aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
19,279 Commits
8 Branches
173 Tags
252 MiB
main
main-7.0.x
main-8.0.x
master-6.0.x
master-5.0.x
master-4.1.x
master-4.0.x
master-3.2.x
suricata-8.0.6
suricata-7.0.17
suricata-8.0.5
suricata-7.0.16
suricata-8.0.4
suricata-7.0.15
suricata-8.0.3
suricata-7.0.14
suricata-8.0.2
suricata-7.0.13
suricata-8.0.1
suricata-7.0.12
suricata-8.0.0
suricata-7.0.11
suricata-8.0.0-rc1
suricata-8.0.0-beta1
suricata-7.0.10
suricata-7.0.9
suricata-7.0.8
suricata-7.0.7
suricata-7.0.6
suricata-6.0.20
suricata-7.0.5
suricata-6.0.19
suricata-6.0.18
suricata-7.0.4
suricata-6.0.17
suricata-7.0.3
suricata-6.0.16
suricata-7.0.2
suricata-6.0.15
suricata-7.0.1
suricata-6.0.14
suricata-7.0.0
suricata-7.0.0-rc2
suricata-6.0.13
suricata-6.0.12
suricata-6.0.11
suricata-7.0.0-rc1
suricata-6.0.10
suricata-6.0.9
suricata-7.0.0-beta1
suricata-6.0.8
suricata-6.0.7
suricata-6.0.6
suricata-5.0.10
suricata-6.0.5
suricata-5.0.9
suricata-6.0.4
suricata-5.0.8
suricata-6.0.3
suricata-5.0.7
suricata-6.0.2
suricata-5.0.6
suricata-6.0.1
suricata-5.0.5
suricata-4.1.10
suricata-4.1.9
suricata-5.0.4
suricata-6.0.0
suricata-6.0.0-rc1
suricata-6.0.0-beta1
suricata-5.0.3
suricata-4.1.8
suricata-4.1.7
suricata-5.0.2
suricata-4.1.6
suricata-5.0.1
suricata-5.0.0
suricata-5.0.0-rc1
suricata-4.1.5
suricata-5.0.0-beta1
suricata-4.1.4
suricata-4.1.3
suricata-4.0.7
suricata-4.1.2
suricata-4.1.1
suricata-4.1.0
suricata-4.0.6
suricata-4.1.0-rc2
suricata-4.1.0-rc1
suricata-4.0.5
suricata-4.1.0-beta1
suricata-4.0.4
suricata-4.0.3
suricata-4.0.2
suricata-3.2.5
suricata-4.0.1
suricata-3.2.4
suricata-4.0.0
suricata-4.0.0-rc2
suricata-3.2.3
suricata-4.0.0-rc1
suricata-4.0.0-beta1
suricata-3.2.2
suricata-3.1.4
suricata-3.2.1
suricata-3.2
suricata-3.2RC1
suricata-3.1.3
suricata-3.2beta1
suricata-3.1.2
suricata-3.1.1
suricata-3.1
suricata-3.0.2
suricata-3.1RC1
suricata-3.0.1
suricata-3.0.1RC1
suricata-3.0
suricata-2.0.11
suricata-3.0RC3
suricata-3.0RC2
suricata-3.0RC1
suricata-2.0.10
suricata-2.0.9
suricata-2.1beta4
suricata-2.0.8
suricata-2.0.7
suricata-2.1beta3
suricata-2.0.6
suricata-2.0.5
suricata-2.1beta2
suricata-2.0.4
suricata-2.1beta1
suricata-2.0.3
suricata-2.0.2
suricata-2.0.1
suricata-2.0.1rc1
suricata-2.0
suricata-2.0rc3
suricata-2.0rc2
suricata-2.0rc1
suricata-2.0beta2
suricata-1.4.7
suricata-1.4.6
suricata-1.4.5
suricata-2.0beta1
suricata-1.4.4
suricata-1.4.3
suricata-1.4.2
suricata-1.4.1
suricata-1.3.6
suricata-1.4
suricata-1.3.5
suricata-1.4rc1
suricata-1.3.4
suricata-1.4beta3
suricata-1.3.3
suricata-1.4beta2
suricata-1.3.2
suricata-1.4beta1
suricata-1.3.1
suricata-1.3
suricata-1.3rc1
suricata-1.3beta2
suricata-1.3beta1
suricata-1.2.1
suricata-1.2
suricata-1.2rc1
suricata-1.2beta1
suricata-1.1.1
suricata-0.8.2
suricata-1.0.0
suricata-1.0.1
suricata-1.0.2
suricata-1.0.3
suricata-1.0.4
suricata-1.0.5
suricata-1.1
suricata-1.1beta1
suricata-1.1beta2
suricata-1.1beta3
suricata-1.1rc1
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '4a728464e6'
${ noResults }
Commit Graph

112 Commits (4a728464e6eb9e273bb02e3df0c28929b28db71d)

Author SHA1 Message Date
Philippe Antoine 89dbce1b46 detect: convert tx_progress to uint8_t 3 weeks ago
Philippe Antoine a9e1dff4a6 conf: introduce SCConfGetNonNull 
Ticket: 8651

Behaves like SCConfGet but returns 0 on null value
 1 month ago
Jason Ish 546209ff12 bindgen: fix include ordering 
At some point, bindgen include ordering changed such that
AppLayerGetFileState was being bindgen'd as opaque, as the definition of
StreamBufferingConfig was not available when bindgen hit
AppLayerGetFileState, and bindgen processes in order.

