Commit Graph

9515 Commits (57285b54d5cf611cee78cef6f428320555cbe90d)
 

Author SHA1 Message Date
Victor Julien 2010610c91 host/os/info: fix lookup memleak 6 years ago
Victor Julien 1bf658f9ee debug/log: suppress coverity checked_return warning 6 years ago
Victor Julien ec94d7b33d bpf: suppress coverity toctou warning 6 years ago
Victor Julien 22c7be26c4 pcap: fix buffer size validation logic 6 years ago
Victor Julien 9c2c258f2b uricontent: move debug func into unittests
Cleanup header, which lead to the app-layer-htp.h header needing to
be added in a few other places.
6 years ago
Victor Julien 4ae85f16c5 detect/replace: fix mem leak in error path 6 years ago
Victor Julien 0d0da7880e isdataat: fix mem leak in error path 6 years ago
Victor Julien 2ef2febc7c bits: avoid memory leak in case of adding types 6 years ago
Victor Julien 5c69bbb236 ipproto: fix memleak in error case 6 years ago
Victor Julien 5283796018 bytetest: don't leak memory in error condition 6 years ago
Victor Julien 9d54a8361d yaml: fix potential memleak and suppress coverity issue 6 years ago
Victor Julien 15e0f7f5bb outputs: fix memleaks in the error paths reported by coverity 6 years ago
Victor Julien 575fb69a06 coverity: suppress warning for intentional code 6 years ago
Victor Julien 335df629a2 rust/dns: don't compile unused C code if Rust is enabled 6 years ago
Victor Julien f97bf298b2 coverity: fix filestore v2 memleak 6 years ago
Victor Julien 00111499b0 log-pcap: fix coverity memleak warning 6 years ago
Victor Julien a683279137 coverity: don't warn on fall back random 6 years ago
Mats Klepsland a8347e1bc2 app-layer-ssl: fix flow and inspection bypass for TLSv1.3 6 years ago
Mats Klepsland 3b73b7d542 app-layer-ssl: add 0-RTT support for TLSv1.3 6 years ago
Mats Klepsland 23993c18cd app-layer-ssl: decode early data extension in ClientHello record
Decode early data extension used by 0-RTT that is used to indicate that
application data will be sent right after the ClientHello record.
6 years ago
Mats Klepsland 7556004a51 app-layer-ssl: use extension length when decoding extensions
Pass extension length to functions decoding extensions, instead of
passing the length left in the record. This enables us to also
decode empty extensions.
6 years ago
Mats Klepsland ee1de4c812 app-layer-ssl: handle all versions above TLSv1.2 as TLSv1.3
This makes it more likely to log custom versions of TLSv1.3 that
doesn't comply with the draft version numbering.
6 years ago
Victor Julien 31b87d5f8f tls: remove debug printfs 6 years ago
Mats Klepsland 16643befe7 detect-tls-ja3-hash: add another unit test
Add unit test that covers the JA3 bug in TLS extensions decoding.
6 years ago
Mats Klepsland fc53b2ecd5 app-layer-ssl: fix JA3 bug in TLS extension decoding 6 years ago
Mats Klepsland 89bd274f44 app-layer-ssl: fix JA3 bug in TLS version decoding 6 years ago
Victor Julien 215e37a9c0 capture: multidev is not experimental 6 years ago
Victor Julien 631ee383bb flow/stream: 'wrong thread' as stream event & counter
Set event at most once per flow, for the first 'wrong' packet.

Add 'tcp.pkt_on_wrong_thread' counter. This is incremented for each
'wrong' packet. Note that the first packet for a flow determines
what thread is 'correct'.
6 years ago
Victor Julien 588a56c8ba smtp: fix clang -Wunreachable-code warning
app-layer-smtp.c:756:12: error: will never be executed [-Werror,-Wunreachable-code]
    return 0;
           ^
1 error generated.
6 years ago
Victor Julien 17e7d179d0 profiling/csv: update output format
Update output to be:

pcap_cnt,total,receive,decode,flowworker,threading,proto detect,flow,
stream,app-layer,detect,tcp-prune,loggers,<detect stages>,<loggers>

For TCP, the app-layer cost is not part of stream anymore.
6 years ago
Victor Julien 85f2486e0b multi-tenant: document per tenant settings 6 years ago
Victor Julien 6781146556 test mode: parse interface list in test mode 6 years ago
Victor Julien 77c7cf0211 windivert: fix whitespace issue 6 years ago
Victor Julien b86e176262 af-packet: suppress noisy info message 6 years ago
Victor Julien d6460392c5 detect/transforms: fix doc urls 6 years ago
Victor Julien 3ba2c9fba7 pfring: multiple receive threads is not experimental 6 years ago
Victor Julien 57921d95d6 eve: improve error handling for Rust loggers
Give useful warning message if Rust is not compiled in.
6 years ago
Victor Julien 24b18e47bd pfring: minor cleanups 6 years ago
Victor Julien 4f84672d7c stats: decoder/stream events as stats 6 years ago
Victor Julien 014056f686 detect/analyzer: add detection for sigs that could use http keywords 6 years ago
Victor Julien 127937b2dd detect/analyzer: add debug statements 6 years ago
Victor Julien c05459ce89 detect/analyzer: fix json analyzer being called on incomplete rules 6 years ago
Victor Julien c62273f4fd rust/smb: silence noisy debug messages 6 years ago
Victor Julien 6c97909a92 stream/events: log as stats 6 years ago
Victor Julien fa06879563 detect/events: cleanup keyword 6 years ago
Victor Julien 5afeebf884 doc/flow: updates and cleanups to flow section 6 years ago
Victor Julien 2ae8d1a208 cocci/detect: add flags check to SigTableElmt 6 years ago
Victor Julien ecb5d6419b rules/transform: add to list-keywords 6 years ago
Victor Julien 72dd4a5f92 doc/rules: initial transforms documentation 6 years ago
Victor Julien 226fe5cab3 doc/performance: redo runmodes explanation 6 years ago