3488 Commits (794bfc590c7342489dc337ee6c5e6ccab72be1c0)

 

All Branches   

Search

Author	SHA1	Message	Date
Eric Leblond	4df509f87a	defrag: use IP ID in hash ... This patch fixes the collision issue observed on an intensive network trafic. When there is fragmentation it is the case for all data exchanged between two hosts. Thus using a hash func only involving IP addresses (and protocol) was leading to a collision for all exchanges between the hosts. At a larger scale, it was resulting in a packet loss. By using the IP ID instead of the protocol family, we introduce a real difference between the trackers.	13 years ago
Victor Julien	a5587fec2e	flow: remove unused prune-flows option	13 years ago
Anoop Saldanha	bf6cd48259	if a sig's set as stream sig only, don't updated it as both stream and pkt sig if offset/depth's present ... bug #495 - update rule analyzer to not warn on offset_depth-tcp_pkt update if sig is stream only bug #497 - rule_warnings fixed	13 years ago
Anoop Saldanha	b2f589527a	Set thread name Suricata-Main for main thread and LiveRuleSwap for live swap thread	13 years ago
Anoop Saldanha	a0bce6362e	bug 499 - update host os info enum map to use - instead of _ + add new unittests	13 years ago
Anoop Saldanha	7833883a8f	bug #496 - don't warn about offset/depth for packet sigs	13 years ago
Victor Julien	d8356c5ebd	Windows build and other misc fixes.	13 years ago
Victor Julien	2295777691	Update changelog for 1.3 release.	13 years ago
Eric Leblond	a3465fb971	Rename 'worker' running mode to 'workers' ... This patch renamed the 'worker' running mode into 'workers'. Thus, there is only one name in Suricata for the same thing. Backward compatibility is ensured by replacing "worker" by "workers" when the old name is used. A warning is printed in the log when the old name is used.	13 years ago
Anoop Saldanha	34f0897163	check if all packets are processed before disabling detect threads + kill all threads <= detect after FFR + other minor fixes	13 years ago
Victor Julien	be5fed869d	conf api: remove dead code	13 years ago
Victor Julien	c2e484ae88	rule analyzer: fix detecting stream match	13 years ago
Anoop Saldanha	946a9ece32	rule analyzer updated for sigs with offset/depth set + alproto set	13 years ago
Anoop Saldanha	960d421f9d	Update SigValidate() to allow http keywords to be specified in the right flow direction	13 years ago
Eric Leblond	ac092197b4	autotools: pthread deps is needed on ubuntu. ... It is weird but adding pthread in needed on ubuntu 1204.	13 years ago
Victor Julien	9f3e079bcf	Make live reloads optional and disabled by default.	13 years ago
Victor Julien	9d2e17fa98	stream: don't NULL dereference p->flow->protoctx in StreamTcpReassembleDepthReached	14 years ago
Victor Julien	43c7fd7585	file inspection: improve logging when stream.depth limit is reached. #493.	14 years ago
Victor Julien	79d5ef3707	Improve warning if prelude output is selected but support not compiled in. #320.	14 years ago
Victor Julien	e7b36051de	Improve pktvar keyword parsing and error handling.	14 years ago
Victor Julien	2179ac2595	Minor fixes for coverity issues.	14 years ago
Victor Julien	c4e5e1482e	Fix detect tag error handling.	14 years ago
Victor Julien	d840308ae2	file detect: improve cleanup	14 years ago
Victor Julien	4a9fa35cf2	filemd5: free hash during cleanup	14 years ago
Anoop Saldanha	b0b29fb85a	ac-bs and ac-gfbs mem cleanup	14 years ago
Anoop Saldanha	c1cc9188fd	more mpm engine mem cleanup	14 years ago
Anoop Saldanha	0eaf0b0129	mpm engine and ac mem free fixes	14 years ago
Nikolay Denev	50aba06530	Fix SCSetThreadName() macros in threads.h Add FreeBSD thread naming implementation.	14 years ago
Anoop Saldanha	cde31abe96	bug #455 - Warn users on signature event vars having precedence over threshold.conf ones	14 years ago
Victor Julien	ab421978f0	Free all sig match structs when freeing a signature.	14 years ago
Victor Julien	f4c7bd4e5b	Fix memleak in tag parsing.	14 years ago
Victor Julien	af97c36c08	Properly clean signature's ip only data.	14 years ago
Victor Julien	c7af0589bc	Fix a reload memleak in thread local detection engine ctx.	14 years ago
Victor Julien	19e3348cae	Fix a reload memleak in the duplicate sig detection hash.	14 years ago
Victor Julien	728c4f9ea0	Clean up packet pool at shut down.	14 years ago
Victor Julien	583ba460c4	Update Changelog for 1.3rc1 release	14 years ago
Anoop Saldanha	ba5f757c47	sc_atomic_cas replaced with sc_atomic_set	14 years ago
Victor Julien	0c98980e21	http: add unittest to test \r in header line.	14 years ago
Victor Julien	d236e68b62	htp: keep track of header line terminators so http_raw_header can reconstruct exact headers.	14 years ago
Victor Julien	3d12b74012	http_raw_header: add some debug code.	14 years ago
Victor Julien	a6471cdb9c	icmpv6: for ICMPv6 info messages set payload ptr and length to right after 4 byte hdr.	14 years ago
Victor Julien	4cf6bb3f4c	afpacket: fix compilation in debug mode.	14 years ago
Eric Leblond	c36aa041f3	Update coccinelle script to match syntax evolution.	14 years ago
Eric Leblond	0227a87fcb	cleaning: fix warning when building with clang. ... clang was issuing some warnings related to unused return in function. This patch adds some needed error treatment and ignore the rest of the warnings by adding a cast to void.	14 years ago
Eric Leblond	6efd37a388	af-packet: use counter for drop and accept ... This patch adds counters for kernel drops and accepts to af-packet capture module. This information are periodically displayed in stats.log: capture.kernel_packets | RxAFP1 | 1792 capture.kernel_drops | RxAFP1 | 0 The statistic is fetch via a setsockopt call every 255 packets.	14 years ago
Eric Leblond	f2a6fb8a5a	af-packet: add support for BPF filter. ... This patch adds support for BPF in AF_PACKET running mode. The command line syntax is the same as the one used of PF_RING. The method is the same too: The pcap_compile__nopcap() function is used to build the BPF filter. It is then injected into the kernel with a setsockopt() call. If the adding of the BPF fail, suricata exit.	14 years ago
Eric Leblond	c85ee1e3f6	af-packet: get datalink for each socket creation. ... This patch will allow us to use the datalink when computing the filter. It also fixes a potential issue where an interface data type change after the interface if going down/up.	14 years ago
Victor Julien	59ec493f7c	http body inspection: force body inspection on stream eof.	14 years ago
Victor Julien	4d4671c470	default config: add engine-analysis.rules directive.	14 years ago
Victor Julien	2a4992e7a0	inline: fix unified2 alert direction selection	14 years ago