2467 Commits (39443570585e23638426414d5ea967202ad0582d)

 

All Branches   

Search

Author	SHA1	Message	Date
Eric Leblond	3944357058	Remove unified related enum. ... This patch removes the enum related to unified1 output.	14 years ago
Eric Leblond	391d813c82	Remove unified1 output module.	14 years ago
Victor Julien	047fcd6ade	Add missing case sensitive to insensitive conversions for http_header, http_raw_header, http_method, http_cookie and http_raw_uri with 'nocase' set.	14 years ago
Victor Julien	bde55578d6	Override HTP IDS personality normalizing the query string to lowercase. Bug #362.	14 years ago
Victor Julien	7ef34b7bcc	Exlcude DSIZE LT case from setting the 'need payload' mask bit as it can include 0, which means no payload.	14 years ago
Victor Julien	09b5dca343	Consider signatures with the flags keyword to be packet inspecting only, not stream.	14 years ago
Victor Julien	30d84ab20d	Unlock flow in StreamTcpSegmentForEach if there is no TCP session.	14 years ago
Eric Leblond	9aeadd5696	prelude: suppress unused variable.	14 years ago
Eric Leblond	db17f3de6c	prelude: add stream segment dump ... This patch should fix #355.	14 years ago
Eric Leblond	2073b9db0c	debuglog: uses state selection system.	14 years ago
Eric Leblond	1596241687	debuglog: fix segment logging. ... StreamSegmentForEach returns the number of segments or < 0 in case of error. This patch synchronizes debuglog output module with this behaviour.	14 years ago
Victor Julien	3644e90a2c	Don't set higher transaction id's in HTTP sessions than we have.	14 years ago
Victor Julien	67cea09911	Handle failing thread modules that are called by the Pcap file callback.	14 years ago
Victor Julien	498d1d9287	Update default suricata.yaml to use more sane settings for EXTERNAL_NET and AIM_SERVERS.	14 years ago
Victor Julien	bfff14aa78	Improve error detection in the port and address parsing in signatures. Bug #295.	14 years ago
Anoop Saldanha	ba6bada155	change rev field in Signature to u32 and use strotoul to extract the value. Cleanup some dead code/comments	14 years ago
Anoop Saldanha	ed3b44b3b5	fix parsing content keywords. We are more strict now. All content keywords need to be enclosed in double quotes. Better validation for sid, priority and rev keywords	14 years ago
Victor Julien	18da4a8b73	Add missing cuda header file causing 'make distcheck' to fail.	14 years ago
Victor Julien	c0bc83458c	Bump version to 1.1beta3.	14 years ago
Eric Leblond	89c38b0ced	prelude: fix compilation ... PrintInet was used without inclusion of 'util-print.h'. This was causing a compilation failure.	14 years ago
Victor Julien	39edb23ac4	Support stream.inline mode in unified2 tcp segments logging.	14 years ago
Victor Julien	2e2e80b812	Add packet alert flag to indicate a match happened (partly) in the app layer state. Make unified2 use this flag.	14 years ago
Eric Leblond	128261cb97	unified2: Fix event_id computation ... This patch fixes event_id computation which was not incremented for each alert.	14 years ago
Eric Leblond	b3023643ec	unified2: fix multiple alerts case	14 years ago
Eric Leblond	7fd1e9cacc	unified2: synchronize IPv4 and IPv6 code ... IPv6 code was missing some points.	14 years ago
Eric Leblond	839b0d9bfe	unified2: switch to event->packet->packet mode. ... Attach multiple packets to an event instead of using one event data per packet. This is currrently unsupported by reporting frontend but at least we don't have multiple alerts.	14 years ago
Eric Leblond	316f2d7289	unified2: segment callback log raw packet. ... As we don't have any trustable information about the ethernet header, we can simply log RAW packet to avoid to confuse the analyst.	14 years ago
Eric Leblond	a03a402b83	unified2: set datalink to correct value. ... The value of datalink could have been modified if the logging of segment was attempted. This patch restore it to a correct value.	14 years ago
Eric Leblond	50ddd2df43	Restore old barnyard2 support. ... Some old version of barnyard2 were needing a workaround in the packet header building. THis patch introduces a enable-old-barnyard2 configure flag which can be used to restore this behaviour.	14 years ago
Eric Leblond	2f24987f15	unified2: improve packet logging logic. ... This patch improves packet logging logic and fix some place regarding alert generation (event_id, ethernet header).	14 years ago
Eric Leblond	628bfcc1b9	stream: Change return of StreamSegmentForEach ... The function now returns the number of segment where the callback has ben runned successfully.	14 years ago
Victor Julien	c672bdd863	Improve atomic operation support detection. Fixes #342.	14 years ago
Anoop Saldanha	0edf053f31	if app layer inspection is disabled, immediately set the eof flag	14 years ago
Anoop Saldanha	fe11e02f58	fix inspect id update bug. This should prevent unnecessary FPs for pipelined requests	14 years ago
Anoop Saldanha	4e44073c79	http logging module should log all txs in the list and not just the last complete tx available on EOF	14 years ago
Anoop Saldanha	c13ad8c28a	Provide a function to set the app layer tx eof flag. Use this in FFR code instead of diretly setting the flag. This cleans up the API as well	14 years ago
Anoop Saldanha	b406af451b	updates to http tx id vars. FFR now flags the app layer session for EOF when creating a pseudo packet for a flow	14 years ago
Anoop Saldanha	67be07bf15	fix threading issue in debug log. locked mutex isn't freed before returning. fixed	14 years ago
Anoop Saldanha	d23e775ae2	fix threading bug. Main thread's restart TV code waiting on a failed TV. Now main thread sets the de_init flag before waiting on the failed thread. Thanks to Eric Leblond for reporting it	14 years ago
Anoop Saldanha	737122663c	IPProto now doesn't accept sigs, which has both < and >, with < value being less than > value. Update affected unittests to reflect the change	14 years ago
Anoop Saldanha	dae099893b	more unittests for ipproto with multiple nots + some fixes	14 years ago
Anoop Saldanha	9887084370	support multiple ipprotos in the same sig + unittest	14 years ago
Anoop Saldanha	a781fb9884	rewrite all ipproto keyword tests	14 years ago
Anoop Saldanha	8033a262a7	cleanup ipproto code	14 years ago
Anoop Saldanha	caf450d325	fix ipproto keyword negation case - bug #340	14 years ago
Eric Leblond	79c329f81b	alert-unified2: logging of stream segments. ... This patch adds the logging of stream segments. Among other modifications, it uses a wrapper to fwrite to permit to update file statistics in an automated manner. Some memcpy have also been avoided by using pointer to the data.	14 years ago
Eric Leblond	2fa837bcec	alert-debuglog: Add logging of stream segments. ... This patch introduces logging of the stream segments in case of a signature match on application layer.	14 years ago
Eric Leblond	4f0cdf28a3	Introduce StreamSegmentForEach function ... This patch introduces a function called StreamMsgForEach which can be used to run a callback on all segments of a stream. This is currently only supported for TCP as this is the only streaming aware protocol.	14 years ago
Anoop Saldanha	d68775d47d	introduce bitmasks instead of alproto_masks for use by the probing parser. Remove all alproto_masks we had previouslys for PP	14 years ago
Victor Julien	f5ef842752	Implement a counter for TCP packets with invalid checksums: tcp.invalid_checksum. Bug #311.	14 years ago