13717 Commits (6621b0ec93ab80a4fcfabeac70891fe282b569ef)

 

All Branches   

Search

Author	SHA1	Message	Date
Alice Akaki	6621b0ec93	detect-icmp-seq: convert unittests to FAIL/PASS APIs ... Task: #4043	2 years ago
Haleema Khan	8d5c5f24a1	dns/eve: add 'HTTPS' type logging ... Add a new DNS record type to represent HTTPS Ticket: #4751	2 years ago
Haleema Khan	b1972a5c61	detect-itype: remove unittests ... Ticket: #5590	2 years ago
Gabriel Lima Luz	4b009eb907	detect-replace: Convert unittests to FAIL/PASS API ... Ticket: 4054	2 years ago
Philippe Antoine	a003640ecf	security: prevents process creation ... with setrlimit NPROC. So that, if Suricata wants to execve or such to create a new process the OS will forbid it so that RCE exploits are more painful to write. Ticket: #5373	2 years ago
Jason Ish	2ab3646fad	profiling: sort LoggerId's in same order as defined ... Sort the LoggerId's in the order they are define in suricata-common.h.	2 years ago
Jason Ish	99cb8c666a	loggers: all json tx loggers can share the same loggerid ... This is to avoid the tx logging code that doesn't support LoggerId values over 31 at this time. The simplest fix for now is to just have all JSON (eve) loggers use the same ID. DNP3 is left as-is for now as it needs some extra support in the parser.	2 years ago
Richard McConnell	9c2939fb33	workflow: add systemd integration and check ... Intergration of systemd is a feature that enables notification of a running service to the service manager. The workflow now ensures compilation with systemd and checks the binary has been built against libsystemd.	2 years ago
Richard McConnell	7f4c1d5e2f	doc/systemd: add documentation for sd_notify	2 years ago
Richard McConnell	88b98a54df	suricata: add sd_notify support ... Upon all threads reaching a running state the system generates a notification for systems running and configured for systemd Implements feature 5384 (https://redmine.openinfosecfoundation.org/issues/5384)	2 years ago
Richard McConnell	13beba141c	source: add THV_RUNNING flag to notify of running state ... Each module (thread) updates its status to indicate running. Main thread awaits for all threads to be in a running state before continuing the initialisation process Implements feature 5384 (https://redmine.openinfosecfoundation.org/issues/5384)	2 years ago
Eric Leblond	9fb0137d9d	doc: add reference to ipaddr in IP matching	2 years ago
Eric Leblond	94664ef565	datasets: don't exit on invalid data	2 years ago
Eric Leblond	3bd48d9336	detect: doc link for ip.src and ip.dst	2 years ago
Eric Leblond	da8b16eaeb	doc: add ip.dst and ip.src doc	2 years ago
Eric Leblond	3599cbf1c4	doc: document new dataset types ... Feature: #5383	2 years ago
Eric Leblond	7518204ad4	datasets: introduce new IPv6 type ... This patch also simplifies IPv6 parsing. Feature: #5383	2 years ago
Eric Leblond	6fe9d510cf	detect: add ip.dst keyword as sticky buffer ... Feature: #5383	2 years ago
Eric Leblond	7e516aad94	detect: add ip.src keyword ... It is a sticky buffer matching on src_ip. Feature: #5383	2 years ago
Eric Leblond	b2cdc6c899	datasets: introduce ipv4 type ... This patch introduce the IPv4 type for dataset so Suricata commandmatch on a set of IPv4 addresses. This is meant to complement iprep feature for people that needs more flexibility such as settings the IP on the packet path. Feature: #5383	2 years ago
Eric Leblond	a9c05c7d96	datasets: factorize serialised operations ... Ticket: #5184	2 years ago
Eric Leblond	a1a22cccd2	doc: document dataset-lookup ... Ticket: #5184	2 years ago
Eric Leblond	537fd76787	suricatasc: add dataset-lookup command ... Ticket: #5184	2 years ago
Eric Leblond	843dba0a28	datasets: add dataset-lookup command ... Ticket: #5184	2 years ago
Eric Leblond	20973e9e6b	doc: add dataset-clear command ... Ticket: #5184	2 years ago
Eric Leblond	b63f9e7e93	suricatasc: add dataset-clear command ... Ticket: #5184	2 years ago
Eric Leblond	2f25e48897	datasets: add dataset-clear command ... Ticket: #5184	2 years ago
Eric Leblond	c5559cb68f	doc: document dataset-dump command ... Ticket: #5184	2 years ago
Eric Leblond	a480abcdd0	datasets: add dump via unix socket ... This patch adds a dataset-dump command to the list of unix socket commands. Implementation is not optimal as we are locking the datasets when doing the dump. But if we consider that the current alternative from an implementation point of view is to stop Suricata then this is far better than current state. Ticket: #5184	2 years ago
Shivani Bhardwaj	79a78611ad	release: 7.0.0-beta1; update changelog	2 years ago
Victor Julien	1fafb83fed	packet: turn tunnel lock into spinlock ... Lock is only held to update/check ints, so spin lock will be more efficient. Place the member of Packet in a new "persistent" area to make it clear this is not touched by the PacketReinit logic. Ticket: #5592.	2 years ago
Victor Julien	57e70841c4	stream/tcp: remove obsolete and commented out tests	2 years ago
Victor Julien	e72770c1b2	decode/vxlan/tests: don't memset new packet	2 years ago
Victor Julien	edf93ae5b6	decode/mpls/tests: improve pkt handling; cleanups	2 years ago
Victor Julien	0f7fe2a4c3	app-layer/tests: don't memset new packet	2 years ago
Victor Julien	2f6c014f70	doc/devguide: update packet (de)alloc in unittests	2 years ago
Victor Julien	6dc53447f1	decode/geneve/tests: don't memset packet ... Packet is already initialized.	2 years ago
Victor Julien	b07c7ad14c	threading: improve/add thread queues explanations	2 years ago
Victor Julien	951bcde0b2	eve/alert: remove tunnel locking ... Tunnel lock is only used to sync verdict logic.	2 years ago
Victor Julien	0e7adc21a6	decode: alloc packets using calloc	2 years ago
Victor Julien	68a9da52ad	packetpool: remove PKT_ALLOC flag ... Use Packet::pool instead. If Packet::pool is non-NULL the packet is owned by a pool. Otherwise it is allocated and should be freed after use.	2 years ago
Victor Julien	3ed7b4473e	runmodes: remove dead error check	2 years ago
Victor Julien	9d3c60bde3	smtp/mime: no error logging in packet path	2 years ago
Victor Julien	256f0f2c5c	defrag: no error logging in packet path	2 years ago
Victor Julien	8f02a3e415	applayer: make sure to use correct ipproto	2 years ago
Victor Julien	dba7103a96	eve/alert: use flow proto to avoid crash on ICMP	2 years ago
Alice Akaki	51c0714d71	detect-filemd5: convert unittests to FAIL/PASS APIs ... Task: #4035	2 years ago
Alice Akaki	fe31d51c30	detect-filesha256: convert unittests to FAIL/PASS APIs ... Task: #4038	2 years ago
dependabot[bot]	c3c8472d09	github-actions: bump actions/upload-artifact from 3.1.0 to 3.1.1 ... Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.1.0 to 3.1.1. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](3cea537223...83fd05a356) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 years ago
dependabot[bot]	0b0616528f	github-actions: bump actions/download-artifact from 3.0.0 to 3.0.1 ... Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 3.0.0 to 3.0.1. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](fb598a63ae...9782bd6a98) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 years ago