suricata

Commit Graph

Author	SHA1	Message	Date
Victor Julien	215e37a9c0	capture: multidev is not experimental	7 years ago
Victor Julien	631ee383bb	flow/stream: 'wrong thread' as stream event & counter Set event at most once per flow, for the first 'wrong' packet. Add 'tcp.pkt_on_wrong_thread' counter. This is incremented for each 'wrong' packet. Note that the first packet for a flow determines what thread is 'correct'.	7 years ago
Victor Julien	588a56c8ba	smtp: fix clang -Wunreachable-code warning app-layer-smtp.c:756:12: error: will never be executed [-Werror,-Wunreachable-code] return 0; ^ 1 error generated.	7 years ago
Victor Julien	17e7d179d0	profiling/csv: update output format Update output to be: pcap_cnt,total,receive,decode,flowworker,threading,proto detect,flow, stream,app-layer,detect,tcp-prune,loggers,<detect stages>,<loggers> For TCP, the app-layer cost is not part of stream anymore.	7 years ago
Victor Julien	6781146556	test mode: parse interface list in test mode	7 years ago
Victor Julien	77c7cf0211	windivert: fix whitespace issue	7 years ago
Victor Julien	b86e176262	af-packet: suppress noisy info message	7 years ago
Victor Julien	d6460392c5	detect/transforms: fix doc urls	7 years ago
Victor Julien	57921d95d6	eve: improve error handling for Rust loggers Give useful warning message if Rust is not compiled in.	7 years ago
Victor Julien	24b18e47bd	pfring: minor cleanups	7 years ago
Victor Julien	4f84672d7c	stats: decoder/stream events as stats	7 years ago
Victor Julien	014056f686	detect/analyzer: add detection for sigs that could use http keywords	7 years ago
Victor Julien	127937b2dd	detect/analyzer: add debug statements	7 years ago
Victor Julien	c05459ce89	detect/analyzer: fix json analyzer being called on incomplete rules	7 years ago
Victor Julien	6c97909a92	stream/events: log as stats	7 years ago
Victor Julien	fa06879563	detect/events: cleanup keyword	7 years ago
Victor Julien	2ae8d1a208	cocci/detect: add flags check to SigTableElmt	7 years ago
Victor Julien	ecb5d6419b	rules/transform: add to list-keywords	7 years ago
Mats Klepsland	81cdcd315b	detect-ssh-software: fix url for keyword	7 years ago
Mats Klepsland	08efbdc632	detect-ssh-software-version: add description and url to keyword	7 years ago
Mats Klepsland	f4da3050f2	detect-ssh-proto-version: add description and url to keyword	7 years ago
Mats Klepsland	c58252bb3b	detect-ssh-proto: fix url for keyword	7 years ago
Victor Julien	daaa90d515	rust/smb: suppress noisy messages	7 years ago
Victor Julien	c4d8508f51	eve/json: introduce community flow id Add support for community flow id, meant to give a records a predictable flow id that can be used to match records to output of other tools. Takes a 'seed' that needs to be same across sensors and tools to make the id less predictable.	7 years ago
Victor Julien	e956b484c5	eve/json: handle common options in central function	7 years ago
Victor Julien	df1ec82b55	eve/json: move common settings into it's own struct	7 years ago
Victor Julien	116c03cf17	nfs: use common json output structures	7 years ago
Victor Julien	04edc7cb6c	smb: use common json output structures	7 years ago
Victor Julien	8b8270e732	eve/json: add common helper funcs Add simple helper funcs for option-less loggers	7 years ago
Victor Julien	f357ad1df2	eve/flow: minor cleanups	7 years ago
Victor Julien	7bf71805b8	hash/sha1: optimize by avoiding mem alloc Don't allocate an output buffer for each call. These buffers would have the exact same size every time.	7 years ago
Victor Julien	efbb5ce0fe	afpacket: fix formatting of errors	7 years ago
Victor Julien	8d5da9e00f	dns: shrink per flow state by improving layout	7 years ago
Victor Julien	275cf9b029	detect/ttl: major clean up of ttl code Redo unittests using FAIL/PASS macros Switch parsing to pcre_copy_substring. Misc cleanups.	7 years ago
Victor Julien	13ea30ef23	spelling: fixing minor spelling mistakes	7 years ago
Danny Browning	a307e637c6	suricata: file existence check (bug #2615 ) Files and directories passed via command line option -r should be checked for existence during command line parsing and not start additional suricata functionality.	7 years ago
Mats Klepsland	8c3f1aa7a5	tlslog: don't log as "resumed" without ServerHello Don't log a session as "resumed" if a ServerHello record has not been seen. This makes sure that incomplete TLS sessions where the ClientHello contains a session ticket, is not logged as a session resumption.	7 years ago
Mats Klepsland	814e1624c2	output-json-tls: don't log as "resumed" without ServerHello Don't log a session as "resumed" if a ServerHello record has not been seen. This makes sure that incomplete TLS sessions where the ClientHello contains a session ticket, is not logged as a session resumption.	7 years ago
Mats Klepsland	4470b05ae4	app-layer-ssl: remove unnecessary length check We already check that empty extensions are not decoded, so this length check is not needed.	7 years ago
Jason Ish	35fd10bc2e	rust: app-layer detect template for rust parsers	7 years ago
Jason Ish	c3f1a35e28	rust: app-layer template parser and logger The protocol is a simple request/reply based protocol that can be hand driven with netcat. Request -> 12:Hello World! Response -> 3:Byte Its of the format <length>:<message> where length is the length of the message, not including the length or the delimiter.	7 years ago
Jason Ish	ee3aba9008	templates: C stub output for Rust logger	7 years ago
Jason Ish	96dc20abb1	templates: C stub template for Rust parser	7 years ago
Victor Julien	486054595a	detect/template2: template with prefilter (copy of ttl)	7 years ago
Victor Julien	4d0fc67560	decode/template: minor updates	7 years ago
Victor Julien	a013cece69	app-layer/template: code cleanups	7 years ago
Victor Julien	33914c2f2f	detect/template: clean up packet keyword	7 years ago
Victor Julien	d3e5c15995	detect/template: move test to own file in src/tests/	7 years ago
Victor Julien	1bb8fcecec	detect/template: switch to v2 API, add MPM	7 years ago
Victor Julien	234d113838	detect/template: clean up unittest	7 years ago

1 2 3 4 5 ...

8075 Commits (215e37a9c0fa18887fb9a66f6136bd08a1a9eb9d)