Gerardo Iglesias Galvan
2836e0de4e
Fix potential alert-unified-log recourse leak during initialization
15 years ago
Eric Leblond
c8a811e69d
Make use of per function/thread data in alert unified.
...
This patch replaces a local variable buffer by the usage of the data
contained in the local thread variable.
15 years ago
Victor Julien
75439863ed
Shrink PacketAlerts structure so that Packet structure is a lot smaller. Reduce max events per packet from 256 to 15.
15 years ago
Anoop Saldanha
a165d45da9
naming changes for runmodes
15 years ago
Victor Julien
6f58ef13c4
Improve error cleanup in output function. Thanks to iswalker.
15 years ago
Eric Leblond
dd038c1906
Modify files to avoid direct pckt payload access
...
This patch implements the needed modification of payload access
in a Packet structure to support the abstraction introduced by
the extended data system.
15 years ago
Victor Julien
cac95010f3
Minor unified1-log changes to work around a clang issue, but also to clean up the logic slightly.
15 years ago
Pablo Rincon
868d4614b9
Tag engine improvements. Output tags only on unified format. Added atomic counter for tagged hosts/sessions
16 years ago
Victor Julien
4e7df60b2f
Make pcap file mode read multiple packets per 'read'. Update threading model to deal with this.
16 years ago
William Metcalf
2eef905c07
GPL and Copyright header updates.
16 years ago
Gerardo Iglesias Galvan
9f4fae5b1a
Fix inconsistent use of dynamic memory allocation
16 years ago
William Metcalf
ce01927515
Import of GPLv2 Header 050410
16 years ago
Victor Julien
070ed778b8
Libcap-ng support by Gurvinder Singh and myself. Basic support for per thread caps is added, but not activated as it doesn't seem to work yet. Work around for incompatibility between libnet 1.1 and libcap-ng added.
16 years ago
Victor Julien
79a780ffe4
Improve a number of error and info messages.
16 years ago
Victor Julien
18e00dc6d0
Add warning about needing a patch for Barnyard 0.2.0 on 64-bit. Rename sc_timeval32 to SCTimeval32.
16 years ago
Jason Ish
12962c5969
./configure option, --enable-unified-native-timeval to have unified outputs use a native timeval to be compatible with unpatched barnyard 1 on 64 bit systems.
16 years ago
Jason Ish
2c6dd6b8fa
Be compatible with Snort. Stick with a 32 bit style of timeval for the unified outputs.
16 years ago
Victor Julien
eeb98c6900
Move SCSetThreadName to proper functions.
16 years ago
Gerardo Iglesias Galvan
9f35a24a1f
Set threads name. Fix bug #83
16 years ago
Gurvinder Singh
cf2d254cc6
fixed the memory leaks and buffer overflows reported by parfait
16 years ago
Gurvinder Singh
4879045c6f
bug 102 patch
16 years ago
Jason Ish
37bb733929
Looks like something happened in a previous merge: - Don't set the limit here, its already set. - Don't write the log file header here, its also been written.
16 years ago
Jason Ish
40f9653c06
Have output plugs use an OutputCtx which is a little more generic than LogFileCtx. The OutputCtx provides a place for module private data to avoi overriding the LogFileCtx.
16 years ago
Pablo Rincon
25a3a5c6d8
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
16 years ago
Jason Ish
73700af92b
afaik integer increments are not atomic, so put inside the lock
16 years ago
Jason Ish
fbdf1baf1c
- rebase
...
Provide limits to the unified outputs.
16 years ago
Pablo Rincon
cef12d30b5
Unified output fixes: alert count per module (not per thread), fix timestamps on pcap mode, write *all* the alerts of a packet, write the log header once also on unified alert
16 years ago
Jason Ish
763fb4a583
Fix threading issues with unified-log. - Only write the header once, on opening, not per thread init. - Track the size in the log file ctx, not per thread.
16 years ago
Steve Grubb
f6653752c5
memory leak cleanup in alerts
...
Hello,
I ran the code through an analysis program and found several memory leaks
in the alert code.
*In src/alert-fastlog.c at line 178, aft was not being freed
*In src/alert-debuglog.c at line 205, aftwas not being freed
*In src/alert-unified-log.c at lines 234 and 243, aun was not being freed
*In src/alert-unified-alert.c at lines 219 and 230, aun was not being freed
*In src/alert-unified2-alert.c at line 505, aun was not being freed
The patch below fixes this.
-Steve
16 years ago
Gurvinder Singh
fea277b2aa
memory leak fixes
16 years ago
Gurvinder Singh
5c8d90afc8
memory leak fixes
16 years ago
Jason Ish
095f2cf6ef
Consistency fix.. Xxxlog -> XxxLog.
16 years ago
Jason Ish
e204d07717
Have output modules register themselves so run mode configurator becomes aware of them for purposes of being configured from the config file.
16 years ago
Jason Ish
4c83652ad3
initialize vars
16 years ago
Jason Ish
844c444af1
Use the configuration file to setup alert logging (and http logging).
...
Only setup for the live pcap modes at the moment.
16 years ago
Anoop Saldanha
8189f4d88e
Change error log messags to debug ones in the log modules
16 years ago
Anoop Saldanha
4d430060d2
fix for unclear error messages bug 15
16 years ago
Anoop Saldanha
2c0345f55e
Fix for Unified Alert Test Bug #14
16 years ago
Pablo Rincon
459a823a09
Reutilize the filename buffer and avoid malloc's
16 years ago
Pablo Rincon
5f59def86a
Force reset size_current to 0 after rotate
16 years ago
Victor Julien
ecf86f9c23
Rename to Suricata.
16 years ago
Pablo Rincon
e26833be3f
Changing mutex/spinlocks/conditions naming types
16 years ago
Pablo Rincon
769022f4be
Adding support for Mac OS X, FreeBSD, centrailizing mutex/spins/conditions in a macro API, and some unittests
16 years ago
Victor Julien
5c3bbb8d61
Time handling: improve time handling in unittests
...
- make sure before each unittest is run the time is reset
- add functions to set the time to current time and increment the time
- convert alert-unified* Rotate tests to use them
- convert time based counters to use them
- use GetTime instead of gettimeofday for creating the unified* filenames
16 years ago
Pablo Rincon
15855e11f3
Fixing alert unified log file rotation. Adding unittests
16 years ago
Gurvinder Singh
40b8afdd56
support for thread exit constants
16 years ago
Pablo Rincon Crespo
a84cc38bc9
Preparing multithreading support for alert modules and logfilectx
16 years ago
Victor Julien
bcc5bbef93
Yet more logging api usage changes.
16 years ago
Victor Julien
0d0ffb9963
Reorganize header inclusions.
16 years ago
Victor Julien
a39108843e
Small tm module API rename to reflect that Init/Deinit/ExitPrintStats are per thread calls.
16 years ago