8385 Commits (3ab9120821e2b5cbc5925470bcfa5bcfb53f246b)

 

All Branches   

Search

Author	SHA1	Message	Date
Eric Leblond	51be576a30	nfq: modify queue length computation logic ... This patch modifies max queue length computation logic. The max queue length was set to MAX_PENDING which is the total number of packet processed simultaneously in suricata. This value is correct but this will not permit to take all burst effects into account (read sudden quantity of packet that arrives faster than suricata is enable to parse). Furthermore there is a delaying system when suricata gets overloaded which make necessary to have packet storable into kernel for some time. To improve this situation the patch increases the maximum queue length to NFQ_BURST_FACTOR (4) time the MAX_PENDING packet and it also increase the nfnetlink buffer size to be able to store all packets waiting for suricata in the netlink receive buffer.	15 years ago
Eric Leblond	775ac9ad9d	fix code file permission ... detect-http-method.c was executable.	15 years ago
Eric Leblond	84dfc0172a	gcc warning fixes. ... This patch fixes gcc warning: warning: suggest braces around empty body in an ‘if’ statement This was the case in when the macro SCLogDebug was used: if (ssn != NULL) SCLogDebug("ssn->alproto %"PRIu16"", ssn->alproto); It also fixes a signed-unsigned comparison.	15 years ago
Eric Leblond	bda8702474	configure: compile with -Wextra ... This patch modify CFLAGS to use -Wextra flag. To avoid problem with "unused param" it disable this warning.	15 years ago
Eric Leblond	72d48f6658	nfq: add sanity checking ... This patch adds sanity checking to payload handling. It set length of packet to zero if an error occurs.	15 years ago
Eric Leblond	56cccdfa62	nfq: use switch instead of 'else if' ... This patch convert a 'else if' serie to a switch to increase the readability of the decision related code. Please enter the commit message for your changes. Lines starting	15 years ago
Eric Leblond	c96586446b	ethernet: use switch instead of 'else if' ... This patch uses a switch instead of a 'else if' series. It also adds a debug message for unsupported ethernet type.	15 years ago
Eric Leblond	6cf00d6204	Fix typo in Makefile.am ... This patch fixes a typo in Makefile.am which was preventing 'make tags' from working.	15 years ago
Victor Julien	9295193968	Fixup unittest error output for RAW decoder.	15 years ago
William Metcalf	c5d0b492d3	small unittest fixes to decode-raw.c	15 years ago
William Metcalf	8a64321340	raw pcap support additionl ipv4/6 validation	15 years ago
Pablo Rincon	0c9f51498a	Small fixes at unittest helper functions and TestBidirec03	15 years ago
Pablo Rincon	c80160b96d	More examples of unittest helper functions usage reference	15 years ago
Pablo Rincon	b6a3395c08	Adding unittest helper functions for building generic packets, checking arrays of expected match results, perform generic tests, etc. Look at util-unittest-helper.c and detect-ipproto.c for references	15 years ago
Jason Ish	095f2cf6ef	Consistency fix.. Xxxlog -> XxxLog.	15 years ago
Jason Ish	e204d07717	Have output modules register themselves so run mode configurator becomes aware of them for purposes of being configured from the config file.	15 years ago
Victor Julien	9b90c553b5	Clean ip fields from packet as well when the packet is reused. Prevents issues with malformed packets that are rejected by the decoders before ipaddresses are set.	15 years ago
Victor Julien	27a138d862	Suppress some flow messages.	15 years ago
Gurvinder Singh	b0dcd02c1b	bug 56 patch	15 years ago
Victor Julien	eb67bb442e	Fixup unittests that use buffers that simulate configuration files. They now include the YAML header.	15 years ago
Jason Ish	4e1acf5fd2	Require that the configuration file begins with a valid YAML version. At this time this means the configuration file must begin with ... %YAML 1.1	15 years ago
Jason Ish	5e318aa342	Fix issue 55. ... Don't process any key/value pairs until we've hitting a mapping.	15 years ago
Jason Ish	c4f178f3d7	Do not seen_last unless the packet with more_frags=0 was actually inserted into the frag tracker. Fixes issue 53. ... Add unit test for this failure case.	15 years ago
Jason Ish	fc5df7d064	don't create a new tracker when frags are received in reverse order.	15 years ago
Gerardo Iglesias Galvan	40c514f295	Fix bug in logging msg when using --init-errors-fatal	15 years ago
Gerardo Iglesias Galvan	5eb819b0f4	Add signature line no. to error message when parsing fails	15 years ago
Gerardo Iglesias Galvan	fae92f8d7b	Fix bug#30. Fix logging call from prev patch	15 years ago
Gerardo Iglesias Galvan	988dc5520b	Improve output when loading rules	15 years ago
Victor Julien	56556eb550	Set payload no inspect flag for packets with encapsulated packets as these are inspected separately	15 years ago
Victor Julien	9ececacda3	Fix packet timestamp handling for encapsulated packets.	15 years ago
Jason Ish	4c83652ad3	initialize vars	15 years ago
Victor Julien	c1283a6628	Fix app layer proto detection code not being thread safe.	15 years ago
Gurvinder Singh	fde948f488	bug 41 patch	15 years ago
Victor Julien	fcabd1b2ba	Fix typo.	15 years ago
Jason Ish	cf95fa7c74	configurable outputs for nfq and pcap file.	15 years ago
Jason Ish	a05436af8c	Configurable alert outputs for PF_RING modes.	15 years ago
Jason Ish	844c444af1	Use the configuration file to setup alert logging (and http logging). ... Only setup for the live pcap modes at the moment.	15 years ago
Victor Julien	13e10ccd86	Enable bytes per sec and mbit per sec for nfq as well	15 years ago
Anoop Saldanha	e45b626b24	refactoring, tests for address engine ipv4	15 years ago
Jason Ish	1aabe6f7c1	in the unit tests make sure memory allocated from the pool was returned.	15 years ago
Jason Ish	6547725b39	consolidate more common code between ipv4 and ipv6.	15 years ago
Jason Ish	176c6e5668	use a common insert method for ipv4 and ipv6	15 years ago
Jason Ish	ccbf8bcae5	Use the V6 insert and re-assembly logic for IPv4 as well. Its a little simpler to track and update.	15 years ago
root	9b74a2765e	64 bit portability	15 years ago
Victor Julien	d7958f7983	fix wrong keyword name	15 years ago
Victor Julien	9ee6d6906f	Add some safety checks.	15 years ago
Anoop Saldanha	06a640e794	fix for bug #47	15 years ago
Anoop Saldanha	a83f7abcc1	logging module bug 6 fix	15 years ago
Victor Julien	6b36e23e45	Fix not decreasing the flow use_cnt reference counter in some cases from the app layer detection code. This caused some streams to never fully time out and thus clutter up the flow table and session pool.	15 years ago
Victor Julien	c3269dbcb4	Fix compiler warning in http method code	15 years ago