6512 Commits (2e78bf0ba81bcb8cebc25bd49f717daf301d8658)

Author	SHA1	Message	Date
Jason Ish	b605984f34	tests: setup unit test framework earlier ... Allows tests to be registered early, in support of moving outputs away from thread modules.	9 years ago
Jason Ish	bac65f09e8	logging: convert json drop output to non-thread module	9 years ago
Jason Ish	38354479b7	logging: convert json smtp output to non-thread module	9 years ago
Jason Ish	3fea12d7b3	logging: convert json ssh output to non-thread module	9 years ago
Jason Ish	01cc508257	logging: convert json netflow output to non-thread module	9 years ago
Jason Ish	983a619ff0	logging: convert json flow output to non-thread module	9 years ago
Jason Ish	ad15ac8297	logging: convert json alert output to non-thread module	9 years ago
Jason Ish	aaa65f3d16	logging: convert json tls output to non-thread module	9 years ago
Jason Ish	31663f1627	logging: convert prelude output to non-thread module	9 years ago
Jason Ish	dedda33f01	logging: convert eve http to non-thread module	9 years ago
Jason Ish	687602c0ca	logging: convert eve dns logging to non-thread module	9 years ago
Jason Ish	b1200dba54	logging: convert fast log to a non-thread module	9 years ago
Jason Ish	637aa34610	logging: convert dns log to a non-thread module	9 years ago
Victor Julien	99dce740ef	detect: mark alproto in keyword reg deprecated ... No existing code uses it, and it had been useless for some time.	9 years ago
Victor Julien	9030e89c94	detect: don't set alproto while registering keyword ... The field is not used except for some printing, and is wrong for many keywords.	9 years ago
Victor Julien	c957c62824	detect file: enable HTTP inspection from validate func	9 years ago
Victor Julien	621860f5b2	detect file: enforce protocol in single place ... Instead of trying to enforce the app layer protocol in each file function, enforce it in the generic validation function.	9 years ago
Victor Julien	bcfa484bce	app-layer: add function to check if app-layer supports files	9 years ago
Victor Julien	85db260eed	threads: remove EngineKill & SURICATA_KILL ... EngineStop and EngineKill were effectively doing the same, so removed the kill variant.	9 years ago
Victor Julien	045c10db43	threads: failed thread is a fatal error now	9 years ago
Victor Julien	fb655d5f15	threading: remove thread restart logic ... Thread restarts never worked well and the rest of the engine was never really expecting errors to lead to thread restarts. Either and error is recoverable in the thread, or not at all. So this patch removes the functionality completely.	9 years ago
Victor Julien	54503ef310	Open Suricata 3.2 development branch	9 years ago
Victor Julien	471b61a0e1	magic: fix broken tests after CentOS6 update	9 years ago
Victor Julien	82282a9e68	mpls: add missing event type + rule	9 years ago
Victor Julien	71c8d1f46c	bpf: fix file parsing memory handling ... Fix improper fread string handling. Improve error handling. Skip trailing spaces for slightly more pretty printing. Coverity CID 400763. Thanks to Steve Grubb for helping address this issue.	9 years ago
Victor Julien	519b2970ec	detect: don't print (null) in --list-keywords=all	9 years ago
Eric Leblond	ed90a16e89	detect: fix setup for some keywords ... Fix problems found by siginit.cocci.	9 years ago
Jason Ish	17e70483c5	detect-flowbits: more unittest macro usage ... Also cleanup some tests by removing extra code after a test was determined to fail.	9 years ago
Jason Ish	3c5d8e65d4	hostbits: use new unittest macros	9 years ago
Jason Ish	c4945607e3	hostbits: fail parse on unexpected trailing data ... Address issue https://redmine.openinfosecfoundation.org/issues/1889 for hostbits. This involves updating the regular expresssion to capture any trailing data as the regex already keeps spaces out of the name. A unit test was converted to new macros to find out which line it was failing at after updating regex.	9 years ago
Jason Ish	24f2387b23	flowbits: validate that there are no spaces in the name ... Fixes issue: https://redmine.openinfosecfoundation.org/issues/1889 To catch the issue where the ';' is missing we have to expand the regex to capture the whole name string, not just the leading valid stuff. Then verify that there are no spaces in the name (Snort has the same restriction) and fail if there is.	9 years ago
