jason taylor
7de16809ef
doc: update http keyword listing order
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
8b3db3c3b5
doc: update file.name keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
49dba7bb94
doc: update file.data keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
bee3aa9709
doc: update http.response_header keyword
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
dcb548106e
doc: update http.request_header keyword
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
3f5d228b9e
doc: update http.host http.host.raw keyword
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
739dfe5e5e
doc: update http.location keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
9ddd8cf9e0
doc: update http.server keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
3af98f3b92
doc: update http.response_body keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
64760e2e75
doc: update http.response_line keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
566bc0d39c
doc: update http.stat_msg keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
271321249f
doc: update http.stat_code keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
71d8488cb5
doc: update http.request_body keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
c2783e9391
doc: update http.header_names keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
5eadbc2ff0
doc: update http.start keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
7e65554462
doc: update http.referer keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
876dfb99ca
doc: update http.content_len keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
8ff06c1bc0
doc: update http.content_type keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
b2854486dd
doc: update http.connection keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
75436dff9c
doc: update http.accept_lang keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
f6375e487e
doc: update http.accept_enc keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
7e3288f5a7
doc: update http keyword normalization notes
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
9e87d89d2e
doc: update http.accept keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
8307168ae7
doc: update http.user_agent keyword
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
75c4cdfa1c
doc: update http.cookie keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
7a28874c8d
doc: update http.header keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
b3af723486
doc: remove legacy description/duplicated data
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
292b3eb9b3
doc: update http.request_line keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
c7f351bd6e
doc: update http.protocol keyword documentation
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
2d0ceedeba
doc: update urilen keyword documentation
...
ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
ef118aa582
doc: remove legacy uricontent information
...
ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
96e8c10276
doc: update http.uri and http.uri.raw keywords
...
ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
bf192926a8
doc: update http.method keyword
...
ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
0cce5ba447
doc: add http keyword links
...
ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
fd46175203
doc: update http primer information
...
ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
54fd35c5b4
doc: remove legacy tables and image references
...
ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
Victor Julien
34f53f85bc
systemd: reimplement sd_notify logic using UNIX socket
...
One of the lessons of the XZ backdoor story was that just linking to
libsystemd to call sd_notify is discouraged by the systemd project:
Lennart Poettering:
"PSA: In context of the xzpocalypse we now added an example reimplementation
of sd_notify() to our man page:
https://www.freedesktop.org/software/systemd/man/devel/sd_notify.html#Notes
It's pretty comprehensive (i.e. uses it for reload notification too), but
still relatively short.
In the past, I have been telling anyone who wanted to listen that if all you
want is sd_notify() then don't bother linking to libsystemd, since the
protocol is stable and should be considered the API, not our C wrapper
around it. After all, the protocol is so trivial"
From: https://mastodon.social/@pid_eins/112202687764571433
This commit takes the example code and uses it to reimplement the notify
logic.
The code is enabled if Linux is detected in configure. Since the code
won't do anything if the NOTIFY_SOCKET env var isn't set, this should
also work fine on systems w/o systemd.
Ticket: #6913 .
11 months ago
Jason Ish
51bf1c3510
docs/userguide: use a consistent date for reproducible builds
...
By default, when Sphinx generates the man pages, the current date will
be embedded in them. This can be set to a specific date with the
"today" variable. Typically the date embedded in manpages in the
release date.
To achieve this, attempt to use the environment variable, RELEASE_DATE
to set the "today" variable, reverting back to the empty string if not
set. It is up to our build system to properly set this date.
Ticket: #6911
11 months ago
Jason Ish
4c16032f63
docs/conf.py: fix python escape warning
...
/home/jason/oisf/dev/suricata/master/doc/userguide/conf.py:74: SyntaxWarning: invalid escape sequence '\('
"AC_INIT\(\[suricata\],\s*\[(.*)?\]\)",
11 months ago
Jason Ish
8284df3ed4
devguide: add an upgrade section
...
Add an upgrade section to the devguide. This should cover any changes
to APIs that users might be using from plugins or as a library user.
12 months ago
Hadiqa Alamdar Bukhari
3aa313d0c5
dns: add dns.rcode keyword
...
dns.rcode matches the rcode header field in DNS messages
It's an unsigned integer
valid ranges = [0-15]
Does not support prefilter
Supports matches in both flow directions
Task #6621
12 months ago
Juliana Fajardini
7b2bef1bc6
devguide: add chapter and short intro to libsuricata
...
With this, we intend to make more users aware of this use case, and that
we are working towards this.
Related to
Task #2693
12 months ago
Hadiqa Alamdar Bukhari
4b81851097
dns: add dns.rrtype keyword
...
It matches the rrtype field in DNS
It's an unsigned integer match
valid ranges = [0-65535]
Does not support prefilter
Supports flow in both directions
Feature #6666
1 year ago
Giuseppe Longo
3dc24a967a
doc: add upgrade section for 8
1 year ago
Giuseppe Longo
add95002b9
suricata.yaml: define SIP_PORTS
1 year ago
Philippe Antoine
e22217bda8
doc: there is no right shift for integer bitmasks
...
Ticket: 6628
1 year ago
Lukas Sismis
356f9ffa13
doc: mention the limited number of RX/TX descriptors on Intel NICs
...
Ticket: 6748
1 year ago
jason taylor
e891ef3d4e
doc: add pcap file logging variable details
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
Jeff Lucovsky
ee6208be9d
config/nss: Remove libnspr/libnss traces
...
Issue: 6712
1 year ago
Philippe Antoine
8f73a0ac55
smtp: config limit maximum number of live transactions
...
Ticket: #6477
1 year ago