Commit Graph

3637 Commits (5a6c8c0f011be83c2b4821478f30120cf954f970)
 

Author SHA1 Message Date
Victor Julien a5587fec2e flow: remove unused prune-flows option 13 years ago
Anoop Saldanha bf6cd48259 if a sig's set as stream sig only, don't updated it as both stream and pkt sig if offset/depth's present
bug #495 - update rule analyzer to not warn on offset_depth-tcp_pkt update if sig is stream only

bug #497 - rule_warnings fixed
13 years ago
Anoop Saldanha b2f589527a Set thread name Suricata-Main for main thread and LiveRuleSwap for live swap thread 13 years ago
Anoop Saldanha a0bce6362e bug 499 - update host os info enum map to use - instead of _ + add new unittests 13 years ago
Anoop Saldanha 7833883a8f bug #496 - don't warn about offset/depth for packet sigs 13 years ago
Victor Julien d8356c5ebd Windows build and other misc fixes. 13 years ago
Victor Julien 2295777691 Update changelog for 1.3 release. 13 years ago
Eric Leblond a3465fb971 Rename 'worker' running mode to 'workers'
This patch renamed the 'worker' running mode into 'workers'. Thus,
there is only one name in Suricata for the same thing. Backward
compatibility is ensured by replacing "worker" by "workers" when
the old name is used. A warning is printed in the log when the old
name is used.
13 years ago
Anoop Saldanha 34f0897163 check if all packets are processed before disabling detect threads + kill all threads <= detect after FFR + other minor fixes 13 years ago
Victor Julien be5fed869d conf api: remove dead code 13 years ago
Victor Julien c2e484ae88 rule analyzer: fix detecting stream match 13 years ago
Anoop Saldanha 946a9ece32 rule analyzer updated for sigs with offset/depth set + alproto set 13 years ago
Anoop Saldanha 960d421f9d Update SigValidate() to allow http keywords to be specified in the right flow direction 13 years ago
Eric Leblond ac092197b4 autotools: pthread deps is needed on ubuntu.
It is weird but adding pthread in needed on ubuntu 1204.
13 years ago
Victor Julien 9f3e079bcf Make live reloads optional and disabled by default. 13 years ago
Victor Julien 9d2e17fa98 stream: don't NULL dereference p->flow->protoctx in StreamTcpReassembleDepthReached 13 years ago
Victor Julien 43c7fd7585 file inspection: improve logging when stream.depth limit is reached. #493. 13 years ago
Victor Julien 79d5ef3707 Improve warning if prelude output is selected but support not compiled in. #320. 13 years ago
Victor Julien e7b36051de Improve pktvar keyword parsing and error handling. 13 years ago
Victor Julien 2179ac2595 Minor fixes for coverity issues. 13 years ago
Victor Julien c4e5e1482e Fix detect tag error handling. 13 years ago
Victor Julien d840308ae2 file detect: improve cleanup 13 years ago
Victor Julien 4a9fa35cf2 filemd5: free hash during cleanup 13 years ago
Anoop Saldanha b0b29fb85a ac-bs and ac-gfbs mem cleanup 13 years ago
Anoop Saldanha c1cc9188fd more mpm engine mem cleanup 13 years ago
Anoop Saldanha 0eaf0b0129 mpm engine and ac mem free fixes 13 years ago
Nikolay Denev 50aba06530 Fix SCSetThreadName() macros in threads.h Add FreeBSD thread naming implementation. 13 years ago
Anoop Saldanha cde31abe96 bug #455 - Warn users on signature event vars having precedence over threshold.conf ones 13 years ago
Victor Julien ab421978f0 Free all sig match structs when freeing a signature. 13 years ago
Victor Julien f4c7bd4e5b Fix memleak in tag parsing. 13 years ago
Victor Julien af97c36c08 Properly clean signature's ip only data. 13 years ago
Victor Julien c7af0589bc Fix a reload memleak in thread local detection engine ctx. 13 years ago
Victor Julien 19e3348cae Fix a reload memleak in the duplicate sig detection hash. 13 years ago
Victor Julien 728c4f9ea0 Clean up packet pool at shut down. 13 years ago
Victor Julien 583ba460c4 Update Changelog for 1.3rc1 release 13 years ago
Anoop Saldanha ba5f757c47 sc_atomic_cas replaced with sc_atomic_set 13 years ago
Victor Julien 0c98980e21 http: add unittest to test \r in header line. 13 years ago
Victor Julien d236e68b62 htp: keep track of header line terminators so http_raw_header can reconstruct exact headers. 13 years ago
Victor Julien 3d12b74012 http_raw_header: add some debug code. 13 years ago
Victor Julien a6471cdb9c icmpv6: for ICMPv6 info messages set payload ptr and length to right after 4 byte hdr. 13 years ago
Victor Julien 4cf6bb3f4c afpacket: fix compilation in debug mode. 13 years ago
Eric Leblond c36aa041f3 Update coccinelle script to match syntax evolution. 13 years ago
Eric Leblond 0227a87fcb cleaning: fix warning when building with clang.
clang was issuing some warnings related to unused return in function.
This patch adds some needed error treatment and ignore the rest of the
warnings by adding a cast to void.
13 years ago
Eric Leblond 6efd37a388 af-packet: use counter for drop and accept
This patch adds counters for kernel drops and accepts to af-packet
capture module. This information are periodically displayed in
stats.log:
capture.kernel_packets    | RxAFP1                    | 1792
capture.kernel_drops      | RxAFP1                    | 0
The statistic is fetch via a setsockopt call every 255 packets.
13 years ago
Eric Leblond f2a6fb8a5a af-packet: add support for BPF filter.
This patch adds support for BPF in AF_PACKET running
mode. The command line syntax is the same as the one
used of PF_RING.
The method is the same too: The pcap_compile__nopcap()
function is used to build the BPF filter. It is then
injected into the kernel with a setsockopt() call. If
the adding of the BPF fail, suricata exit.
13 years ago
Eric Leblond c85ee1e3f6 af-packet: get datalink for each socket creation.
This patch will allow us to use the datalink when computing the filter.
It also fixes a potential issue where an interface data type change
after the interface if going down/up.
13 years ago
Victor Julien 59ec493f7c http body inspection: force body inspection on stream eof. 13 years ago
Victor Julien 4d4671c470 default config: add engine-analysis.rules directive. 13 years ago
Victor Julien 2a4992e7a0 inline: fix unified2 alert direction selection 13 years ago
Victor Julien 87ec969b3d filemd5: fix compilation if libnss isn't available 13 years ago