153 Commits (3a774165fa08cc8d6acb880d60e9d795154796f7)

Author	SHA1	Message	Date
Victor Julien	3a774165fa	Initial version of a inline raw reassembly function that reassembles in a sliding window. Introduce new unittest helpers for stream reassembly.	15 years ago
Victor Julien	2849d2b1d3	Initial code for stream 'inline' mode: packets that are (partly) overlapping with already accepted packets (meaning in the streams seg list) are rewritten to make sure they contain the exact same data.	15 years ago
Anoop Saldanha	c9897a44a4	fast pattern support for http_cookie. Also support relative modifiers	15 years ago
Anoop Saldanha	bbbedaf963	fast pattern support for http_method. Also support relative modifiers	15 years ago
Eric Leblond	3eada85ff8	Add interface setting discovery via ioctl ... This patch adds support for MTU discovery of link following idea of go.ph1g. It also adds some function to give a approximation of link header length.	15 years ago
Anoop Saldanha	eecf2d7e13	Add the makefile.am addition that I forgot to add in the previous commit for http_raw_header	15 years ago
Anoop Saldanha	c61c68fd36	mpm and fast pattern support for http_header. Also support relative modifiers for http_header	15 years ago
Anoop Saldanha	5c6a65dc58	support relative modifiers for http_client_body. Introduce body processing engine in detect-engine-hcbd.[ch]	15 years ago
Gurvinder Singh	b7da115e6d	support for http_stat_code keyword has been added to detection module	15 years ago
Gurvinder Singh	1deae70cf7	added http_stat_msg keyword support for detection module	15 years ago
Anoop Saldanha	88d94b136d	Support for reference.config file	15 years ago
Anoop Saldanha	658ff5753d	aho-corasick for the cpu. We have 2 versions of ac. The first MPM_AC uses the delta table and the secone one MPM_AC_GFBS uses the goto-failure table	15 years ago
Gurvinder Singh	3eab715153	support for printing protocol names for known protocol	15 years ago
Victor Julien	1859ed54c7	Add memcmp api with a plain memcmp function and a SSE3 accelerated memcmp.	15 years ago
Victor Julien	87f88867f4	Further improve B2gc. Add B2gm. Improve memory layout.	15 years ago
Victor Julien	9dfbab42f8	WIP B2gc	15 years ago
Pablo Rincon	9d7baa7a9f	Adding ssh app layer module with two new keywords: ssh.protoversion and ssh.softwareversion	15 years ago
Anoop Saldanha	33f4beb0bc	batching of packets support for cuda b2g mpm. Supported for both 32 and 64 bit platforms	16 years ago
Victor Julien	e685579231	Add optional structure validation code.	16 years ago
Pablo Rincon	eed0ef6e69	Adding tag keyword support	16 years ago
Kirby Kuehl	c3b9305259	dcerpc udp support	16 years ago
Anoop Saldanha	45ea0d914e	dce stub content keywords support using dcepayload.c support for all dce related content keywords	16 years ago
Jason MacLulich	835630efbd	Add initial support for reading packets from a DAG card, we only support reading from a single stream at this time. ... Use the --dag <dagname> cmd line option to specify from which DAG card to read pkts from. Issue at the moment with pkts being ejected during shutdown -- at the moment we ignore any packets that are not of link type Ethernet.	16 years ago
Ondrej Slanina	6bf7d76005	added possibility to run suricata as WIN32 service	16 years ago
Victor Julien	0140a14a15	Introduce atomic operations API that supports GCC's atomic operations and a fallback using (spin)locks. Convert ringbuffer api to use the new atomic api.	16 years ago
Gerardo Iglesias Galvan	55dfa36963	Add support for http_uri keyword	16 years ago
Victor Julien	a48a767efc	Lockfree ringbuffer wip.	16 years ago
Jason Ish	a93b2e6b84	Support for reading ERF files.	16 years ago
Gurvinder Singh	5fe1dc1d24	support for sslv2/sslv3 their unit tests and better stream no reassembly flag handling	16 years ago
Victor Julien	b8641f300d	Rename asn1 files, fix an invalid free, fix improper init of vars in one unittest.	16 years ago
Pablo Rincon	3fa3229e01	ASN1 decoder and keyword implementation	16 years ago
Victor Julien	70b32f7380	First stab at creating a stateful detection engine. ... Stateful detection for app layer detection keywords, except uricontent. Stores it's partial results in the flow structure. Other modifications: - Generalize transaction tracking, logging and inspection. - Adapt http and dcerpc to use the new transaction handling. - Stream engine now always notifies app layer of a stream eof. This commit fixes bug #124.	16 years ago
Jason Ish	18e5ac8cde	Basic rule profiling even though the results may be skewed by a bad rule in a grouping of rules.	16 years ago
Pablo Rincon	e18e2ec998	Changing threshold logic	16 years ago
Pablo Rincon	1238668961	Adding actions order and suport for rule action "pass"	16 years ago
Victor Julien	070ed778b8	Libcap-ng support by Gurvinder Singh and myself. Basic support for per thread caps is added, but not activated as it doesn't seem to work yet. Work around for incompatibility between libnet 1.1 and libcap-ng added.	16 years ago
Pablo Rincon	ab02ab9ead	adding http_header keyword support	16 years ago
Victor Julien	54aa1790f3	Remove Makefile.am reference to non-existing file.	16 years ago
Pablo Rincon	9803def006	Adding pidfile support (thanks to Steve Grubb for the patch)	16 years ago
Anoop Saldanha	97d49d8f5e	support for http_client_body keyword	16 years ago
Breno Silva	67f2026279	Global Threshold config	16 years ago
Victor Julien	08600df6b1	Small uri cleanups.	16 years ago
Pablo Rincon	b708d7f65d	Adding Uricontent inspection with spm. Modifiers for uricontent are now supported	16 years ago
Gerardo Iglesias Galvan	ef2ae76c42	Add support for detection_filter keyword	16 years ago
Victor Julien	bef70a04ce	First stage of detect engine redesign: equal patterns share id's, search phase no longer used, new match verification phase.	16 years ago
Pablo Rincon	25a3a5c6d8	Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.	16 years ago
William Metcalf	260d0d7673	Steve Grub fixes... Thanx Steve!	16 years ago
William Metcalf	0fe4373b67	Rolled back to 0.2.x branch renamed htp to libhtp	16 years ago
William Metcalf	f7111f3847	import of integrated htp lib and small libnet fixes	16 years ago
Jan Jezek	fe6a72befc	Code is now compilable on the Win32 platform	16 years ago