Eric Leblond	1cdd062dc6	unix-manager: fix output of version command ... Make it consistent with the output of version command line flag.	9 years ago
Andreas Herz	65fd09a399	rule-parsing: reject unescaped double quote within content section	9 years ago
Victor Julien	2997d086be	eve-drop: allow logging all drops ... - drop: alerts: yes # log alerts that caused drops flows: all # start or all: 'start' logs only a single drop # per flow direction. All logs each dropped pkt.	9 years ago
Victor Julien	1cc5f9825d	dns: use nonnull attr for log functions	9 years ago
Victor Julien	bbcc22d2ad	dns: fix coverity warning ... ** CID 1372324: Null pointer dereferences (FORWARD_NULL) /src/output-json-dns.c: 532 in OutputAnswer() ________________________________________________________________________________________________________ *** CID 1372324: Null pointer dereferences (FORWARD_NULL) /src/output-json-dns.c: 532 in OutputAnswer() 526 } 527 } 528 529 /* reset */ 530 MemBufferReset(aft->buffer); 531 json_object_set_new(djs, "dns", js); >>> CID 1372324: Null pointer dereferences (FORWARD_NULL) >>> Dereferencing null pointer "entry". 532 if (likely(DNSRRTypeEnabled(entry->type, aft->dnslog_ctx->flags))) { 533 OutputJSONBuffer(djs, aft->dnslog_ctx->file_ctx, &aft->buffer); 534 } 535 json_object_del(djs, "dns"); 536 537 return; Move checks to the top of the functions. Should be more efficient too.	9 years ago
Victor Julien	b4565004c7	detect-template: modernize	9 years ago
Jason Ish	e878dd2231	app-layer templates: cleanups ... - cleanup file headers - add todo section - convert unit tests to new macros - add markers to remove disabled by default behaviour	9 years ago
Jason Ish	3cf8b4629f	decode-icmpv6: use FAIL macros in tests	9 years ago
Jason Ish	2a42e8be03	unittest: FAIL macro to unconditionally fail a test	9 years ago
Jason Ish	af4085b77b	icmpv6: fix checksum verification if fcs present ... Calculate the length of the ICMPv6 packet from decoded information instead of off the wire length. This will provide the correct length if trailing data like an FCS is present. Fixes issue: https://redmine.openinfosecfoundation.org/issues/1849	9 years ago
Victor Julien	120f59386b	affinity: fix compilation on SunOS	9 years ago
Victor Julien	a2c9b86cdf	byteswap: fix compilation on SunOS	9 years ago
Victor Julien	ef1acdfaee	threads: provide SCGetThreadIdLong for SunOS	9 years ago
Victor Julien	4271d57157	decode: declare IPPROTO_IPIP if OS doesn't have it	9 years ago
Victor Julien	6956c1c749	decode: fix int types	9 years ago
Victor Julien	ec87123339	configure: check for strings.h: used by SunOS	9 years ago
Victor Julien	8600872e02	logfile: resolve name clash on SunOS	9 years ago
Victor Julien	b81ea0d7db	eve: reduce flow_id to 51 bits ... Evebox & ELK couldn't handle the large integers. It looks like (partly) a javascript limitation that doesn't treat 64bit ints as real ints.	9 years ago
Victor Julien	9ca34fa5c9	eve: output more unique flow_id	9 years ago
Victor Julien	78b4db8a95	flow: introduce function to generate flow id ... The flow id itself is not stored in the flow, but generated based on properties that do not change during the lifetime of the flow. As it's meant for use with the json output, it is limited to a signed 64 bit integer (int64_t) because that is the time json_integer_t uses.	9 years ago
Victor Julien	666bba8121	detect: implement continue detect for dcepayload ... Also fix a corner case in start detection. Bug 1853.	9 years ago
Victor Julien	ecf4a2862c	detect: cleanup	9 years ago
