Commit Graph

362 Commits (7f3282284325091dfbab9d8d144cdbd3e28f4821)

Author SHA1 Message Date
Jason Ish 7f32822843 doc/filestore(v1) - document force-filestore field 7 years ago
Jeff Lucovsky 44a59b78c7 doc/anomaly Remove event_no 7 years ago
Victor Julien be6cdd37f8 stream: remove fix stream.depth references 7 years ago
Peter Manev 10819ed892 doc: Update tuning considerations doc 7 years ago
Peter Manev 6df1001957 doc: Update high performance config doc 7 years ago
Victor Julien bd2f1e15fd doc/stats: minor clarrifications on 5.0 defaults 7 years ago
Victor Julien 42438ec08e doc/userguide: add quickstart to dist 7 years ago
Giuseppe Longo dd5d0afd79 doc: add SIP keywords 7 years ago
Jason Ish d3e2cc9926 doc: document dns.opcode keyword 7 years ago
Jason Ish daed788d49 doc: Replace dns_query with dns.query. 7 years ago
Giuseppe Longo 972be0a560 doc: update file-extraction section 7 years ago
Travis Green 798d874662 doc: fix whitespace 7 years ago
Victor Julien 6aa2d550a1 doc/dotprefix: fix example rules 7 years ago
Jeff Lucovsky ab3d6328ba detect/transform: add dotprefix keyword to doc 7 years ago
Victor Julien df325d63ea doc/eve.anomaly: fix indent and general formatting 7 years ago
Jeff Lucovsky 075592b66f doc: Simplified anomaly configuration settings 7 years ago
Jeff Lucovsky aaacbf28c2 logging/anomaly: Support configuration filter types 7 years ago
Eric Leblond 35bc73e4e2 doc: change eBPF directory path 7 years ago
Zach Kelly caef8b5b38 protocol parser: rdp
Initial implementation of feature 2314:
1. Add protocol parser for RDP
2. Add transactions for RDP negotiation
3. Add eve logging of transactions
7 years ago
Andreas Herz d657fd9bf0 doc: add quickstart guide 7 years ago
Victor Julien d5009c5d8c doc/stream: briefly explain bypass 7 years ago
Jason Ish 0bb07b550c userguide: remove section on using Oinkmaster
Users should be using Suricata-Update now.
7 years ago
Travis Green 3f146cdd7e doc: add endswith keyword docs 7 years ago
Travis Green 9f8dcad287 doc: update of ssh-kewords documentation
Modifies ssh-keywords.rst to fix syntax error in example rule as well as
update descriptions to indicate older keywords have been deprecated.
7 years ago
Jason Ish 9488002a0d doc: use describe instead of option for old Sphinx
Older versions of Sphinx will generate duplicate IDs when you have
options like:

.. option:: some-option

.. option:: some-other-option

The version of Sphinx provided on CentOS 7 has this issue, newer
versions of Sphinx do not.  As CentOS 7 is still a popular
distribution, change ".. option" to ".. describe" which has the
same visual output, but does not generate links.
7 years ago
Victor Julien e36a963196 datasets/doc: minor fixes and clarifications 7 years ago
Victor Julien 0107b9a057 doc/dataset: initial documentation 7 years ago
Victor Julien 1bc738fbe4 doc: typo fixes
By @espritlibre and @Zeal0us
7 years ago
Nick Price d0a85b7550 ja3: Mention LibNSS dependency for JA3 7 years ago
Eric Leblond cc28d24e9a doc: install eBPF files in share directory
Following proposal by Sascha Steinbiss, let's use /usr/share/suricata
to store the eBPF files.
7 years ago
Eric Leblond 3cf49ae868 doc: fix English and some typos 7 years ago
Eric Leblond 4be6701836 doc: pointer to bpfctrl
As bpfctrl is currently the easiest way to manage pinned maps,
let's point to it. We will switch doc to suricatacl once support
has been added.
7 years ago
Eric Leblond 8f1a7de791 doc: improve doc on compiling with eBPF support 7 years ago
Eric Leblond f1ab27b7cb doc: improve XDP cpu redirect documentation 7 years ago
Eric Leblond 6d9ac64f7b doc: only balance by ip pair
As there is some issue with defrag, let's recommend to only do
IP pair load-balacing for RSS
7 years ago
Eric Leblond a1d3835b86 doc: document filter.bpf changes
Also adds some info to explain maps.
7 years ago
Eric Leblond 08397e07f1 doc: fix typos in geoip doc 7 years ago
Eric Leblond 0d5608bab2 doc: fix display of icmp code and type array 7 years ago
Eric Leblond 0c84591afe doc: use a table to list direction filter in geoip 7 years ago
Eric Leblond c01cadbade doc: fix geoip syntax
Spaces are not allowed before country code.
7 years ago
Vinjar Hillestad 4c18fee3c6 Documenting base64_decode and base64_content
base64 doc changes based on #4027 pull feedback
7 years ago
Hilko Bengen 36998ab4cd Add documentation for --with-clang parameter 7 years ago
Andreas Herz c0bddff078 userguide: remove old reference to rule-reload option 7 years ago
Jeff Lucovsky a66383569c userguide: formatting: remove tabs 7 years ago
Jeff Lucovsky c68510437f userguide: ftp formatting updates 7 years ago
Jeff Lucovsky 2149807bd6 eve/ftp: Transaction support for unmatched requests
Modified transaction logic to create a new transaction with each
request; replies location transactions by using the oldest "open"
(unmatched) transaction or the last transaction if none are open.
7 years ago
Jeff Lucovsky 1930b1f504 eve/ftp: Log FTP transactions
This changeset includes changes that
1. Add transaction support to the FTP parser
2. Support eve json logging of FTP transactions
7 years ago
Bill Meeks a291209e47 detect/geoip: migrate to GeoIP2 database format
Issue #2765
7 years ago
Victor Julien 034555644b doc: add tcp.hdr and udp.hdr 7 years ago
Victor Julien a01df4b86b doc: document tcp.mss keyword 7 years ago