110 Commits (4816dcc3d312202af2f7048e2b19b4b1ba24d22f)

Author	SHA1	Message	Date
Victor Julien	9baa16af63	Convert flow memcap to u64. Bug #332.	14 years ago
Anoop Saldanha	b6ba944e6d	Rearrange flow manager functions into flow-manager.[ch]. Some other minor changes/updates	14 years ago
Anoop Saldanha	8363533a02	support for forced stream reassembly for to be pruned flows	14 years ago
Anoop Saldanha	c365bafbf6	We now inspect timed out streams + streams not processed as yet, at engine shutdown	14 years ago
Victor Julien	a5d9c86dd3	Shrink Flow structure with 20 bytes (on 32 bit) and reorder it. Clean up init, recycle, destroy macro's.	15 years ago
Anoop Saldanha	7c31a2327e	Add support for port based probing parsers for alproto detection	15 years ago
Anoop Saldanha	fe6e41e3ef	Removed FLOW_AL_NO_APPLAYER_INSPECTION. Moved it as FLOW_NO_APPLAYER_INSPECTION in Flow->flags. Turned Flow->flags into uint32_t and removed Flow->alflags	15 years ago
Anoop Saldanha	0c94d910e4	Removed FLOW_AL_STREAM_TOSERVER and FLOW_AL_STREAM_TOCLIENT. Use STREAM_TOSERVER and STREAM_TOCLIENT instead	15 years ago
Anoop Saldanha	ac5584a863	Removed FLOW_AL_PROTO_DETECT_DONE. Replaced it with FLOW_ALPROTO_DETECT_DONE, stored it in Flow->flags	15 years ago
Anoop Saldanha	49e2b580cb	Removed FLOW_AL_PROTO_UNKNOWN. We don't need this flag	15 years ago
Anoop Saldanha	38fe2b9070	Removed FLOW_AL_STREAM_START, EOF and GAP flags. We don't need these. Just use STREAM_* flags	15 years ago
Gurvinder Singh	7d0781b349	added support to log dropped packet as netfilter logs while in inline mode	15 years ago
Victor Julien	fc248ca7a1	Many small performance updates.	15 years ago
Pablo Rincon	5c43db85ce	Drop streams on inline mode when a drop rule match from a reassembled stream and/or app layer inspection	15 years ago
Pablo Rincon	a8cb8d830b	Fix for bug 186 and thresholding issue handling ip versions	16 years ago
Pablo Rincon	eed0ef6e69	Adding tag keyword support	16 years ago
Victor Julien	b60d2c4345	Fix flags mixup issue in the app layer.	16 years ago
Pablo Rincon	8cc525c939	UDP support at AppLayer message handling	16 years ago
Victor Julien	c26434fef1	Move flow use cnt to atomic and outside of the flow mutex protection.	16 years ago
Victor Julien	2fd31a1a11	Remove dsize grouping from detection engine grouping reducing memory usage. Store sgh in flow to reduce lookups. Reduce locking in alert handling. Increase default grouping values as we use less memory.	16 years ago
Victor Julien	32e3fea9e6	Exclude parts of a flow that are not changing after init from the flow mutex. Cleanup flow-hash function.	16 years ago
Pablo Rincon	29a6fc2f03	Adding some flow improvements and recovery on emergency mode	16 years ago
William Metcalf	2eef905c07	GPL and Copyright header updates.	16 years ago
Victor Julien	70b32f7380	First stab at creating a stateful detection engine. ... Stateful detection for app layer detection keywords, except uricontent. Stores it's partial results in the flow structure. Other modifications: - Generalize transaction tracking, logging and inspection. - Adapt http and dcerpc to use the new transaction handling. - Stream engine now always notifies app layer of a stream eof. This commit fixes bug #124.	16 years ago
Pablo Rincon	1238668961	Adding actions order and suport for rule action "pass"	16 years ago
William Metcalf	ce01927515	Import of GPLv2 Header 050410	16 years ago
Victor Julien	fc2029ef58	Fix small memuse counter issue in flow subsys, remove emergency printfs	16 years ago