Victor Julien	6b078e4f51	detect: fix ICMP error handling issue ... The first packet in both directions of a flow looks up the rule group (sgh) and stores it in the flow. This makes sure the lookup doesn't have to be performed for each packet. ICMPv4 error messages are connected to the TCP or UDP flow they apply to. In the case of such an ICMP error being the first packet in a flow's direction, this would lead to an issue. The packet would look up the rule group based on the ICMP protocol, not based on the embedded TCP/UDP. This makes sense, as the ICMP packet is inspected as ICMP packet. The consequence however, was that this rule group pointer (sgh) would be stored in the flow. This is wrong, as TCP/UDP packets that follow the ICMP packet would have no sgh or the wrong sgh. In normal traffic this shouldn't normally happen, but it could be used to evade Suricata's inspection.	9 years ago
Victor Julien	2eb941f9d9	output dns: fix bit declarations	9 years ago
Victor Julien	5c6ffe5653	common: introduce macro for bit declarations	9 years ago
Tom DeCanio	0f6c8806a0	output-json-dns: dns output filtering.	9 years ago
Jason Ish	1691c10681	eve: make logging of tagged packets optional ... But it is enabled in the default configuration.	9 years ago
Jason Ish	040660556e	eve: log tag packets as packet events ... Create a new eve event type, "packet" for logging packets that are tagged as part of an event. The packet is still at the top level to keep it consistent with alert event types. In addition to the packet being logged, a packet_info object is created to hold the linktype and any future meta data we may want to add about the packet.	9 years ago
Victor Julien	305b1b90fd	detect: minor cleanup	9 years ago
Victor Julien	ec0217f52c	detect: minor style fixes	9 years ago
Victor Julien	7d11af16ef	detect: minor debug output cleanup	9 years ago
Victor Julien	0e2ea4e63b	detect: remove unused debug code	9 years ago
Victor Julien	b79d9cda3a	detect: minor cleanups	9 years ago
Victor Julien	199bb3bae3	stream-tcp: fix ssn returning to wrong thread pool	9 years ago
Jason Ish	cf61472619	app-layer-dcerpc-udp: style cleanups ... - consistent 4 space indent - cleanup file header	9 years ago
Jason Ish	e55334fb37	detect-flowbits: fix misleading indentation ... detect-flowbits.c: In function ‘FlowBitsTestSig02’: detect-flowbits.c:475:4: warning: this ‘if’ clause does not guard... [-Wmisleading-indentation] if(error_count == 5) ^~ detect-flowbits.c:478:5: note: ...this statement, but the latter is misleadingly indented as if it is guarded by the ‘if’ SigGroupBuild(de_ctx); ^~~~~~~~~~~~~	9 years ago
Jason Ish	a975fdcfeb	app-layer-dcerpc-udp: fix missleading indentation ... app-layer-dcerpc-udp.c: In function ‘DCERPCUDPParserTest01’: app-layer-dcerpc-udp.c:1105:5: warning: this ‘if’ clause does not guard... [-Wmisleading-indentation] if (alp_tctx != NULL) ^~ app-layer-dcerpc-udp.c:1107:2: note: ...this statement, but the latter is misleadingly indented as if it is guarded by the ‘if’ StreamTcpFreeConfig(TRUE); ^~~~~~~~~~~~~~~~~~~	9 years ago
Jason Ish	95015a3f6d	decode: support Cisco Fabric Path / DCE ... Cisco Fabric Path is ethernet wrapped in an ethernet like header with 2 extra bytes. The ethernet type is in the same location so the ethernet decoder can be used with some validation for the extra length.	9 years ago
Victor Julien	a8da6bbd71	output: use safer logic for fingerprint printing	9 years ago
Jason Ish	d3c0135eec	app-layer-tls: accomodate trailing \0 in hash output	9 years ago
Jason Ish	73a0451070	output-json-dns: allocate correct size hexstring buffer ... The buffer allocated for the hexstring was not large enough for a ':' separated hex string.	9 years ago
Victor Julien	b3b78d4326	detect: log earlier that rule reload is happening	9 years ago
Victor Julien	731d4a7049	dns: fix OOB read on malformed TXT record	9 years ago
Jason Ish	7e6ce01600	unified2: fix logging of tagged packets ... The structure for create the alert preceding each tagged packet was not being initialized, preventing tagged packets from being logged. Note: Snort unified2 does not precede tagged packets with an alert like is done here, so this just fixes what the code intended to do, it does not make it Snort unified2 compatible. Address issue: https://redmine.openinfosecfoundation.org/issues/1854	9 years ago
Victor Julien	26e67400ba	dns: fix name parsing issue leading to events	9 years ago
Victor Julien	884fddf035	packet: remove empty and unused UDPVars struct	9 years ago
