aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
7,025 Commits
8 Branches
163 Tags
184 MiB
main-7.0.x
main-8.0.x
main
master-6.0.x
master-5.0.x
master-4.1.x
master-4.0.x
master-3.2.x
suricata-8.0.1
suricata-7.0.12
suricata-8.0.0
suricata-7.0.11
suricata-8.0.0-rc1
suricata-8.0.0-beta1
suricata-7.0.10
suricata-7.0.9
suricata-7.0.8
suricata-7.0.7
suricata-7.0.6
suricata-6.0.20
suricata-7.0.5
suricata-6.0.19
suricata-6.0.18
suricata-7.0.4
suricata-6.0.17
suricata-7.0.3
suricata-6.0.16
suricata-7.0.2
suricata-6.0.15
suricata-7.0.1
suricata-6.0.14
suricata-7.0.0
suricata-7.0.0-rc2
suricata-6.0.13
suricata-6.0.12
suricata-6.0.11
suricata-7.0.0-rc1
suricata-6.0.10
suricata-6.0.9
suricata-7.0.0-beta1
suricata-6.0.8
suricata-6.0.7
suricata-6.0.6
suricata-5.0.10
suricata-6.0.5
suricata-5.0.9
suricata-6.0.4
suricata-5.0.8
suricata-6.0.3
suricata-5.0.7
suricata-6.0.2
suricata-5.0.6
suricata-6.0.1
suricata-5.0.5
suricata-4.1.10
suricata-4.1.9
suricata-5.0.4
suricata-6.0.0
suricata-6.0.0-rc1
suricata-6.0.0-beta1
suricata-5.0.3
suricata-4.1.8
suricata-4.1.7
suricata-5.0.2
suricata-4.1.6
suricata-5.0.1
suricata-5.0.0
suricata-5.0.0-rc1
suricata-4.1.5
suricata-5.0.0-beta1
suricata-4.1.4
suricata-4.1.3
suricata-4.0.7
suricata-4.1.2
suricata-4.1.1
suricata-4.1.0
suricata-4.0.6
suricata-4.1.0-rc2
suricata-4.1.0-rc1
suricata-4.0.5
suricata-4.1.0-beta1
suricata-4.0.4
suricata-4.0.3
suricata-4.0.2
suricata-3.2.5
suricata-4.0.1
suricata-3.2.4
suricata-4.0.0
suricata-4.0.0-rc2
suricata-3.2.3
suricata-4.0.0-rc1
suricata-4.0.0-beta1
suricata-3.2.2
suricata-3.1.4
suricata-3.2.1
suricata-3.2
suricata-3.2RC1
suricata-3.1.3
suricata-3.2beta1
suricata-3.1.2
suricata-3.1.1
suricata-3.1
suricata-3.0.2
suricata-3.1RC1
suricata-3.0.1
suricata-3.0.1RC1
suricata-3.0
suricata-2.0.11
suricata-3.0RC3
suricata-3.0RC2
suricata-3.0RC1
suricata-2.0.10
suricata-2.0.9
suricata-2.1beta4
suricata-2.0.8
suricata-2.0.7
suricata-2.1beta3
suricata-2.0.6
suricata-2.0.5
suricata-2.1beta2
suricata-2.0.4
suricata-2.1beta1
suricata-2.0.3
suricata-2.0.2
suricata-2.0.1
suricata-2.0.1rc1
suricata-2.0
suricata-2.0rc3
suricata-2.0rc2
suricata-2.0rc1
suricata-2.0beta2
suricata-1.4.7
suricata-1.4.6
suricata-1.4.5
suricata-2.0beta1
suricata-1.4.4
suricata-1.4.3
suricata-1.4.2
suricata-1.4.1
suricata-1.3.6
suricata-1.4
suricata-1.3.5
suricata-1.4rc1
suricata-1.3.4
suricata-1.4beta3
suricata-1.3.3
suricata-1.4beta2
suricata-1.3.2
suricata-1.4beta1
suricata-1.3.1
suricata-1.3
suricata-1.3rc1
suricata-1.3beta2
suricata-1.3beta1
suricata-1.2.1
suricata-1.2
suricata-1.2rc1
suricata-1.2beta1
suricata-1.1.1
suricata-0.8.2
suricata-1.0.0
suricata-1.0.1
suricata-1.0.2
suricata-1.0.3
suricata-1.0.4
suricata-1.0.5
suricata-1.1
suricata-1.1beta1
suricata-1.1beta2
suricata-1.1beta3
suricata-1.1rc1
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '53ebe4c538'
${ noResults }
Commit Graph

