Commit Graph

13712 Commits (2ab3646fad6c01d1a32f4225a0206f0674c23be6)
 

Author SHA1 Message Date
Jason Ish 2ab3646fad profiling: sort LoggerId's in same order as defined
Sort the LoggerId's in the order they are define in suricata-common.h.
2 years ago
Jason Ish 99cb8c666a loggers: all json tx loggers can share the same loggerid
This is to avoid the tx logging code that doesn't support LoggerId
values over 31 at this time. The simplest fix for now is to just have
all JSON (eve) loggers use the same ID.

DNP3 is left as-is for now as it needs some extra support in the parser.
2 years ago
Richard McConnell 9c2939fb33 workflow: add systemd integration and check
Intergration of systemd is a feature that enables notification of
a running service to the service manager. The workflow now ensures
compilation with systemd and checks the binary has been built against
libsystemd.
2 years ago
Richard McConnell 7f4c1d5e2f doc/systemd: add documentation for sd_notify 2 years ago
Richard McConnell 88b98a54df suricata: add sd_notify support
Upon all threads reaching a running state the system generates
a notification for systems running and configured for systemd

Implements feature 5384
(https://redmine.openinfosecfoundation.org/issues/5384)
2 years ago
Richard McConnell 13beba141c source: add THV_RUNNING flag to notify of running state
Each module (thread) updates its status to indicate running.
Main thread awaits for all threads to be in a running state
before continuing the initialisation process

Implements feature 5384
(https://redmine.openinfosecfoundation.org/issues/5384)
2 years ago
Eric Leblond 9fb0137d9d doc: add reference to ipaddr in IP matching 2 years ago
Eric Leblond 94664ef565 datasets: don't exit on invalid data 2 years ago
Eric Leblond 3bd48d9336 detect: doc link for ip.src and ip.dst 2 years ago
Eric Leblond da8b16eaeb doc: add ip.dst and ip.src doc 2 years ago
Eric Leblond 3599cbf1c4 doc: document new dataset types
Feature: #5383
2 years ago
Eric Leblond 7518204ad4 datasets: introduce new IPv6 type
This patch also simplifies IPv6 parsing.

Feature: #5383
2 years ago
Eric Leblond 6fe9d510cf detect: add ip.dst keyword as sticky buffer
Feature: #5383
2 years ago
Eric Leblond 7e516aad94 detect: add ip.src keyword
It is a sticky buffer matching on src_ip.

Feature: #5383
2 years ago
Eric Leblond b2cdc6c899 datasets: introduce ipv4 type
This patch introduce the IPv4 type for dataset so Suricata commandmatch
on a set of IPv4 addresses. This is meant to complement iprep feature
for people that needs more flexibility such as settings the IP on
the packet path.

Feature: #5383
2 years ago
Eric Leblond a9c05c7d96 datasets: factorize serialised operations
Ticket: #5184
2 years ago
Eric Leblond a1a22cccd2 doc: document dataset-lookup
Ticket: #5184
2 years ago
Eric Leblond 537fd76787 suricatasc: add dataset-lookup command
Ticket: #5184
2 years ago
Eric Leblond 843dba0a28 datasets: add dataset-lookup command
Ticket: #5184
2 years ago
Eric Leblond 20973e9e6b doc: add dataset-clear command
Ticket: #5184
2 years ago
Eric Leblond b63f9e7e93 suricatasc: add dataset-clear command
Ticket: #5184
2 years ago
Eric Leblond 2f25e48897 datasets: add dataset-clear command
Ticket: #5184
2 years ago
Eric Leblond c5559cb68f doc: document dataset-dump command
Ticket: #5184
2 years ago
Eric Leblond a480abcdd0 datasets: add dump via unix socket
This patch adds a dataset-dump command to the list of unix socket
commands. Implementation is not optimal as we are locking the
datasets when doing the dump. But if we consider that the current
alternative from an implementation point of view is to stop Suricata
then this is far better than current state.

Ticket: #5184
2 years ago
Shivani Bhardwaj 79a78611ad release: 7.0.0-beta1; update changelog 2 years ago
Victor Julien 1fafb83fed packet: turn tunnel lock into spinlock
Lock is only held to update/check ints, so spin lock will be more
efficient.

Place the member of Packet in a new "persistent" area to make it
clear this is not touched by the PacketReinit logic.

Ticket: #5592.
2 years ago
Victor Julien 57e70841c4 stream/tcp: remove obsolete and commented out tests 2 years ago
Victor Julien e72770c1b2 decode/vxlan/tests: don't memset new packet 2 years ago
Victor Julien edf93ae5b6 decode/mpls/tests: improve pkt handling; cleanups 2 years ago
Victor Julien 0f7fe2a4c3 app-layer/tests: don't memset new packet 2 years ago
Victor Julien 2f6c014f70 doc/devguide: update packet (de)alloc in unittests 2 years ago
Victor Julien 6dc53447f1 decode/geneve/tests: don't memset packet
Packet is already initialized.
2 years ago
Victor Julien b07c7ad14c threading: improve/add thread queues explanations 2 years ago
Victor Julien 951bcde0b2 eve/alert: remove tunnel locking
Tunnel lock is only used to sync verdict logic.
2 years ago
Victor Julien 0e7adc21a6 decode: alloc packets using calloc 2 years ago
Victor Julien 68a9da52ad packetpool: remove PKT_ALLOC flag
Use Packet::pool instead. If Packet::pool is non-NULL the packet is
owned by a pool. Otherwise it is allocated and should be freed after
use.
2 years ago
Victor Julien 3ed7b4473e runmodes: remove dead error check 2 years ago
Victor Julien 9d3c60bde3 smtp/mime: no error logging in packet path 2 years ago
Victor Julien 256f0f2c5c defrag: no error logging in packet path 2 years ago
Victor Julien 8f02a3e415 applayer: make sure to use correct ipproto 2 years ago
Victor Julien dba7103a96 eve/alert: use flow proto to avoid crash on ICMP 2 years ago
Alice Akaki 51c0714d71 detect-filemd5: convert unittests to FAIL/PASS APIs
Task: #4035
2 years ago
Alice Akaki fe31d51c30 detect-filesha256: convert unittests to FAIL/PASS APIs
Task: #4038
2 years ago
dependabot[bot] c3c8472d09 github-actions: bump actions/upload-artifact from 3.1.0 to 3.1.1
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](3cea537223...83fd05a356)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot] 0b0616528f github-actions: bump actions/download-artifact from 3.0.0 to 3.0.1
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 3.0.0 to 3.0.1.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](fb598a63ae...9782bd6a98)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Alice Akaki ccdc992a71 rust: fix lint warnings about mixed case hex literals
Ticket: #4593
2 years ago
Gabriel Lima Luz 4e90d17fd9 rust: fix lint warnings about if same then else
Ticket: 4609
2 years ago
Kristina Jefferson 9cd00424c3 rust: fix lint warnings about ptr_arg
Ticket: #4599
2 years ago
Jason Ish 21bb697bc9 rust: fix clippy lint for unneeded late initialization 2 years ago
Jason Ish 7cca238128 rust: fix clippy lint for cmp_null is debug code
Ticket: 5577
2 years ago