Victor Julien	c9756caeef	packet: make tcp/udp/icmp vars union non-anonymous ... Clean the whole thing after use.	9 years ago
Victor Julien	79388df887	commandline: fix strlcpy usage	9 years ago
Jason Ish	2403af5177	pcap: don't fail with --pcap with no device present ... Issue: 1856. A device with the name of "" (empty string) was being added with LiveRegisterDevice which failed to initialize causing Suricata to fail.	9 years ago
Victor Julien	2856dfd119	output lua: improve debugging output	9 years ago
Victor Julien	a26e59cb6d	output lua: set proper logging progress values	9 years ago
Victor Julien	7188c2630f	outputs: small code cleanup	9 years ago
Jason Ish	f397e7bfc2	dns: directional logging ... Register loggers for to server and to client so requests and responses can be logged independently of each other. This results in the request log having the actual timestamp of the request instead of the reply.	9 years ago
Jason Ish	fcad270d96	logging: setup all registered loggers for a name ... When setting up a configured logger, do so for all registered loggers of that name instead of just the first registered one. This allows a logger to register itself more than once, which can allow for independent logging of requests and replies without touching the core transaction handling logic. We do this so just having "dns" in the eve-log can configured multiple "dns" loggers instead of having something like "dns-tc" and "dns-ts" in the configuration file.	9 years ago
Victor Julien	9d01ef58fc	lua smtp: fix SMTPGetMimeField arg checking ... Properly check argument before passing it on: CID 1363385: (NULL_RETURNS)	9 years ago
Victor Julien	2b10b8374c	cmdline: fix --list-keywords and --list-app-layer-protos ... Ticket #1840	9 years ago
Victor Julien	ed483b4e13	output: don't register loggers for disabled protocols	9 years ago
Victor Julien	01913f6a56	app-layer: add AppLayerParserIsTxAware ... This function globally checks if the protocol is registered and enabled by testing for the per alproto callback: StateGetProgressCompletionStatus This check is to be used before enabling Tx-aware code, like loggers.	9 years ago
Victor Julien	f302a6cf86	output: fix debug messages	9 years ago
Victor Julien	b73098e990	smb: style fix in log message	9 years ago
Victor Julien	3bb408940f	af-packet: improve threads selection logic ... Only use RSS queue count when cluster_qm is used. Only use core count when cluster_flow is used. Use a local variable to simplify the check so that we don't have to deal with the extra flags.	9 years ago
Victor Julien	da8f9c1896	lua: add smtp for detection	9 years ago
Victor Julien	928cb1eba9	lua output: expose smtp functions to output scripts	9 years ago
Victor Julien	7501bf744f	lua: SMTPGetRcptList use position as key, not value	9 years ago
tobiass1	7581f5129f	Lua: SMTP support; Addresses feature ticket #1775; v5	9 years ago
Victor Julien	ff3baeee90	lua: support smtp tx logging	9 years ago
Victor Julien	5e4d071b76	lua-output: don't crash on script setup error	9 years ago
Victor Julien	3c59d60049	cuda: make sure we don't use cuda in proto detect	9 years ago
Victor Julien	4111331ab0	af-packet: minor cleanups	9 years ago
Victor Julien	402bdf9b2b	af-packet: test if fanout is supported before use ... Older system may pretend they can support FANOUT but then fail to work at runtime. CentOS6 is an example of this. It would fail to start up with the default configuration with errors like: [15770] 21/6/2016 -- 16:00:13 - (tm-threads.c:2168) <Notice> (TmThreadWaitOnThreadInit) -- all 4 packet processing threads, 4 management threads initialized, engine started. [15785] 21/6/2016 -- 16:00:13 - (source-af-packet.c:1907) <Error> (AFPCreateSocket) -- [ERRCODE: SC_ERR_AFP_CREATE(190)] - Coudn't set fanout mode, error Protocol not available [15785] 21/6/2016 -- 16:00:13 - (source-af-packet.c:1337) <Error> (ReceiveAFPLoop) -- [ERRCODE: SC_ERR_AFP_CREATE(190)] - Couldn't init AF_PACKET socket, fatal error [15770] 21/6/2016 -- 16:00:13 - (suricata.c:2664) <Notice> (main) -- Signal Received. Stopping engine. [15787] 21/6/2016 -- 16:00:13 - (source-af-packet.c:1907) <Error> (AFPCreateSocket) -- [ERRCODE: SC_ERR_AFP_CREATE(190)] - Coudn't