7025 Commits (53ebe4c5380781c740106e445e7782e3cbfee0a5)
 

Author SHA1 Message Date
Victor Julien 1c0f20f0e5 yaml: profiling 'json' depend on jansson availability 10 years ago
Victor Julien e11753e3f2 profiling: fix minor compiler warning 10 years ago
Victor Julien 4369161b92 netmap: get offloading settings and warn if needed 
Add FreeBSD lookup function and use the existing code on Linux.
 10 years ago
Victor Julien a8a918545b netmap: get correct RSS queues on Linux as well 10 years ago
Victor Julien d861bf100b netmap: reduce verbosity at startup 10 years ago
Victor Julien d58d02fed5 netmap: handle missing config with better defaults 
Default to 'threads: auto' which uses RSS RX count when no config
has been created for a interface.
 10 years ago
Victor Julien f446577412 netmap: implement 'threads: auto' 
Add until function for retrieving RSS RX count from netmap. Use the
RSS count to create the threads.
 10 years ago
Victor Julien d39e5754e6 instance: use enum for runmode 10 years ago
Victor Julien 2412681eff instance: memset to 0 before use 10 years ago
Eric Leblond 4defc5acc2 util-ioctcl: increase header size 
Headers can contain VLAN or Qing so we need to increase the value
returned by GetIfaceMaxHWHeaderLength.
 10 years ago
Andreas Herz ed561c73a5 suricata: fix double packet processing threads 
With the additional ParseInterfacesList the packet processing threads
were doubled since the Interface was included twice unless the device
was passed via the commandline with af-packet=IF.
The additonal ParseInterfacesList isn't necessary so remove it again
 10 years ago
Victor Julien 371113e21e ac-ks: don't allow use on big-endian 10 years ago
Victor Julien 181f67ff97 flow-worker: small cleanups 10 years ago
Victor Julien 72d3ea6552 detect: make pattern matcher messages less verbose 10 years ago
Victor Julien be9cd0fd84 yaml: replace ac-tile by ac-ks 10 years ago
Victor Julien 36535cbc61 yaml: remove conf_filename global 
conf_filename was a global pointer to the filename of the yaml.

Move into SCInstance. This reduces it's scope and cleans up the code.
 10 years ago
Victor Julien 4b9a62d1fe profiling: fix compilation if libjansson is missing 10 years ago
Victor Julien 661d7c1d09 pfring: cleanup 10 years ago
Victor Julien 6f7740807d pfring: improve profiling 
Reset packet profiling after pfring_recv. The packet was taken from
the packet pool before this call. The packet will already have it's
start ticks initialized. To avoid including ticks while pfring_recv
waits for traffic, reset the ticks right after it.
 10 years ago
Victor Julien c9159892c7 profiling: allow packet profiling to be reset 10 years ago
Eric Leblond 291af719c6 coverity: fix CID 1362014 
Error handling was not correct regarding ring buffer memory
handling.
 10 years ago
Victor Julien 9f7ba07153 af-packet: use better defaults if config is missing 10 years ago
Victor Julien f55dbca57b yaml: make eve log in yaml depend on libjansson 10 years ago
Victor Julien df6f9269ec yaml: improve capture comments 10 years ago
Victor Julien 766bc95e3c yaml: move classification etc below the rules 10 years ago
Victor Julien 1b4e1ea389 yaml: new defaults for outputs 
Enable eve.flow, disable plain http.log.
 10 years ago
Victor Julien 4d056912d3 yaml: file logging at info level 10 years ago
Victor Julien cb47c2f682 yaml: improved defaults and misc cleanups 10 years ago
Victor Julien ea7923cc81 yaml: add performance tuning section 10 years ago
Victor Julien 6d7b4c81e3 yaml: more reshuffling 10 years ago
Victor Julien a6a69f0099 yaml: create advancted sections 
Sections for advancted detection settings and traffic tracking and
reconstruction.
 10 years ago
Victor Julien d79c95dded yaml: add hw accel section, move cuda there 10 years ago
Victor Julien 8fae138d3b yaml: add netfilter section 10 years ago
Victor Julien 056f88b458 yaml: move outputs to the logging step 10 years ago
Victor Julien 11e6809d55 yaml: introduce 'advanced settings' 10 years ago
Victor Julien c5ca642a28 yaml: move app layer up 10 years ago
Victor Julien c160f78758 yaml: move afpacket, pcap, pcap-file up 10 years ago
Victor Julien d48098f189 yaml: move logging up 10 years ago
Victor Julien c949668863 yaml: move rules up in the file 
Also disable decoder and stream events by default, as they are too noisy
in a untuned environment.
 10 years ago
Victor Julien a9cea53e62 yaml: move vars to the top 10 years ago
Victor Julien 093ecf4798 logging: clean up at shutdown 10 years ago
Victor Julien c1f679d3f3 flow worker: move UDP app-layer into main function 
This way it's more clean what happens and we can profile it.
 10 years ago
Victor Julien e09643c396 flow worker: profiling 
Previously the detect and stream code lived in their own thread
modules. This meant profiling showed their cost as part of the
thread module profiling logic. Now that only the flow worker is
a thread module this no longer works.

This patch introduces profiling for the 3 current flow worker
steps: flow, stream, detect.
 10 years ago
Victor Julien 48771c1acf debug: fix compiler warnings 10 years ago
Victor Julien 7dfdcdc770 thread modules: remove unused id's 10 years ago
Victor Julien a8f257e05f detect: no longer a thread module 
Like stream, detect is now invoked directly by the FlowWorker.
 10 years ago
Victor Julien 4a96820320 stream-tcp: more cleanups 10 years ago
Victor Julien 8b06badbcf stream-tcp: no longer register as a thread module 
Now that the FlowWorker handles the TCP Stream directly, having
the TCP engine as a thread module is no longer needed.

This patch removes the registration.
 10 years ago
Victor Julien 333f2cb310 drmemory: broader suppressions for hyperscan 10 years ago
Victor Julien eec66c7b4f smtp: improve thread data use 
The SMTP app layer used a thread local data structure for the mpm in
reply parsing, but it only used a pmq. The MpmThreadCtx was actually
global. Until now this wasn't really noticed because non of the mpm's
used the thread ctx.

Hyperscan does use it however.

This patch creates a new structure SMTPThreadCtx, which contains both
the pmq and the mpm thread ctx. It's passed directly to the reply
parsing function instead of storing a pointer to it in the SMTPState.

Additionally fix a small memory leak warning wrt the smtp global mpm
state.
 10 years ago