2051 Commits (681f8329a6cda8c37de47e5f362a227521b31a8a)

 

All Branches   

Search

Author	SHA1	Message	Date
Victor Julien	77505f8873	Allow pcap-log to log outside of default-log-dir by passing a absolute path as filename.	14 years ago
Victor Julien	92ea1f68d4	Exit on thread restart limit reached.	14 years ago
Eric Leblond	8f4229b429	Use snprintf instead of sprintf.	14 years ago
Eric Leblond	9be1f1a31c	Use GET_PKT macros.	14 years ago
Eric Leblond	fb36c0af12	pcap: do not leave if interface goes down ... This patch changes suricata behaviour to support interface like ppp. Prior to this patch, a suricata listening to an interface was leaving when the interface goes down. This patch modifies the behaviour to automatically reconnect. Suricata retries to open the interface every 0,5s until it succeeds.	14 years ago
Eric Leblond	56bf931959	pfring: use macro for direct access ... Existing code was correct but it was using a direct access to pkt field. This patch uses the newly defined macro to have a clean access on the pkt data.	14 years ago
Eric Leblond	4495efcb62	Add macro for direct access ... In some case, this is needed to have a direct access to the pkt field. This patch adds macro for this usage.	14 years ago
Victor Julien	5da8bd7c1e	Fix unified2 overwriting tag alerts.	14 years ago
Victor Julien	cee615315f	Fix [drop] not being printed for IPv6 fast.log alerts.	14 years ago
Victor Julien	e19f6ebaf4	Various fixes for issues reported by clang.	14 years ago
Victor Julien	38e7d944c5	Fix icmpv4 unittest on big endian, extract embedded sport and dport even if a full tcph doesn't fit.	14 years ago
Victor Julien	92536c4952	Fix address test on big-endian.	14 years ago
Victor Julien	e0afe96920	Fix broken ICMPv4 unittests on big endian, fix broken ID macro on ICMPv6.	14 years ago
Victor Julien	f5a2017f3c	Fix counter unittest on big endian.	14 years ago
Victor Julien	6817824c92	Fix bloomfilter issue on big endian.	14 years ago
Victor Julien	e197f50727	Fix IP-Only unittests failing on Big Endian.	14 years ago
Victor Julien	b8cf50678f	Fix many address unittests using explicit byte order and thus failing on big-endian systems.	14 years ago
Victor Julien	c865ee2217	Fix compilation for nfq_set_mark code when NFQ is not enabled.	14 years ago
Eric Leblond	ee6552f25e	nfq_set_mark: handle feature in NFQ. ... This patch implements the nfq_set_mark related modification of verdict handling.	14 years ago
Eric Leblond	7f1a0d1ed1	coccinelle: add test for banned function ... The added semantic patch will trigger an error if banned functions are used.	14 years ago
Eric Leblond	9beebf621a	Add support for 'nfq_set_mark' keyword ... This patch introduces 'nfq_set_mark' which is new rules option. If a packet matches a rule using nfq_set_mark in NFQ mode, it is marked with the mark/mask specified in the option during the verdict. It is thus possible to trigger different behaviour on the packet inside Linux/Netfilter.	14 years ago
Victor Julien	f1e3d636d9	Add limit option to pcap-log logging config.	14 years ago
Victor Julien	f90a5cfffd	Misc pcap logging cleanups.	14 years ago
William Metcalf	023a0f94a2	first stab at pcap logging no rotating buff etc	14 years ago
Anoop Saldanha	1f7e4bada1	add tls.no_reassemble use for sslv2 which we missed previously. Also some cleanup	14 years ago
Victor Julien	71d0eabdec	Add a few extra safety checks in new SSL code.	14 years ago
Anoop Saldanha	c105a739e9	support for ssl_state keyword added	14 years ago
Anoop Saldanha	013d3aea1c	update ssl parser test. Some minor indentation changes	14 years ago
Anoop Saldanha	7a2046328c	some naming changes in ssl parser and ssl related keywords	14 years ago
Anoop Saldanha	4c570777c4	delete files app-layer-tls.[ch]	14 years ago
Anoop Saldanha	b639718787	replace the contents of app-layer-ssl.[ch] with the contents from app-layer-tls.[ch]	14 years ago
Anoop Saldanha	cacf0a9017	disabled sslv23 proto detection which we enabled previously. Although this is right, need to test a couple of things	14 years ago
Anoop Saldanha	4e8de99dcd	tls/ssl parser modifications/fixes. We now have just one file doing all the ssl parsing stuff, i.e. app-layer-tls.[ch], instead of app-layer-ssl.[ch] and app-layer-tls.[ch]	14 years ago
Anoop Saldanha	8b17275451	dcerpc parser todo update	14 years ago
Anoop Saldanha	8c6d4531ee	sslv23 support with ssl2 record format with version set to 3.0	14 years ago
Victor Julien	07a85427dd	Add --build-info command line option to output some basic build settings.	14 years ago
Victor Julien	174db08567	Force reassembly of unack'd data on receiving a valid RST packet.	14 years ago
Victor Julien	b9429ecec1	Fix invalid RST considered valid due to wrong returns codes. Only validate ACK from a RST packet if an ACK value was set.	14 years ago
Victor Julien	cb67d61ab5	Fix broken setup of end of stream pseudo packet.	14 years ago
Victor Julien	99fca03810	Move unittest code into UNITTESTS ifdefs in the HTP parser. Fixes a compiler warning.	14 years ago
Victor Julien	0dc6333d22	Fix compiler warnings about unused IPv6 Address code.	14 years ago
Victor Julien	b9fd978253	Fix compiler warnings in two unittests.	14 years ago
Victor Julien	a3be22cd5a	Fix compiler warning in isdataat keyword setup code.	14 years ago
Victor Julien	bbe071252b	Make sure PID is logged as well in alert-syslog output.	14 years ago
Victor Julien	da423a59d5	Allow users of the alert-syslog to set the identity.	14 years ago
Victor Julien	07776c113b	Fix valgrind error on pfring_recv, rename threads from RecvPfring to RxPfring so the name still looks right for 100+ threads. Add --pfring commandline option that just enables pfring, then takes interface from config.	14 years ago
Victor Julien	3aeb86d836	Fix header_len in GRE decoder getting out of control in some cases.	14 years ago
Victor Julien	1c9e48ae98	Fix compilation error on non-pfring systems.	14 years ago
Victor Julien	399e56209f	Small pfring doc update by Joshua White from Everis.	14 years ago
Victor Julien	91f28afef4	Add option to PF_RING to have multiple reader threads. Improve general performance of the PF_RING module.	14 years ago