set fanout mode, error Protocol not available [15788] 21/6/2016 -- 16:00:13 - (source-af-packet.c:1907) <Error> (AFPCreateSocket) -- [ERRCODE: SC_ERR_AFP_CREATE(190)] - Coudn't set fanout mode, error Protocol not available [15786] 21/6/2016 -- 16:00:13 - (source-af-packet.c:1907) <Error> (AFPCreateSocket) -- [ERRCODE: SC_ERR_AFP_CREATE(190)] - Coudn't set fanout mode, error Protocol not available [15789] 21/6/2016 -- 16:00:13 - (flow-manager.c:693) <Perf> (FlowManager) -- 0 new flows, 0 established flows were timed out, 0 flows in closed state [15787] 21/6/2016 -- 16:00:13 - (source-af-packet.c:1337) <Error> (ReceiveAFPLoop) -- [ERRCODE: SC_ERR_AFP_CREATE(190)] - Couldn't init AF_PACKET socket, fatal error [15788] 21/6/2016 -- 16:00:13 - (source-af-packet.c:1337) <Error> (ReceiveAFPLoop) -- [ERRCODE: SC_ERR_AFP_CREATE(190)] - Couldn't init AF_PACKET socket, fatal error [15786] 21/6/2016 -- 16:00:13 - (source-af-packet.c:1337) <Error> (ReceiveAFPLoop) -- [ERRCODE: SC_ERR_AFP_CREATE(190)] - Couldn't init AF_PACKET socket, fatal error This patch adds a test that if run before the number of threads is determined. If the test fails, only 1 thread is created.	9 years ago
Victor Julien	ab65b6f83b	netmap: fix coverity warning 1362789 ... ** CID 1362789: Null pointer dereferences (FORWARD_NULL) /src/runmode-netmap.c: 247 in ParseNetmapConfig() ________________________________________________________________________________________________________ *** CID 1362789: Null pointer dereferences (FORWARD_NULL) /src/runmode-netmap.c: 247 in ParseNetmapConfig() 241 strlcpy(aconf->iface_name, iface_name, sizeof(aconf->iface_name)); 242 SC_ATOMIC_INIT(aconf->ref); 243 (void) SC_ATOMIC_ADD(aconf->ref, 1); 244 245 /* Find initial node */ 246 netmap_node = ConfGetNode("netmap"); >>> CID 1362789: Null pointer dereferences (FORWARD_NULL) >>> Comparing "netmap_node" to null implies that "netmap_node" might be null. 247 if (netmap_node == NULL) { 248 SCLogInfo("Unable to find netmap config using default value"); 249 } else { 250 if_root = ConfFindDeviceConfig(netmap_node, aconf->iface_name); 251 if_default = ConfFindDeviceConfig(netmap_node, "default"); 252 }	9 years ago
Andreas Herz	e9a2a341ce	util-threshold-config: parse suppress rules with spaces in ip list ... This modified regex allows spaces witihn the ip list for supress rules like [10.0.0.1, 10.0.0.2]	9 years ago
Jason Ish	f0e22c91cb	privs: add capability CAP_SYS_NICE. ... Allows the setting of thread priorities after dropping privileges.	9 years ago
Victor Julien	6045420812	detect: reduce verbosity, don't warn on empty files	9 years ago
Victor Julien	46ac5ed7b7	pfring: move output to 'Perf' level	9 years ago
Victor Julien	18de4c9654	offloading: work around missing TOE support	9 years ago
Victor Julien	9b80c21d78	offloading: distinguish between csum and the rest ... As AF_PACKET handles csum offloading don't check for this type of offloading. Other methods like pcap and netmap do require it to be turned off. Improve disable command suggestion wording.	9 years ago
Victor Julien	03d46f1369	offloading: reduce verbosity	9 years ago
Victor Julien	507027845d	afpacket: update offloading warning	9 years ago
Victor Julien	45fa25eb0c	offloading: improve checks on FreeBSD ... Move FreeBSD specific (but not netmap specific) checks from the netmap code to the general ioctl wrapper code. Warn from the check functions now, so callers no longer need to.	9 years ago
Victor Julien	33f8769001	offloading: move linux specific into their own func	9 years ago
Victor Julien	54bc471810	offloading: check for more offloading on Linux	9 years ago
Victor Julien	b1d191b478	netmap: fix enabling promisc mode on FreeBSD ... In FreeBSD setting the IFF_PROMISC flag has no effect. Instead we need to set the IFF_PPROMISC flag.	9 years ago
Victor Julien	6c7bf006b7	netmap: redo config parsing ... Normally we parse the config per interface only. But to properly setup the bridge, netmap also needs the config of it's peering interface. Instead of using a complicated peering scheme like in afpacket, simply parse the peers config too.	9 years ago
