3762 Commits (34d063adeac6e7693feb97ebb0b141c49f25c86d)

 

All Branches   

Search

Author	SHA1	Message	Date
Anoop Saldanha	b0b4052860	detect-pcre.c cleanup. Delete old pcre functions that we no longer use.	13 years ago
Eric Leblond	680e941a8f	af-packet: clean APFPacketVar before release. ... This patch resets the AFPPacketVar linked to a Packet in the release function to avoid any side effect when the packet is reused. To do so a new AFPV_CLEANUP macro has been introduced.	13 years ago
Eric Leblond	775f379e2b	decode: clean release function	13 years ago
Anoop Saldanha	21f92c0a89	Give priority to non stream content over stream content when selecting fast ... pattern.	13 years ago
Victor Julien	a08a0e9161	Minor output cleanup	13 years ago
Victor Julien	abc3f903f9	Fix defrag compilation warning.	13 years ago
Victor Julien	525367113a	Fix compilation if luajit is disabled.	13 years ago
Victor Julien	d1abd552e9	luajit: correct offset passed to script for lua's array idx starting at 1. Add http.response_headers and http.response_headers.raw buffers.	13 years ago
Victor Julien	20d2db085e	reintroduce pool free func for cases where block alloc is not used.	13 years ago
Victor Julien	98484ffdcc	luajit: prealloc lua states to increases chances of alloc success. Luajit requires them to be in memory <2GB.	13 years ago
Victor Julien	f962e3de29	pool: only alloc one large block if it will actually be used.	13 years ago
Victor Julien	6f7e527e92	luajit: fix crash at shutdown / rule reload if lua script didn't properly init.	13 years ago
Eric Leblond	8192f6ce8c	Add missing include in flow-manager ... DefragTimeoutHash was not declared before being used.	13 years ago
Victor Julien	44b7d5551a	luajit: fix crash if luaL_newstate fails	13 years ago
Victor Julien	b29971bc92	luajit: buffer selection fixes	13 years ago
Victor Julien	fcc21ae4cc	http: fix multipart parsing bug	13 years ago
Victor Julien	8f337a3904	stream: never resend reassembled data to app layer.	13 years ago
Victor Julien	9a4b612126	app layer events: prefilter sigs that need an event	13 years ago
Victor Julien	575c87aeba	engine events: prefilter sigs that need a event	13 years ago
Eric Leblond	5f12b23469	af-packet: little code cleaning ... This patch cleans the code were two almost identical treatment on the packet we're made. It may be linked by a merge error I've done or to a simple mistake on my side.	13 years ago
Eric Leblond	0581a23f3c	af-packet: fix IPS mode ... There was an inversion in code resulting as all sockets being seen as non IPS mode when doing the peering. This resulted in a crash at first packet because it has no peer.	13 years ago
Eric Leblond	566674ae4a	Fix logic operator. ... Previous patches on the same subject did not fixed this error as it was undetected because the code was not compiled on my setup.	13 years ago
Victor Julien	7a044a99ee	Defrag engine ... Big rewrite of defrag engine to make it more scalable and fix some locking logic flaws. Now uses a hash of trackers similar to Flow and Host hashes.	13 years ago
Victor Julien	c91c359692	profiling: fix build on older systems	13 years ago
Eric Leblond	794bfc590c	autotools: fix doc install on old systems.	13 years ago
Victor Julien	7babb35aeb	profiling: remove obsolete unit test	13 years ago
Eric Leblond	cdbc9be1c3	pf_ring: set cluster_id even if only one thread is used.	13 years ago
Victor Julien	1f92307517	profiling: minor cleanup	13 years ago
Victor Julien	3da3e3264c	profiling: make sure counters are reset after a reload.	13 years ago
Victor Julien	2343ff8950	profiling: fix memory error in case of rule reload.	13 years ago
Victor Julien	ec7e79c748	Rule profiling update ... - Remove usage of counters api. - Store stats in detect engine thread ctx to remove locking - Support rule reloads	13 years ago
Victor Julien	ba6f564296	luajit: add http.uri.raw, cookie, ua, headers, headers.raw buffers.	13 years ago
Eric Leblond	9c28cd40fd	Fix build if luajit is not available.	13 years ago
