef	Match packet mask against 16 signature masks at once using SIMD instructions for SSE3 and up.	15 years ago
Gerardo Iglesias Galvan	91c001f93b	Fix potential crash in initialization cleanup code	15 years ago
Victor Julien	435d0fb327	Clean up signature flags creating room for merging flags and mpm_flags. Merge flags and mpm_flags. Move new mpm id's into signature header. Get rid of full signature access in signature prefiltering.	16 years ago
Anoop Saldanha	4883efd0f6	unifying content structure - uricontent now uses DetectContentData	16 years ago
Anoop Saldanha	e0476242c6	replace all Signature->umatch instances in the engine with Signature->sm_lists[DETECT_SM_LIST_UMATCH]	16 years ago
Anoop Saldanha	e54358a9e1	replace all Signature->pmatch instances in the engine with Signature->sm_lists[DETECT_SM_LIST_PMATCH]	16 years ago
Victor Julien	cbd4c298ed	Initial version of a new bitmask based signature pre-filtering method.	16 years ago
Victor Julien	1859ed54c7	Add memcmp api with a plain memcmp function and a SSE3 accelerated memcmp.	16 years ago
Victor Julien	fc248ca7a1	Many small performance updates.	16 years ago
Victor Julien	1071a53210	Fix unittests after ip_proto keyword change.	16 years ago
Victor Julien	9ba11dbfbd	Clean up detection engine mpm initialization phase.	16 years ago
Victor Julien	0219b767b8	Fix a content pattern matching bug related to signature grouping and mpm_ctx sharing. In certain conditions (signature combinations) the mpm_stream_ctx (the ctx that handles stream pattern scanning) wasn't properly setup.	16 years ago
Victor Julien	37442a8a84	Prefilter signatures before fully scanning them.	16 years ago
Victor Julien	83b2c8abdb	Improve stateful uri detection code.	16 years ago
Victor Julien	a24f288074	Moving the stream content scanning to have it's own mpm ctx.	16 years ago
Victor Julien	2fd31a1a11	Remove dsize grouping from detection engine grouping reducing memory usage. Store sgh in flow to reduce lookups. Reduce locking in alert handling. Increase default grouping values as we use less memory.	16 years ago
Victor Julien	70b32f7380	First stab at creating a stateful detection engine. ... Stateful detection for app layer detection keywords, except uricontent. Stores it's partial results in the flow structure. Other modifications: - Generalize transaction tracking, logging and inspection. - Adapt http and dcerpc to use the new transaction handling. - Stream engine now always notifies app layer of a stream eof. This commit fixes bug #124.	16 years ago
Gerardo Iglesias Galvan	9f4fae5b1a	Fix inconsistent use of dynamic memory allocation	16 years ago
Victor Julien	46831e0f8f	Fix signature grouping bug for protocols without ports. Add debugging code.	16 years ago
Victor Julien	7a427ec7f4	Switch to pattern id based results checking in the mpm. Move app layer proto detection towards a more signature based approach.	16 years ago
Victor Julien	2576f4a149	Fix a bug in the signature grouping code that didn't properly setup the mpm ctx's in some cases.	16 years ago
William Metcalf	ce01927515	Import of GPLv2 Header 050410	16 years ago
Pablo Rincon	b708d7f65d	Adding Uricontent inspection with spm. Modifiers for uricontent are now supported	17 years ago
Victor Julien	bef70a04ce	First stage of detect engine redesign: equal patterns share id's, search phase no longer used, new match verification phase.	17 years ago
Pablo Rincon	25a3a5c6d8	Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.	17 years ago
Pablo Rincon	c80160b96d	More examples of unittest helper functions usage reference	17 years ago
Victor Julien	ecf86f9c23	Rename to Suricata.	17 years ago
Victor Julien	e5b990a8ab	Fixup siggroup merge artifacts.	17 years ago
Anoop Saldanha	78db80ea15	Unittests and style fix for detect-engine-siggroup.[ch]	17 years ago
Victor Julien	3c7a038477	Further memory cleanups. Split out init only vars out of the sig group head.	17 years ago
Victor Julien	2d0e9658f8	Speed up per sgh content maxlen calc. Remove mpm ptrs from mpm ctx. Add unittests testing the detection engine internals.	17 years ago
Victor Julien	15ab5d7003	More engine init memleaks fixed. HashListTable remove function fixed.	17 years ago
Victor Julien	fbe87a3ad5	Bunch of mostly unittest related memleak fixes.	17 years ago
Anoop Saldanha	0815ed7c9e	Some refactoring of the code, error handling done	17 years ago
Victor Julien	733c3bcb8c	Fix "ip" rules not ending up in the tcp and udp sig group heads correctly.	17 years ago
Victor Julien	b26b5aa462	More cleanups.	17 years ago
Victor Julien	5501212e62	Fix sizeof printf related compiler warnings.	17 years ago
Brian Rectanus	fa5939ca91	64 bit cleanup part2	17 years ago
Victor Julien	657be002d1	Big detection engine update: scan improvements, b2g/b3g updates, bloom fixes, iponly detection implementation, dsize/flow grouping.	17 years ago
Victor Julien	5df5b35e90	Put all globals in the detection engine ctx. Add HashList type, a hash that also stores the items ina list to it can be traversed. Many cleanups.	17 years ago
Victor Julien	3f7195454b	Big detection engine update.	17 years ago
Victor Julien	54ffe2053e	Large detection engine update.	17 years ago
Victor Julien	8b3d06fd92	Rename some detection engine related files.	17 years ago