1598 Commits (5a7efe5f97b934ce807bf7ad910bcd5b725d890f)

 

All Branches   

Search

Author	SHA1	Message	Date
Pablo Rincon	693d4f54eb	Load signatures with incompatible fast_pattern option (due to design differences for optimization)	16 years ago
William Metcalf	50eb3cba6a	seems to be a race between FlowTestPrune and FLOW_DESTROY in FlowTest0* comment out the later for now	16 years ago
Victor Julien	b4db93fa94	Remove leftover printf.	16 years ago
Anoop Saldanha	673322f01f	unittests for dce_stub_data content based singature parsing + fixes	16 years ago
Anoop Saldanha	ce8d27425d	fix signature parsing to how snort does it for content based keywords along with dce_stub_data	16 years ago
Victor Julien	1fb11e939a	Improve configure messages. Make sure CUDA doesn't try to process packets that are too big.	16 years ago
Victor Julien	e14331cbb2	Fix PACKET_RECYCLE not cleaning all of the packet.	16 years ago
Victor Julien	8d737310aa	Use 'simple' queue for cuda too. Fix hanging in cuda mode.	16 years ago
Victor Julien	3c1ae607cf	Fix cuda compilation.	16 years ago
Anoop Saldanha	33f4beb0bc	batching of packets support for cuda b2g mpm. Supported for both 32 and 64 bit platforms	16 years ago
Victor Julien	b3c22cd512	Improve app layer proto check.	16 years ago
Victor Julien	39cb1bdbda	Fix app layer sigs being recognized as decoder event only or ip only.	16 years ago
Victor Julien	587a53b904	Disable per second counters as they are unreliable.	16 years ago
Pablo Rincon	8f9bcef0e2	This patch for app-layer-ssl fix the bug #198 (SSLParserTest01). It seems that with -O2 and -O3, the compiler doesn't handle the initialization correctly (weird..)	16 years ago
Pablo Rincon	7003dc5c0d	Fix valgrind ctx error on asn1 test 06	16 years ago
Victor Julien	d41b5645ef	Make sure decoder event rules are inspected even if the packet is invalid and has no addesses or proto. Update fast log and alert debug log to display the alerts. Fixes #179.	16 years ago
Victor Julien	92858a211d	Fix STREAM_EOF flag overwriting STREAM_START flag on short streams. This made us miss short HTTP sessions.	16 years ago
Victor Julien	634b328d38	In case of error in pcap file reading mode, we shut the engine down hard instead of gracefully.	16 years ago
Victor Julien	426a7de5f2	Fix compiler warning about incomplete prototype (2).	16 years ago
Victor Julien	18c923318a	Fix bug where valid FIN packets would be rejected.	16 years ago
Victor Julien	67429e523f	Fix compiler warning about incomplete prototype.	16 years ago
Anoop Saldanha	fa373516c5	fixes the offset case for content matches + a case not handled by the prevous fix for multiple relative content matches. fix for payload.c dcepayload.c and uri.c	16 years ago
Anoop Saldanha	92eb380594	multiple relative content matches changes for detect-engine-dcepayload.c and detect-engine-uri.c like how we did for detect-engine-payload.c	16 years ago
Anoop Saldanha	5fb6981e9e	content handling changes in detect-engine-payload.c for multiple relative matches	16 years ago
Anoop Saldanha	a059ff276e	byte test and byte jump update dce matching option	16 years ago
Victor Julien	05d382f533	Fix broken stream engine config initialization: due wrong casts settings could be overwritten in memory.	16 years ago
Victor Julien	ec277b292c	Fall back to the old mutex based queue's to see if that fixes an obscure lockup at higher optimization levels in gcc in file pcap mode.	16 years ago
Victor Julien	ecb5fd3298	Add missing util-validate.h	16 years ago
Pablo Rincon	b8b511a54e	Avoid mem allocations while searching on radix trees (temporal prefix)	16 years ago
Victor Julien	1d74797b17	Attempt to work around NULL packets we're seeing ending up in queues when the compiler has optimized our code.	16 years ago
Pablo Rincon	868d4614b9	Tag engine improvements. Output tags only on unified format. Added atomic counter for tagged hosts/sessions	16 years ago
Victor Julien	8cdd02877f	Add unittests for ringbuffer.	16 years ago
Victor Julien	e685579231	Add optional structure validation code.	16 years ago
Victor Julien	b67fb5229b	Fix pcap file auto flow pinned runmode (disabled by default).	16 years ago
Victor Julien	393acd77d2	Detection improvements: uricontent escaping now working, better negated pattern (content) handling.	16 years ago
Gurvinder Singh	154a8b1ed9	fixed the build failure with profiling enabled	16 years ago
Victor Julien	37eb2290b0	Add some checks for 'impossible' conditions that become possible after enabling optimizations :-/	16 years ago
Victor Julien	1dbbdce0be	Add a -fno-tree-pre to our CFLAGS as it breaks the ringbuffers on Ubuntu 9.10/64 bit.	16 years ago
Victor Julien	017b95f9ef	More thoroughly cleanup a Packet when we recycle it. Fixes a corner case where we'd have a invalid tcp packet but p->proto would still say IPPROTO_TCP because of a previous run. Fixes bug #187.	16 years ago
William Metcalf	5580f3d9c2	PacketQueue postp added to TmEcodes for ipfw and pf_ring to silence compiler warnings	16 years ago
William Metcalf	876057a4da	missing flow init in DetectTagTestPacket04 fix ut lockup on older os's	16 years ago
Victor Julien	7454336ef5	Make SigWrapper private to detect-parse.c and rename to SigDuplWrapper to reflect it's use and purpose.	16 years ago
Anoop Saldanha	9ecade76b9	in case of duplicate signatures used the one with the latest revision	16 years ago
Pablo Rincon	eedafa3a17	Adding unittests for anchored pcres for anchored	16 years ago
Pablo Rincon	bcb0b9ef9b	Moving urilen inspection to detect-engine-uri. Adding unittests for pcre /U and urilen, in combination with uricontent	16 years ago
Anoop Saldanha	36e4b1830e	add pcre with U modifiers to the umatch sigmatch list. fix for bug 155	16 years ago
Gurvinder Singh	8852b83fa7	flowbits, flowvars, pktvars, flow flags and app layer info added to alert-debug.log	16 years ago
Pablo Rincon	95fef55507	Fix threshold handling ip addr	16 years ago
Victor Julien	c67cf593c2	Disable alert-debuglog and unified1 in the default config. Add comments to the default config about pending packets, alert log types.	16 years ago
Victor Julien	580b09c2b8	Make sure we inspect all outstanding reassembled stream chunks (smsg) if the stream is shutting down. Make sure to do inspect signatures that use dsize against the tcp packet payload, even if that payload was already added to the stream. Likewise, the dsize signatures are not inspected against the reassembled stream.	16 years ago