Move the util includes before the app-layer includes to fix the ordering
problem, but still keep util includes grouped.

The sys diff is large as many things have been re-ordered.
 1 month ago
Giuseppe Longo 13df0f7a06 llmnr: implement parser 
This adds a parser for LLMNR protocol over both UDP and TCP.

The parser reuses the existing DNS functions since LLMNR shares
the same wire format as DNS, but implements its own protocol-specific
validation:

- LLMNR-specific flag checks (C, TC, T bits)
- Opcode validation (only standard query opcode 0 is valid)
- An Event is set if Z-flag is set, since it's must be zero per RFC4795

LLMNR transactions inherit DNS behavior where each packet creates a new state
with one transaction.

Ticket #8366
 1 month ago
Jason Ish 9f40968bba rust/ffi: bindgen thread storage 
Ticket: #8445
 1 month ago
Juliana Fajardini 372cb8c692 rust/sys: update bindgen SIGMATCH_ constants 
Part of
Ticket #8551
 1 month ago
Jason Ish c689af0bbb rust/ffi: bindgen thread lifecycle callbacks 
Ticket: #8605
 2 months ago
Philippe Antoine 4c42998feb detect/engine: helper to know if a transform happens in-place 2 months ago
Jason Ish d4dc8be3b2 rust: bindgen flow lifecycle callbacks 
Ticket: #8446
 2 months ago
Philippe Antoine 3d56472d16 detect: bindgen more functions 
To prepare to move dcerpc.stub_data keyword to full rust
 3 months ago
Philippe Antoine a36af353bc rust: bindgen SCFlowGetAppProtocol 3 months ago
Philippe Antoine 8f824458c2 detect: helper for buffer register requires progress 
Ticket: 8395

For protocols where tx are complete at start, that is
the `tx_get_progress` function returns 1 inconditionnally,
we can use the progress 1, not losing time on detection in ips
mode, and getting ready for firewall mode

For the other protocols (where a tx needs both a request and response
for instance), keep progress 0 as was the case before
 3 months ago
Philippe Antoine d14af54b3b detect/transforms: constify some callbacks arguments 
Ticket: 8298
 3 months ago
Philippe Antoine 4f4912c042 rust: bindgen SIGMATCH_ constants 3 months ago
Jason Ish f6b11ac855 output-eve: finish exposing to bindgen 
As all out output-eve.h is now exposed, merge output-eve.h and
output-eve-bindgen.h back into one file, output-eve.h.
 5 months ago
Jason Ish f79158ae55 rust/sys: generate jsonbuilder bindings in sys 
Bindgen the Rust bindings to the C JsonBuilder API along with the rest
of the Rust bindings to C. Breaking it out was probably the wrong
idea.

This should make it easier, and more correct to bindgen C functions
that use SCJsonBuilder types.
 5 months ago
Jason Ish 2d0bf9a2ed output-eve: bindgen SCEveFileType callback types 5 months ago
Jason Ish e9611a4d7c output-eve: bindgen SCRegisterEveFileType to Rust 
Used by Rust output plugins.
 5 months ago
Jason Ish 1b182025bc output-eve: expose SCEveFileType to Rust with bindgen 
There is an unfortunate side-affect that one has to read
output-eve-bindgen.h for the documentation on this type, however, I
think we can resolve that in time.
 5 months ago
Philippe Antoine df495d7e22 rust: bindgen SCDetectGetLastSMFromLists 
to use it from rust keywords
 5 months ago
Victor Julien a2e9ac21f8 flow: turn flags field into uint64_t 
Entire space is used.
 5 months ago
Jason Ish c7f806a728 rust/sys: allow unknown lints 
allow(unpredictable_function_pointer_comparisons) is needed on newer
versions of Rust, but is unknown to our MSRV, so for now, allow unknown
lints.
 5 months ago
Philippe Antoine 364d2c077d rust: bindgen SCAppLayerRegisterParser 
Ticket: 7662
 5 months ago
Philippe Antoine 8857b78f6a rust: move AppLayerTxData definition to C 
and bindgen it to rust

Will make easier the bindgen of RustParser structure which uses
a callback which uses AppLayerTxData