Andreas Herz	d0baa83d2b	util-runmode: pass initdata to runmode workers for nfqueue ... The VerdictNFQ was missing the initdata which results in a segfault within CaptureStatsSetup. This commit adds the passing of the initdata.	10 years ago
Victor Julien	f7124b1149	afpacket: disable tpacket-v3 by default ... It's still considered experimental at this point.	10 years ago
Victor Julien	66346e4632	libnet: work around older libnet type difference ... Older libnet 1.1.x have a non-const type for libnet_init's dev argument.	10 years ago
Victor Julien	a88359dcf0	detect: get proper legacy custom values. Issue #1804	10 years ago
Victor Julien	5c974f92a8	livedev: shorten devname at registration	10 years ago
Victor Julien	b673e14411	afl: fix various --afl-* options	10 years ago
Victor Julien	e76b334f8d	http body: fix compression tests	10 years ago
Victor Julien	5ec885e451	http: set of response body decompress limit ... This is a per personality setting.	10 years ago
Victor Julien	ed7dc0c6b3	unittest: minor cleanup	10 years ago
Victor Julien	b313f8ca7b	http: update compression mismatch test	10 years ago
Andreas Herz	36e4126227	detect-filemagic: fix heap-use-after-free ... This fixes the heap-use-after-free issue with sm being freed without being removed from the signature (s) list. Move the protocol check for rules with filemagic before the alloc and make the error log more precise.	10 years ago
Victor Julien	a309598721	netmap: work around mtu error on iface+ settings	10 years ago
Victor Julien	648a69759b	netmap: don't set more than 1 thread on sw ring	10 years ago
Victor Julien	86d44cea96	netmap: code cleanup	10 years ago
Victor Julien	b5633b9bfd	affinity: small cleanups to output & code	10 years ago
Victor Julien	5f9de1e734	affinity: rename detect -> worker set internall	10 years ago
Victor Julien	723e90a174	affinity: rename detect-cpu-set to worker-cpu-set ... Add fallback for existing configs.	10 years ago
Victor Julien	570b9d06e0	affinity: remove unused settings ... These were never referenced to in the code so they can be removed. Add bypass to config parser in case the settings are still in old yamls.	10 years ago
Victor Julien	bdc2c6e9ce	affinity: type cleanup	10 years ago
Victor Julien	2aac437927	output: reduce verbosity on info level	10 years ago
Victor Julien	4c663bb143	netmap: don't check for offloading twice	10 years ago
Victor Julien	2beb39469b	netmap: output cleanup	10 years ago
Victor Julien	b3bf7a5729	output: introduce config and perf output levels ... Goal is to reduce info output	10 years ago
Victor Julien	cc2ed783c5	output: improve notice and warning/error color handling	10 years ago
Victor Julien	e11753e3f2	profiling: fix minor compiler warning	10 years ago
Victor Julien	4369161b92	netmap: get offloading settings and warn if needed ... Add FreeBSD lookup function and use the existing code on Linux.	10 years ago
Victor Julien	a8a918545b	netmap: get correct RSS queues on Linux as well	10 years ago
Victor Julien	d861bf100b	netmap: reduce verbosity at startup	10 years ago
Victor Julien	d58d02fed5	netmap: handle missing config with better defaults ... Default to 'threads: auto' which uses RSS RX count when no config has been created for a interface.	10 years ago
Victor Julien	f446577412	netmap: implement 'threads: auto' ... Add until function for retrieving RSS RX count from netmap. Use the RSS count to create the threads.	10 years ago
Victor Julien	d39e5754e6	instance: use enum for runmode	10 years ago
Victor Julien	2412681eff	instance: memset to 0 before use	10 years ago
Eric Leblond	4defc5acc2	util-ioctcl: increase header size ... Headers can contain VLAN or Qing so we need to increase the value returned by GetIfaceMaxHWHeaderLength.	10 years ago
Andreas Herz	ed561c73a5	suricata: fix double packet processing threads ... With the additional ParseInterfacesList the packet processing threads were doubled since the Interface was included twice unless the device was passed via the commandline with af-packet=IF. The additonal ParseInterfacesList isn't necessary so remove it again	10 years ago
Victor Julien	371113e21e	ac-ks: don't allow use on big-endian	10 years ago