Victor Julien	74dfbc0c49	Move flow flags to flow.h	16 years ago
Victor Julien	e3552a8e3f	Add more comments to detect and flow structures.	16 years ago
Pablo Rincon	34216fd3e2	bug87 Fix IPOnly veredicts on flows	16 years ago
Victor Julien	10cc9d5b6a	Add icmp flow handling.	16 years ago
Pablo Rincon	e26833be3f	Changing mutex/spinlocks/conditions naming types	16 years ago
Pablo Rincon	769022f4be	Adding support for Mac OS X, FreeBSD, centrailizing mutex/spins/conditions in a macro API, and some unittests	16 years ago
Gurvinder Singh	71da019734	some minor changes	16 years ago
Gurvinder Singh	bbb385422d	function to set packet flags	16 years ago
Gurvinder Singh	cc0b4f7181	initial version to support detection byepass	16 years ago
Victor Julien	b102ea2123	Big update: ... - Implement "closing" state in flow. - Add protocol specific timeouts. - Lots of stream tracking updates, fixing a lot of out of window issues. - Stream reassembly fixes. - Implement a new IDS runmode with 4 stream and detect threads. - Added a BUG_ON macro that aborts the engine if the expression is true. - Better balance the flow queue handler for traffic that doesn't have flow (like icmp currently). - Simplify application level protocol in the Tcp Session. - Add some debugging memory counters.	16 years ago
Victor Julien	b4f0e82463	Small flow updates.	16 years ago
Gurvinder Singh	9dcf6e2de2	handle the FLOW_STATE_CLOSED	16 years ago
Gurvinder Singh	ced5157dc9	Flow get state protocol specific	16 years ago
Gurvinder Singh	ab76253ec6	registering stream timeouts and flow prunning unit tests	16 years ago
Gurvinder Singh	a4ad7939d2	proto specific free function	16 years ago
Gurvinder Singh	55cdf8947e	some modification in protocol specifc timeouts and free funtion	16 years ago
Gurvinder Singh	e3b76dcaad	efficient protocol specific timeouts	16 years ago
Gurvinder Singh	b46d9dc2b4	part2 and part3.1 of timout task	16 years ago
Gurvinder Singh	a31a261737	Another and right way i guess for timeouts	16 years ago
Gurvinder Singh	0e64fa78b4	Protocol Specific Timeouts	16 years ago
Victor Julien	b26b5aa462	More cleanups.	16 years ago
Brian Rectanus	fa5939ca91	64 bit cleanup part2	17 years ago
Anoop Saldanha	53c21410b6	improve the threading api for the ids	17 years ago
Victor Julien	f5eeea5b0b	Make sure flow isn't freed while stream msgs are still in use.	17 years ago
William Metcalf	9b4c0d057f	Updated flow parsing code for validation, added unit tests, fixed statless check	17 years ago
Victor Julien	9854c19a88	Adapt Flow subsys init function to be able to initialize quietly for us in unit tests. Add flow to PPP unit tests. Fixes a floating point exception error.	17 years ago
Victor Julien	689bbfdc45	Rename all structure definitions in the "typedef struct _SomeStruct" format to "typedef struct SomeStruct_" to make the Doxygen output more useful. ... Remove the Trie multi pattern matcher code. It wasn't used anymore.	17 years ago
Victor Julien	8397413942	Comment updates.	17 years ago
Victor Julien	9c7f5afa79	Large update: pcap support, threading fixes, initial stream tracking, time handling, pool support, runmodes, decoders added, autojunk update.	17 years ago
Victor Julien	ff4b5a5db7	Add support for flowbits.	17 years ago
Victor Julien	657be002d1	Big detection engine update: scan improvements, b2g/b3g updates, bloom fixes, iponly detection implementation, dsize/flow grouping.	17 years ago
Victor Julien	efb10fc0d6	big update	17 years ago
Victor Julien	bab4b62376	Initial add of the files.	17 years ago