Eric Leblond	937ba71491	defrag: don't return after a cleaning. ... This patch changes the policy of the timeout function by cleaning every timeouted trackers. Previous code was only freeing the first tracker and this was resulting in calling the timeout function continuously. One of my previous patch has modified the function to avoid to run it more than twice a second. But as it was not taken into account the fact only the first tracker was freed, the result was that a lot of tracker could not be allocated.	13 years ago
Victor Julien	b6834cb6b2	luajit: support http.request_body (http_client_body) and http.response_body (file_data/http_server_body).	13 years ago
Victor Julien	42646579a8	luajit: clean up initialization	13 years ago
Eric Leblond	c55b618bd4	Install documentation with 'make install'.	13 years ago
Eric Leblond	619014a280	pool: rename Free function to Cleanup ... This patch renames Free functions to Cleanup as the free is made by the pool system.	13 years ago
Eric Leblond	f241312a36	defrag: don't use message for repetitive error ... When nothing can be fetch from the pool, this can repeat frequently. Thus displaying a message in the log will not help. This patch uses a counter instead of a log message. As this is a sort of memcap this is conformed to what is done for other issues of the same type.	13 years ago
Eric Leblond	6303b5d987	SC_LOG_ERROR is not an error.	13 years ago
Eric Leblond	d51dd6a30e	Fix warning about unused return of SC_ATOMIC func.	13 years ago
Eric Leblond	c4f9d0e0e1	Fix invalid usage of operator.	13 years ago
Eric Leblond	7af9fd7735	freebsd: fix warning about redeclaration.	13 years ago
Eric Leblond	4d2305c0a8	freebsd: fix warning	13 years ago
Eric Leblond	6d55446655	ipfw: avoid critical error for broadcast ... In some setup, suricata may receive broadcast packets and the call to sendto may fail if the wrong interface is choosen by kernel. This patch change the error treatment to avoid to leave when this problem occurs.	13 years ago
Eric Leblond	41cb365a39	ipfw: add missing include	13 years ago
Eric Leblond	ec2445702c	autotools: fix default path for magic file.	13 years ago
Eric Leblond	e168824d80	freebsd: fix function usage. ... The unlock function was not correctly used in error treatment.	13 years ago
Jason Ish	ea020e2be6	Do not trim the FCS, pcaps converted to ERF will have have an FCS.	13 years ago
Eric Leblond	4a1a008009	af-packet: fix looping in ring buffer. ... A crash can occurs in the following conditions: * Suricata running in other mode than "workers" * Kernel fill in the ring buffer Under this conditions, it is possible that the capture thread reads a packet that has not yet released by one of the treatment threads because there is no modification done on the ring buffer entry when a packet is read. Doing, this it access to memory which can be released to the kernel and modified. This results in a kind of memory corruption. This bug has only been seen recently and this has to be linked with the read speed improvement recently made in AF_PACKET support. The patch fixes the issue by modifying the tp_status bitmask in the ring buffer. It sets the TP_STATUS_USER_BUSY flag when it is confirmed that the packet will be treated. And at the start of the read, it exits from the reading loop (returning to poll) when it reaches a packet with the flag set. As tp_status is set to 0 during packet release the flag is destroyed when releasing the packet. Regarding concurrency, we've got a sequence of modification. The capture thread read the packet and set the flag, then it passes the queue and the packet get processed by other threads. The change on tp_status are thus made at different time. Regarding the value of the flag, the patch uses the last bit of tp_status to avoid be impacting by a change in kernel. I will propose a patch to have TP_STATUS_USER_BUSY included in kernel as this is a generic issue for multithreading application using AF_PACKET mechanism.	13 years ago