Victor Julien
673d27c861
detect/iprep: minor code cleanups
10 months ago
Philippe Antoine
c53e9ac0dd
sdp: fix logging medias
...
As introduced by bff790b6ac
Also handles errors in the caller
Ticket: 6994
10 months ago
Jason Ish
df8568ee30
rust/dns: visibility cleanups
...
Remove pub from functions that don't require it.
10 months ago
Jason Ish
556cfe56bf
rust/dns: ffi naming and visibility cleanups
...
- Remove no_mangle and pub from FFI functions that are only accessed
with a function pointer.
- Rename all no_mangle FFI functions to our C naming scheme.
10 months ago
Jason Ish
4fedba1140
github-ci: remove cocci from fedora 39 build
...
Cocci on Fedora 39+ gets stuck for some reason. Cocci has been moved
to a new Ubuntu 24.04 build.
10 months ago
Jason Ish
1c2402f5e7
github-ci: add ubuntu 24.04 build with cocci
...
Rather basic 24.04 build for now, but use Cocci as Cocci is working
properly here, but not working in the latest Fedora releases.
10 months ago
jason taylor
aa919f8081
doc: update flowbits information
...
Ticket: #6991
Signed-off-by: jason taylor <jtfas90@gmail.com>
10 months ago
Philippe Antoine
47a1502dbb
ci: fix macos build
...
use brew instead of pip
limit the number of jobs for make
set a prefix where we can install
use brew flags for library finding
10 months ago
Victor Julien
86a363b1bc
decode/tcp: improve pointer hygene
...
Avoid NULL pointer calculations.
10 months ago
Victor Julien
0dfa5793db
decode/icmpv4: rename ICMPV4_GET_EMB_IPV4 to PacketGetICMPv4EmbIPv4
...
Follows function nameing style.
Ticket: #5517 .
10 months ago
Victor Julien
6e23419665
decode/icmpv6: store embedded ip6h ptr as offset
...
Reduces direct pointer usage and reduces Packet size.
Ticket: #6938 .
10 months ago
Victor Julien
f2288ee39b
decode/icmpv4: store embedded ip4h ptr as offset
...
Reduces direct pointer usage and reduces Packet size.
Ticket: #6938 .
10 months ago
Victor Julien
d89d4ceb3c
decode/icmpv4: put embedded pointer first
...
Reduce gaps in the structure.
Ticket: #6938 .
10 months ago
Victor Julien
13281109e3
decode/tcp: reduce TCPVars by turning bools into bitfields
...
To reduce Packet size and make similar fields follow the same pattern.
Ticket: #6938 .
10 months ago
Victor Julien
8698610b4a
af-packet: fix eBPF/XDP compilation
10 months ago
Victor Julien
68804b8c4b
decode/tcp: move tcph into L4 packet data
...
To reduce Packet size.
Ticket: #6938 .
10 months ago
Victor Julien
28ac86096a
decode/udp: move udph into L4 packet data
...
To recude Packet size.
Ticket: #6938 .
10 months ago
Victor Julien
54362d44db
decode/ethernet: move ethh into L2 section
...
L2 section similar to L3 and L4 sections.
Ticket: #6938 .
10 months ago
Victor Julien
b2f7d3604b
decode/pppoe: localize pppoedh pointer
...
Remove from Packet struct as there were no users of it.
Ticket: #6938 .
10 months ago
Victor Julien
b4ef910aff
decode/pppoe: localize pppoesh header pointer
...
Remove header pointer from Packet as there were no users of it.
Ticket: #6938 .
10 months ago
Victor Julien
852ff83d70
decode/icmpv4: move icmpv4h into L4 packet data
...
To reduce Packet size.
Ticket: #6938 .
10 months ago
Victor Julien
b959d1dba8
decode/icmpv6: move icmpv6h into L4 packet data
...
Also start vars section in L4 for icmpv6vars.
To reduce Packet size.
Ticket: #6938 .
10 months ago
Victor Julien
30ae13f2c3
decode/esp: move esph into L4 packet data
...
To reduce Packet size.
Ticket: #6938 .
10 months ago
Victor Julien
7d04216cad
decode/gre: move greh into L4 packet data
...
To reduce Packet size.
Ticket: #6938 .
10 months ago
Victor Julien
20b8c79259
decode/sctp: move sctph into L4 packet data
...
Reduces Packet size.
Ticket: #6938 .
10 months ago
Victor Julien
2137bbbf9a
decode/icmpv6: add and use PacketIsICMPv6 inline func
...
For better readability and type checking.
Ticket: #5517 .
10 months ago
Victor Julien
3a1e60745e
decode/icmpv6: switch ptr checks to PKT_IS_ICMPV6
...
