Victor Julien
							
						 
						
							 
							
							
							
								
							
								fc248ca7a1 
								
							
								 
							
						 
						
							
							
								
								Many small performance updates.  
							
							 
							
							
							
						 
						
							15 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								1071a53210 
								
							
								 
							
						 
						
							
							
								
								Fix unittests after ip_proto keyword change.  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								a3ff0e7210 
								
							
								 
							
						 
						
							
							
								
								Don't scan TCP packet payload if it was added to the stream. Inspect the tcp stream with the correct packet. Should  fix   #184  and  #185 .  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								d500a52b58 
								
							
								 
							
						 
						
							
							
								
								Fix valgrind error in tls unittest.  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Pablo Rincon
							
						 
						
							 
							
							
							
								
							
								b931895901 
								
							
								 
							
						 
						
							
							
								
								Fixing flow cleanup and ctx initialization  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Pablo Rincon
							
						 
						
							 
							
							
							
								
							
								eed0ef6e69 
								
							
								 
							
						 
						
							
							
								
								Adding tag keyword support  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								William Metcalf
							
						 
						
							 
							
							
							
								
							
								0e4235cc94 
								
							
								 
							
						 
						
							
							
								
								FLOW_DESTROY added to clean-up UT's that init flow  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								2f29b8a724 
								
							
								 
							
						 
						
							
							
								
								Improve detection of app layer, making sure we only handle app layer on 'established' packets. Should really  fix   #166 .  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Pablo Rincon
							
						 
						
							 
							
							
							
								
							
								8cc525c939 
								
							
								 
							
						 
						
							
							
								
								UDP support at AppLayer message handling  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								William Metcalf
							
						 
						
							 
							
							
							
								
							
								cc76aa4bc6 
								
							
								 
							
						 
						
							
							
								
								properly init flows inside of unit-tests caused lock-up when falling back to using mutex locks  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								a24f288074 
								
							
								 
							
						 
						
							
							
								
								Moving the stream content scanning to have it's own mpm ctx.  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								William Metcalf
							
						 
						
							 
							
							
							
								
							
								9728e49773 
								
							
								 
							
						 
						
							
							
								
								Null deref fix for detect-tls-version.c  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Gurvinder Singh
							
						 
						
							 
							
							
							
								
							
								5fe1dc1d24 
								
							
								 
							
						 
						
							
							
								
								support for sslv2/sslv3 their unit tests and better stream no reassembly flag handling  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Gerardo Iglesias Galvan
							
						 
						
							 
							
							
							
								
							
								9f4fae5b1a 
								
							
								 
							
						 
						
							
							
								
								Fix inconsistent use of dynamic memory allocation  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								William Metcalf
							
						 
						
							 
							
							
							
								
							
								ce01927515 
								
							
								 
							
						 
						
							
							
								
								Import of GPLv2 Header 050410  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Gurvinder Singh
							
						 
						
							 
							
							
							
								
							
								69a4fee757 
								
							
								 
							
						 
						
							
							
								
								fixed the API and logic error reported by clang tool  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								297001c6d9 
								
							
								 
							
						 
						
							
							
								
								Only process a app layer sig if it has the proper state. Make sure a sig can't have conflicting sigmatches, such as ftpbouce and uricontent.  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								8b30226914 
								
							
								 
							
						 
						
							
							
								
								Detection keyword cleanup  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								b259e362cd 
								
							
								 
							
						 
						
							
							
								
								Convert uricontent to use new scanning methods as well. Move http_method and http_cookie keywords out of pmatch list for now.  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Pablo Rincon
							
						 
						
							 
							
							
							
								
							
								25a3a5c6d8 
								
							
								 
							
						 
						
							
							
								
								Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Gerardo Iglesias Galvan
							
						 
						
							 
							
							
							
								
							
								ba6d807a6e 
								
							
								 
							
						 
						
							
							
								
								Improve information about errors on signature failure  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								6a53ab9c5a 
								
							
								 
							
						 
						
							
							
								
								Stream engine memory handling update  
							
							 
							
							... 
							
							
							
							The stream engine memory handling needed updating as it didn't scale. Changes:
- pools can now be initialized to size 0, meaning unlimited
- stream engine uses a memcap setting. Sessions, segments and aldata is part
  of this, app layer state isn't.
- memory is accounted using a global int that is spinlocked.
- a counter for sessions that have not been picked up because of memcap was
  added.
- all reassembly errors are converted to debug msgs. 
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								c352bff6fb 
								
							
								 
							
						 
						
							
							
								
								Remove unused conditional locking code from the app layer parsing code.  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								4824868766 
								
							
								 
							
						 
						
							
							
								
								Application layer detection improvements  
							
							 
							
							... 
							
							
							
							- improve locking of application layer handling, making sure that the flow cannot be freed/cleared when the detection engine is still working with it.
- add a check to the app layer detection to make sure that a match function will only inspect an app layer state if it's of the right type. 
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								9fd46e9425 
								
							
								 
							
						 
						
							
							
								
								Support for sigs with both pkt and applayer detect  
							
							 
							
							... 
							
							
							
							Sets a flowbit with the sig id if the packet matches match. Checks
on that if the app layer matches match. Currently misuses the
flowbits api for this in a way that needs fixing. 
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								ecf86f9c23 
								
							
								 
							
						 
						
							
							
								
								Rename to Suricata.  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Pablo Rincon
							
						 
						
							 
							
							
							
								
							
								e26833be3f 
								
							
								 
							
						 
						
							
							
								
								Changing mutex/spinlocks/conditions naming types  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Pablo Rincon
							
						 
						
							 
							
							
							
								
							
								769022f4be 
								
							
								 
							
						 
						
							
							
								
								Adding support for Mac OS X, FreeBSD, centrailizing mutex/spins/conditions in a macro API, and some unittests  
							
							 
							
							
							
						 
						
							16 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								2cfa284999 
								
							
								 
							
						 
						
							
							
								
								Fix app layer detect to actually work.  
							
							 
							
							
							
						 
						
							16 years ago