Victor Julien
|
93d121bf21
|
Update app layer events for HTTP now that libhtp has fixes for some response errors.
|
13 years ago |
Victor Julien
|
ea34aeff3d
|
Add missing Makefile.am files for rules/ and doc/ dir.
|
13 years ago |
Victor Julien
|
132d9d1789
|
Add http-events.rules with an example rule for each HTTP event.
|
13 years ago |
Victor Julien
|
5a1a443701
|
Add example smtp decoding events rules file.
|
13 years ago |
Victor Julien
|
fd4e1460cf
|
Add checksum validation rules to decoder events rules.
|
13 years ago |
Victor Julien
|
ddfa5c49c6
|
Stream engine: gap handling
Set a stream event for stream gaps.
Add a (disabled by default) signature to the stream-event.rules.
|
13 years ago |
Victor Julien
|
b3e1679321
|
file handling: add example files.rules file
Adding a rule file with various examples for using the fileext, filename,
filemagic and filestore keywords.
|
13 years ago |
Victor Julien
|
d9ad1b00b3
|
Clean up SID allocation for decoder and stream rules.
|
13 years ago |
Eric Leblond
|
552c6731b2
|
Add signature file for stream events.
This patch adds a rules/stream-events.rules file which contains
alert related to all stream events.
|
13 years ago |
Victor Julien
|
83c3f15812
|
Minor fixes in defrag engine, shrink DefragTracker_ structure.
|
14 years ago |
Jason Ish
|
0385f72669
|
Use separate frag decoder events for IPv4 and IPv6.
|
14 years ago |
Jason Ish
|
de1c40c44f
|
Set decoder event on fragment overlaps.
|
14 years ago |
Jason Ish
|
6da9c64a28
|
Set decoder event when re-assembled fragments would exceed max IP packet size.
|
14 years ago |
Victor Julien
|
6a048f2d69
|
Include initial version of decoder-event rules.
|
14 years ago |