suricata

Commit Graph

Author	SHA1	Message	Date
Victor Julien	25112ee7e3	rust/smb: fix and optimize record search Get rid of struct with just a slice reference as well.	6 years ago
Pierre Chifflier	9e7f261a88	rust: fix cargo tests	6 years ago
Pierre Chifflier	f22695130b	rust: nom4 requires to add complete!() when using many! combinators	6 years ago
Pierre Chifflier	8c0cde36c6	rust: fix warnings for unused variables (add _)	6 years ago
Pierre Chifflier	13b7399790	rust: upgrade all parsers to nom4	6 years ago
Pierre Chifflier	2f08b3eabd	rust/nom4: error_code is superseded by error_position	6 years ago
Pierre Chifflier	d3011e3ee8	rust: update dependencies for nom4 transition	6 years ago
Jason Ish	93c956ebdf	issue 2795: python 3 fix in Rust C header gen The C header generation script was failing with a unicode error in Python 3 on FreeBSD. Fix the reading of files to properly handle unicode in all Python 3 environments. Redmine issue: https://redmine.openinfosecfoundation.org/issues/2794	6 years ago
Victor Julien	8b570c0293	smb: improve request/response mapping Only use ssn_id and msg_id for mapping a response to a request. By not using the tree_id it can always be included in the tx.hdr which means it can be logged properly in case of IOCTL and DCERPC.	6 years ago
Pierre Chifflier	3eade88bd8	Krb5: make TCP probing function less strict, messages can be fragmented	6 years ago
Jason Ish	b7083bc3a8	rust/dns/v2 - log rrtype in response Redmine issue: https://redmine.openinfosecfoundation.org/issues/2723	6 years ago
Jason Ish	b7a58680db	dns/rust - if let Some over options instead of loop. Except in one case where the loop makes more sense for easy break out. Also remove one line of non-conforming debug logging.	6 years ago
Jason Ish	4163d5c360	rust/dns/lua - fix call convention to match C. Also, when requesting the query, if the request doesn't exist, return the query from the response. This makes it behave more like C implementation. Redmine issue: https://redmine.openinfosecfoundation.org/issues/2730	6 years ago
Jason Ish	87250da0fc	rust/dns: add v1 dns logging Redmine issue: https://redmine.openinfosecfoundation.org/issues/2704	6 years ago
Victor Julien	0e40231189	app-layer: improve transaction cleanup handling The app layers with a custom iterator would skip a tx if during the ..Cleanup() pass a transaction was removed. Address this by storing the current index instead of the next index. Also pass in the next "min_tx_id" to be incremented from the last TX. Update loops to do this increment. Also make sure that the min_id is properly updated if the last TX is removed when out of order. Finally add a SMB unittest to test this. Reported by: Ilya Bakhtin	6 years ago
Victor Julien	eedf08be29	rust/filetracker: remove reachable panic Remove reachable panic condition when an existing file chunk is not completed. Instead trunc the file and reset. Related to bug #2717	6 years ago
Victor Julien	1b1e136c4f	nfs: improve file tracking under packet loss In case of packet loss during an in-progress chunk the file tracker could loose track of a file because it couldn't map the XID to a file handle. The file tracker would then panic if a new file was opened, as it noticed the last chunk wasn't yet complete. This patch tracks the file handle for a in-progress chunk in the state, just like the tracking of the size that is left. Bug #2717	6 years ago
Victor Julien	27f87567ca	rust/nfs: improve debug output	6 years ago
Victor Julien	c62273f4fd	rust/smb: silence noisy debug messages	6 years ago
Victor Julien	083908f3be	rust/ike2: free destate on tx free Bug #2604	6 years ago
Jason Ish	6f00ba0659	rust: fix (again) out of tree builds As the generated Cargo.toml is shipped as part of a release tarball, build from the source directory but set the cargo CARGO_TARGET_DIR to the build directory.	6 years ago
Victor Julien	4d5024255f	smb/dcerpc: remove now unused ssn2maxsize_map	6 years ago
Victor Julien	4d044483cf	smb/dcerpc: clean up and unify DCERPC probe logic	6 years ago
