Victor Julien
298d21372b
flow: only BUG_ON use_cnt in flows when compiled with debug-validation
12 years ago
Anoop Saldanha
b22a0cffbb
cleanup flowtimeout threadvars retrieval +
...
throw back pseudo pkt back to packetpool inside flow timeout.
12 years ago
Victor Julien
abecef5d82
stream: send eof to app layer from stream end pkt if necessary
12 years ago
Ludovico Cavedon
ac8b087717
Wait until both sides close the TCP connection before initiating cleanup
12 years ago
Victor Julien
40d067e9ec
Update docs from wiki
12 years ago
Victor Julien
e4f2566177
Update changelog for 1.4rc1
12 years ago
Eric Leblond
2accda78a1
unix runmode: fix error handling.
...
If 'output-dir' argument was not given it was possible to reach a
possibly problematic condition.
12 years ago
Eric Leblond
1fd47cfb96
Remove useless code.
12 years ago
Eric Leblond
b3d4285982
fix logic error in sanity check
12 years ago
Eric Leblond
9c47ada771
Add removal safe TAILQ iterator.
...
TAILQ_FOREACH macro was not safe for element removal as it was
accessing the next element in case of a free. This patch is inspired
by Linux list handling and provide a new macro TAILQ_FOREACH_SAFE.
This macro is removal safe and only differs by a last argument being
a temporaty pointer to an element.
12 years ago
Eric Leblond
06751ecd75
prelude: don't build string objet for NULL string
...
prelude_string_set_ref don't like when it is called with a NULL
parameter. This patch adds check for NULL value. This is formally
good as there is no use of a NULL description.
12 years ago
Jason Ish
005f7a2399
Feature 638: Display DAG drop counts on exit; add DAG packet and drop stats to live stats.
12 years ago
Ludovico Cavedon
b617c9c3f2
Fix length check on user-agent header
12 years ago
Ludovico Cavedon
5dd0a1d917
Add User-Agent header content to file metadata
12 years ago
Anoop Saldanha
34d5aadcb8
warn users that we don't support content strings whose length's > 255.
12 years ago
Ludovico Cavedon
2f4c9198a6
Initialize flow_manager_mutex
12 years ago
Anoop Saldanha
464ed95f71
fix for bug #526 .
...
Insert pseudo packet under low load conditions to complete rule swap.
This is necessary when we use autofp active packets where most packets
would be sent to the first queue under low load conditions.
12 years ago
Victor Julien
467f28e98e
clang: make atomics work
12 years ago
Victor Julien
389c48f222
Fix detection of spin locks supported. Clean up how we handle falling back to mutex if spinlocks aren't supported.
12 years ago
Eric Leblond
df3d10865a
host: suppress double memory clear
...
HostFree() is calling HostClearMemory() so calling HostClearMemory()
before HostFree() is useless.
12 years ago
Eric Leblond
12fd60b545
unix-socket: cleanup host table instead of destroying it
...
This patch should fix the bug #637 . Between pcap files, it uses a
new function HostCleanup() to clear tag and threshold on host with
an IP regputation. An other consequence of this modification is
that Host init and shutdown are now init and shutdown unconditionaly.
12 years ago
Eric Leblond
d9eaa0d340
host: don't destroy reference counter
...
The reference counter should not be destroyed in HostClearMemory()
as the host can be reused directly (without going through Init
function).
12 years ago
Eric Leblond
ca1a70a04b
pfring: fix build failure
12 years ago
Eric Leblond
344ea3fa7c
configure: improve message about pkg-config usage
...
This patch improve the error message when luajit libraries are not
found. It displays information about the possibility to use
PKG_CONFIG_PATH or the dedicated configure options.
12 years ago
Anoop Saldanha
b1ce94babe
Temporary fix for bug #599 .
...
Treat sigs with negated addresses as non ip-only.
This fix exposes bug #608 , which results in 2 failed unittest which
have now been disabled by this commit. Would be reenabled when we
have #608 fix in.
12 years ago
Anoop Saldanha
fdc666f732
unittest to show failure for bug #599 .
12 years ago
Victor Julien
9f519e95a2
http: add event for libhtp detection of request port not matching tcp port.
12 years ago
Victor Julien
3ab1458abf
pcap: fix windows commandline mangling win device string
12 years ago
Victor Julien
a698a7600d
clang: fix warnings when debug is enabled
12 years ago
Victor Julien
40bbf96f22
reputation: don't give error if config is missing/commented out
12 years ago
Victor Julien
0f42f0e890
Minor fixes
12 years ago
Eric Leblond
6b3ebc810d
unix runmode: improve JSON handling
...
The jansson function with new in their name take care of ref
counting. The this patch fixes a memory leak.
12 years ago
Eric Leblond
195b144daa
unix-manager: fix error and JSON handling
12 years ago
Eric Leblond
a05113a2b1
unix-manager: memory handling fixes.
...
This patch adds unlikey() for memory error handling and fixes a few
error cases.
12 years ago
Eric Leblond
028a37f6e7
unix runmode: use unlikely for memory error
12 years ago
Eric Leblond
547c55114e
unix runmode: fix FIXME
12 years ago
Eric Leblond
f38b8fe4eb
unix runmode: fix JSON mem handling
...
json_decref was not correctly used through the code. This patch
fixes it.
12 years ago
Eric Leblond
13237b8af2
unix manager: add static
12 years ago
Eric Leblond
ef45f7dac4
configure: fix indent
12 years ago
Eric Leblond
936c36d5f1
Disable 'reload-rules' command.
12 years ago
Eric Leblond
d5457ad70e
unix-manager: doc and whitespace fixes
12 years ago
Eric Leblond
af16c418b7
unix-socket: fix build when jansson not present
12 years ago
Eric Leblond
ef64648cf8
unix-command: add drop counter to iface-stat message
12 years ago
Eric Leblond
8d0260b27e
Add atomic counter for iface drop.
12 years ago
Eric Leblond
cc71c993f4
unix-command: add iface information command.
...
This patch adds two commands to unix-command. 'iface-list' displays
the list of interface which are sniffed by Suricata and 'iface-stat'
display the available statistics for a single interface. For now,
this is the number of packets and the number of invalid checksums.
12 years ago
Eric Leblond
c78e112e3e
af-packet: update runmode copyright date.
12 years ago
Eric Leblond
6f0a851087
unix-manager: fix error treatment in accept phase
12 years ago
Eric Leblond
f2a17f47d3
unix-manager: implement multi client support
...
This patch implements the support of multiple clients connected
at once to the unix socket.
12 years ago
Eric Leblond
83f0af3630
suricatasc: improve reading when system is loaded
12 years ago
Eric Leblond
a9cb8ce89f
affinity: avoid to init structure twice
...
In unix socket mode, suricata was doing multiple init of the
structure. This was not needed and caused a memory leak in
mutex creation.
12 years ago