For better readability and type checking.
Ticket: #5517 .
10 months ago
Victor Julien
1002068e39
decode/icmpv4: add and use PacketIsICMPv4 inline func
...
For better readability and type checking.
Ticket: #5517 .
10 months ago
Victor Julien
5c3036bea8
decode/udp: add and use PacketIsUDP inline func
...
Replace PKT_IS_UDP macro with PacketIsUDP inline function.
For better readability and type checking.
Ticket: #5517 .
10 months ago
Victor Julien
cca912e9b3
decode/tcp: add and use PacketIsTCP inline func
...
To prepare future changes to the Packet header pointers.
Ticket: #5517 .
10 months ago
Victor Julien
329fb2affa
decode: start l4 packet area; convert csum handling
10 months ago
Victor Julien
54b9f344b7
decode/icmpv4: switch ptr checks to PKT_IS_ICMPV4
...
To prepare future changes to the Packet header pointers.
Ticket: #5517 .
10 months ago
Victor Julien
c9ef85e620
decode: refactor L3 checkum handling
...
Use a flag to indicate a calculated csum is available.
Allows packet reset to just use memset.
10 months ago
Victor Julien
2001ddc583
decode: use macro's instead of direct ptr checks
...
To prepare future changes to the Packet header pointers.
Ticket: #5517 .
10 months ago
Victor Julien
769b020a55
decode/icmpv6: improve packet vars layout
...
Part of effort to make Packet more compact.
Ticket: #6938 .
10 months ago
Victor Julien
18d49c27ae
decode/icmpv6: remove unused error_ptr field
...
Was only set, never checked.
Part of effort to make Packet more compact.
Ticket: #6938 .
10 months ago
Victor Julien
4b492c2ded
decode/icmpv6: remove embedded address storage
...
Only used in tests. For the tests, switch to getting headers from embedded IPv6 header.
Part of effort to make Packet more compact.
Ticket: #6938 .
10 months ago
Victor Julien
521c968079
decode/icmpv6: remove unused L4 header pointers from Packet
...
Not used, so no need to keep them.
Part of effort to make Packet more compact.
Ticket: #6938 .
10 months ago
Victor Julien
a22047b770
decode/icmpv4: shrink icmpv4 packet vars
...
Remove unused L4 header pointers.
Part of effort to make Packet more compact.
Ticket: #6938 .
10 months ago
Victor Julien
9ef5af291b
decode/icmpv4: remove unused Packet members
...
Addresses are pulled from embedded IPv4 header directly.
Embeded hlen was unused.
Part of effort to make Packet more compact.
Ticket: #6938 .
10 months ago
Victor Julien
1777e0314e
decode/tcp: remove unused macro
...
SET_OPTS is now unused, so remove.
10 months ago
Victor Julien
6b8093d7b8
decode/tcp: reduce size needed for SACK tracking
...
No longer use a pointer, but rather an offset.
Part of effort to make Packet more compact.
Ticket: #6938 .
10 months ago
Victor Julien
81c4b10dc8
decode/tcp: minor struct layout optimization
...
Part of effort to make Packet more compact.
Ticket: #6938 .
10 months ago
Victor Julien
7be0678c3a
decode/tcp: reduce size needed for tracking WSCALE
...
Part of effort to make Packet more compact.
Ticket: #6938 .
10 months ago
Victor Julien
6cab2480e5
decode/tcp: reduce space needed for tracking TFO
...
Part of effort to make Packet more compact.
Ticket: #6938 .
10 months ago
Victor Julien
6a23fafa5f
decode/tcp: reduce space needed for MSS tracking
...
Part of effort to make Packet more compact.
Ticket: #6938 .
10 months ago
Victor Julien
9632c2f570
decode/tcp: optimize SACKOK storage
...
Take less space in the TCPVars for tracking if SACKOK is set.
Reduces size by 16 bytes.
Ticket: #6938 .
10 months ago
Victor Julien
3c17d5d73c
decode/ipv4: minor test cleanups
10 months ago
Victor Julien
a40d6f5c4f
decode/ipv6: prep for turning ip4h/ip6h into union
...
Store IPv6 decoder vars in a new Packet::l3 section in the packet.
Use inline functions instead of the often multi-layer macro's for
various IPv6 header getters.
Ticket: #6938 .
10 months ago
Victor Julien
2d5c381c3b
decode/ipv4: prep for turning ip4h/ip6h into union
...
Store IPv4 decoder vars in a new Packet::l3 section in the packet.
Use inline functions instead of the often multi-layer macro's for
various IPv4 header getters.
Ticket: #6938 .
10 months ago