Victor Julien	ac4e888597	smb2/dcerpc: probe if response data is dcerpc If we missed the tree connect we can't know for sure if we're reading from a (DCERPC) PIPE or not. In this case probe the data to see if it looks like DCERPC. If the detection succeeds, use a special 'suricata::dcerpc' service in the TX. Simplify handling of DCERPC records that cross records Update logging for the response only TXs.	6 years ago
Victor Julien	9dd7c38113	smb2: skip rest of READ response if status is not success	6 years ago
Victor Julien	ae10a92bc6	rust/applayer: use correct return type for Parser The mismatch between the types would randomly lead to the return code of the Rust parser to be not correctly handled over the C/Rust boundary. This would lead to the API considering a parser to be in error state when it was not.	7 years ago
Jason Ish	58933bafc1	rust app layer template: functions to get buffers Example functions for getting the request and response buffers. Useful for running detection on the decoded buffers.	7 years ago
Jason Ish	01f7dcf5fd	rust template parser: sample pcap	7 years ago
Jason Ish	c3f1a35e28	rust: app-layer template parser and logger The protocol is a simple request/reply based protocol that can be hand driven with netcat. Request -> 12:Hello World! Response -> 3:Byte Its of the format <length>:<message> where length is the length of the message, not including the length or the delimiter.	7 years ago
Jason Ish	7682b1ba74	rustfmt.toml: set to 80 char line width The rustfmt default is 100, set to 80 to be more inline with the Suricata C code.	7 years ago
Jason Ish	9636b9de32	rust: expose AppLayerParserStateIssetFlag to Rust.	7 years ago
Jason Ish	90dfcf4907	rust/gen-c-headers: don't attempt to split empty lines	7 years ago
Jason Ish	1c6bc5754c	dhcp: check length of option before accessing Prevent Rust index out of bounds panic. Redmine issue: https://redmine.openinfosecfoundation.org/issues/2571	7 years ago
Jason Ish	7bc2469eb1	dhcp: remove println!() that got committed	7 years ago
Victor Julien	a337908c78	rust/dhcp: free events and destate at tx end	7 years ago
Victor Julien	edd0c2246c	smb1: add SMB1_COMMAND_QUERY_INFO_DISK command mapping	7 years ago
Maurizio Abba	bf4398b15d	output-json: ensure string is json-encodable Substitute json_string with SCJsonString custom function. SCJsonString will ensure string passed is json-encodable (utf-8). If it's not, the string will be converted in such a way that any non-printable character will be encoded in its hex form. The resulting json object will be returned. rust modification will encode any non-printable character during its conversion in to_cstring.	7 years ago
Victor Julien	177966970a	smb: probing parser improvement	7 years ago
Victor Julien	fd38989113	proto/detect: remove probing parser offset argument Remove offset argument as it was unused.	7 years ago
Victor Julien	c6e79f4410	nfs4: create tx for CREATE procedure	7 years ago
Victor Julien	90e0e3da27	nfs: fix applying nfs3 logging logic to nfs4	7 years ago
Victor Julien	cb3abba1e0	nfs4: log remove procedure + add multi-proc support Add TX creation for NFS4 transactions. Start with the 'REMOVE' procedure. Start on logging all procs. In NFS4 COMPOUND records there are multiple procedures. One of them can be considered the 'main' procedure, with others as supporting utility. This patch adds the first step in supporting to track those in the TX for logging and inspection.	7 years ago
Victor Julien	ff518e5c64	nfs4: for putrootfh set 'mount root' as name	7 years ago
Victor Julien	22e0fc97f8	nfs: rename generic functions from nfs3 to nfs	7 years ago
Victor Julien	d22c170c38	nfs: move v2 parsing into own file	7 years ago
Victor Julien	9b42073e54	nfs3: move nfs3 specific handling into own file	7 years ago
Victor Julien	4c09766b33	nfs: request parser cleanup	7 years ago
Victor Julien	f570905f8c	nfs: get rid of reachable panic statements	7 years ago
Victor Julien	8a1af5c367	nfs4: remove panic calls, set events instead	7 years ago
Victor Julien	f2382356b1	nfs4: support 4.1 SEQUENCE procedure	7 years ago

1 2 3 4 5 ...

270 Commits (57285b54d5cf611cee78cef6f428320555cbe90d)