3252 Commits (593b0cb150d76c71451fee17bd076b55d178cbf8)

 

All Branches   

Search

Author	SHA1	Message	Date
Anoop Saldanha	593b0cb150	unittests that fail, displaying the issue that we don't inspect set-cookie headers against cookie keywords ... The next patch in the series will fix the issue and let the unittests pass as well.	13 years ago
Victor Julien	c0ac64e58c	pcap: make sure thread count is 1 if config is missing for a device.	13 years ago
Anoop Saldanha	bc6cf43840	#482 - use decode_flag for all decode TMs. Use the flag as a way to retrieve decode TMs from ThreadVars	13 years ago
Anoop Saldanha	0d602d9cde	we now support offset, depth inspection against all packet payloads and stream messages	13 years ago
Anoop Saldanha	a34f91358d	tests to highlight that ... - suricata treates sigs with offset/depth without any packet keywords as stream sigs - as a consequence suricata will FN on such sigs The tests introduced here will fail, displaying the issues. The next patch in the series would fix the said issues.	13 years ago
Anoop Saldanha	c5cc9d454d	stream raw reassembly fix	13 years ago
Anoop Saldanha	db8500bb26	fast pattern cleanup - Remove FastPatternSupportEnabledForSigMatchList() and all it's associated structures	13 years ago
Anoop Saldanha	988c92f71c	http user agent keyword + mpm + inspection + fast pattern support added	13 years ago
Victor Julien	bd3a655aeb	Add pcap workers mode. ... Some cards like Napatech or Myricom support libpcap wrappers that allow for multiple streams, queues, ringbuffers. The workers mode can be of use in those cases.	13 years ago
Anoop Saldanha	34fde4ed75	bug #471 - file_data fast pattern unittests added	13 years ago
Anoop Saldanha	90ccbfd80a	bug #471 - http server body fast pattern unittests added	13 years ago
Victor Julien	850379552a	rule analyzer: minor cleanups. Fix warning-only setting, allow true/yes/enabled for yaml option.	13 years ago
Victor Julien	b210bf1290	Fix commandline supplied yaml path being ignored.	13 years ago
Eileen Donlon	c81020e9a3	feature 349 rule analyzer v1	13 years ago
Eric Leblond	a5268088cd	OpenBSD: fix tar command.	13 years ago
Eric Leblond	2d22f667c2	config: use config file in sysconfdir by default.	13 years ago
marcos	8dfddd0a0f	Added -T switch to suricata output. ... Simply added the -T to be printed out when suricata is run without any arguments. The capability to test a configuration file has been in suricata for some time, just doesn't show up as an option right now.	13 years ago
Victor Julien	b744708f28	filemd5: implement negated matching.	13 years ago
Victor Julien	ed9b07ef1f	Update changelog to reflect 1.3beta2 changes.	13 years ago
Victor Julien	dbdab0cb1c	Disable dce unittests that tick off clamav. #458.	13 years ago
Anoop Saldanha	1f5469fa5a	bug #458 - unittest that uses clamav FPing payload disabled for now. Needs to be rewritten though with new payloads	13 years ago
Victor Julien	3df573219b	Fix compilation warning.	13 years ago
Victor Julien	e3764b90c3	tls: debug compilation fixes, new tls decoder rule for tls.error_message_encountered event.	13 years ago
Anoop Saldanha	f08fc8d7c5	ssl connection error message event added. Remove warning log for the same error alert	13 years ago
Anoop Saldanha	270ea253a2	ssl parser fix/updates	13 years ago
Anoop Saldanha	edb48c1557	We have a new probing parser to detect sslv2 records. todos to be covered later	13 years ago
Victor Julien	fa121a1dd4	filemd5: handle case where no md5 support is compiled it.	13 years ago
Victor Julien	9f7588a756	Add filemd5 keyword that loads a list of md5's to match a file's md5 against.	13 years ago
Victor Julien	8cfc23ee22	Add a new hash datatype to do speedy lookups of read only uniform data, like md5's.	13 years ago
Victor Julien	1bb0199dd7	pfring: protect pfring_set_bpf_filter with a lock as it's not thread safe.	13 years ago
Eric Leblond	d0e3df6057	Autotools: make 'install-full' now run 'install' too.	13 years ago
Victor Julien	1906d317ec	unified2: minor cleanups	13 years ago
Victor Julien	5e95524122	Improve error reporting in case of syntax errors in the address and port vars.	13 years ago
Victor Julien	5b457807e2	file: fix file length and md5 tracking when file storing is disabled	13 years ago
Victor Julien	086a934ca9	#449: fix md5 calculation in daemon mode.	13 years ago
Victor Julien	94c312512d	pfring: move missing timestamp handling code to PfringProcessPacket.	13 years ago
Chris Wakelin	a5f948f436	Fix missing timestamps in some flavours of PF_RING	13 years ago
Victor Julien	f2f8dfd8d6	http: add test to make sure a missing space between header name and value is not a problem (ref #474).	13 years ago
Victor Julien	66856831fa	unified2: big rewrite to clean up code that deals with tcp segment logging.	13 years ago
Eric Leblond	a0e57f58e5	OpenBSD: introduce SCLocalTime function. ... This function is a wrapper to localtime_r. It is needed to avoid a compilation warning on OpenBSD. I'm forced to type the function to a non pointer first parameter. If not we will have to use two differents functions in OpenBSD where tv->tv_sec is a long (different from time_t).	13 years ago
Victor Julien	00948c86d5	Add debug messages to HTTP error/warning handling.	13 years ago
Victor Julien	40cda7e149	Support FNAME and FCOMMENT extensions in gzip'd http content.	13 years ago
Victor Julien	ed3599b3d8	stream: improve error checking.	13 years ago
Victor Julien	5933cee2ff	replace: add missing malloc return value check.	13 years ago
Eric Leblond	dbf5d79e43	pfring: follow API change ... As pointed out in issue #459, pf_ring API has changed. Since 5.4.0 release pf_ring_open has one less argument.	13 years ago
Victor Julien	48da3bb48b	Make sure all fake packets have datalink type DLT_RAW. Make sure stream end packets set pkt size.	13 years ago
Eric Leblond	e2bf0fab35	OpenBSD: setup specific place for magic file. ... This patch fixes the path to the default magic file on OpenBSD.	13 years ago
Victor Julien	02e19502c7	unified2: minor cleanups.	13 years ago
Eric Leblond	70b795e20a	OpenBSD: don't close std* to avoid problem.	13 years ago
Victor Julien	3181b492f4	pcap: lock pcap_compile and pcap_setfilter calls as they are not thread safe. Fixes issues with bpf filters and multiple interfaces.	13 years ago