Move also the free function to C SCAppLayerTxDataCleanup
As suricata-sys crate defines AppLayerTxData for rust,
It must itself implement the Drop trait, and thus,
We need to define a feature surest
 5 months ago
Philippe Antoine 8eaced3c1e rust: move AppLayerResult definition to C 
and bindgen it to rust

Will make easier the bindgen of RustParser structure which uses
a callback which uses AppLayerResult

Keep From<> impl in sys crate that defines it
 5 months ago
Philippe Antoine 06f78b2a22 rust: move StreamSlice definition to C 
and bindgen it to rust

Will make easier the bindgen of RustParser structure which uses
a callback which uses StreamSlice
 5 months ago
Philippe Antoine 41f543ca35 rust: move AppLayerGetTxIterTuple definition to C 
and bindgen it to rust

Will make easier the bindgen of RustParser structure which uses
a callback which uses AppLayerGetTxIterTuple
 5 months ago
Philippe Antoine 64d29fcd1c rust: move AppLayerStateData definition to C 
and bindgen it to rust, and use default trait instead of new

Will make easier the bindgen of RustParser structure which uses
a callback which uses AppLayerStateData
 5 months ago
Philippe Antoine 76efb8af4d rust: move AppLayerGetFileState definition to C 
and bindgen it to rust.

Will make easier the bindgen of RustParser structure which uses
a callback which uses AppLayerGetFileState
 5 months ago
Philippe Antoine fc23e54c6d rust: bindgen with derive eq 
As will be needed such as AppLayerTxData
 5 months ago
Philippe Antoine 7dbe033ae0 app-layer: function to register ci pattern + probe 
Ticket: 6591
 5 months ago
Philippe Antoine 2cf9a327d5 detect/ssh: move ssh.hassh to rust 
Introduces helper SCDetectRegisterBufferLowerMd5Callbacks
 5 months ago
Philippe Antoine 83360cfce0 detect/ssh: move ssh.hassh string to rust 
bindgen needed SCSigMatchSilentErrorEnabled on the way
 5 months ago
Philippe Antoine ea8ac2a02a detect/ssh: move ssh.software to rust 
Adds helper function SCDetectHelperBufferProgressMpmRegister on the way
 6 months ago
Philippe Antoine c0d6747e82 app-layer: GetTxIteratorFn uses a AppLayerGetTxIterState 
Even if every current rust parser uses the u64 variant of the C union
 6 months ago
Philippe Antoine 4b541b39f2 rust: move AppLayerEventType definition to C 
and bindgen it to rust.

Will make easier the bindgen of RustParser structure which uses
a callback which uses AppLayerEventType
 6 months ago
Lukas Sismis 3e4fdb2118 misc: time unit parsing function 6 months ago
Jason Ish d89b35db56 conf: add SCConfNodeChildValueIsFalse to check for false value 
New function to check is a value is actually set to a false value.
 7 months ago
Jeff Lucovsky 9c81f817e8 rust: bindgen update 
Issue: 7389

Update bindgen with `make update-bindgen`
 7 months ago
Philippe Antoine b4d8aea0ae rust: bindgen SCAppLayerRegisterProtocolDetection 
Ticket: 7662

Changing the struct passed to it to have the minimal number
of useful fields.
 7 months ago
Philippe Antoine 1329786f84 detect: new command line option : list-rule-protos 
To list the protocols we can use a in a rule header

Ticket: 635
 7 months ago
Philippe Antoine 15b1bf4865 rust: bindgen SCHTPFileCloseHandleRange 
Ticket: 7762
 8 months ago
Philippe Antoine cddbd0b906 rust: bindgen more file functions 
Ticket: 7762
 8 months ago
Philippe Antoine 327b8b04a9 rust: bindgen with default derive 
Ticket: 7762
 8 months ago
Philippe Antoine cba13ed9b1 rust: bindgen functions needed for datasets 
Ticket: 7762
 8 months ago
Philippe Antoine 12892ba010 rust: bindgen functions neede for features 
Ticket: 7762
 8 months ago
Li Heng c141c55bc6 snmp: can be set to detection-only 
Realloc alp_ctx.ctxs when a dynamic alproto is registered and
g_alproto_max increases. So dynamic alproto can be treated as
real/normal ones. And app-layer switch can be set to any value
of no/deteciton-only/yes.

Ticket: 8000
 8 months ago
Philippe Antoine 439f96dea7 rust: bindgen frames functions 
Ticket: 7667
 8 months ago
Philippe Antoine 92c7be1cb6 rust: bindgen SCSRepCatGetByShortname 
Ticket: 7667
 8 months ago
Philippe Antoine 7447651fa0 output/jsonbuilder: helper function SCJbSetPrintAsciiString 
To replace C PrintStringsToBuffer and avoid a stack alloc
+ copy

Ticket: 8004
 8 months ago