6699 Commits (80716f860e72758cd032dec91376d056fb80743f)

 

All Branches   

Search

Author	SHA1	Message	Date
maxtors	b28ebae088	Use ConfValIs* for parsing netmap.checksum-checks.	9 years ago
maxtors	d18e2f6e9a	Use ConfValIs* for parsing af-packet.checksum-checks.	9 years ago
maxtors	3d4cdd1117	Use ConfValIs* for parseing mpipe.checksum-checks.	9 years ago
maxtors	524c627194	Use ConfValIs* for parsing pcap-file.checksum-checks.	9 years ago
Victor Julien	c742a818d5	profiling: suppress inferior version of UtilCpuGetTicks warning	9 years ago
Victor Julien	db4ec46f18	coverty: fix dead code warning	9 years ago
Jason Ish	dd86ac07f7	smb: check that there is enough input data ... Conditional was checking the word count, but indexing much further into the input data.	9 years ago
maxtors	0e5bbe8564	Reordering of RRTYPE switch case for performance.	9 years ago
maxtors	387919e203	Added more DNS Resource Record Types.	9 years ago
maxtors	16e4c92b69	Changed "enabled" parsing to use ConfValIs(true|false)	9 years ago
maxtors	2b80da424b	Update ASN1_MAX_FRAMES to reflect default in suricata.yaml.in	9 years ago
Victor Julien	9818557369	stats: fix stats.log ignoring null-values for threads	9 years ago
Victor Julien	d9639fba60	cppcheck: fix harmless warnings ... [src/detect-engine-loader.c:272]: (error) Buffer is accessed out of bounds. [src/flow-manager.c:742]: (error) Buffer is accessed out of bounds. [src/flow-manager.c:906]: (error) Buffer is accessed out of bounds.	9 years ago
Zachary Rasmor	dbbca37a94	Remove free operation on thread name field. ... Name field is now a pre-allocated array - free is no longer necessary. Fix issue leading to segfault during interface shortening in Single runmode.	9 years ago
Victor Julien	71018cd2ce	runmodes: constify names	9 years ago
Zachary Rasmor	f211fa48f4	Update unit test to account for 'name' type change.	9 years ago
Zachary Rasmor	68cfa009a0	Update thread creation and threads to use global thread names. ... Thread name is now stored as a static string buffer, string duplication and alloc/de-alloc is no longer required.	9 years ago
Zachary Rasmor	10d3d90f06	Change thread name from pointer to buffer. Remove pointer free.	9 years ago
Zachary Rasmor	885747218b	Update shortening algorithm to account for addition of #.	9 years ago
Zachary Rasmor	8c8759c189	Add global threadnames. ... Update thread naming convention to follow: W#01-eth0. Add interface name where applicable, add #.	9 years ago
Zachary Rasmor	f8a40dd906	Update pcap-file runmode to adhere to new thread standard.	9 years ago
Zachary Rasmor	41c768ce28	Update threads to use global thread names. ... Update FlowManager/Recycler to use global name. Also add # into thread number. Update af-packet to use global threadnames. Update pcap to use global threadnames. Update pfring to use global threadnames. Update erf-dag to use global threadnames. Update nflog to use global threadnames. Update netmap to use global threadnames. Update napatech to use global threadnames.	9 years ago
Zachary Rasmor	1bfebae8c4	Update IPS thread names to new name standard.	9 years ago
Zachary Rasmor	19bc6c1f9f	Update thread naming convention for all IDS modes. ... - Change 'Detect' to 'W' - Enforce 2 digit numbering in thread names with leading zero - Add 01 after W for single mode: W01	9 years ago
maxtors	a6adb5dbbf	Changed naming of flowmanager/recycler. ... - Changed FlowManagerThread to FM- - Changed FlowRecyclerThread to FR- - Changed use of strcasecmp to strncasecmp. This was used in the killing and disabling of FM/FR Threads.	9 years ago
maxtors	a17ac21077	Reworked how shortening should be performed. ... The shortening of the interfacenames is now dependent on the size of the destination buffer, so that this can be easily changed in the future. The process uses snprintf and strlcat. Also changed the buffer sizes in the util-runmodes to 12 so that they can hold 11 chars + null terminator.	9 years ago
maxtors	88a6e79607	Fixed string copy and cat functions and made shortening safer. ... Changed out strcpy, strncpy to strlcat and strlcpy. Also added checks to see if the shortening did work or if it would fail in advance. Fixed code in util-device and util-runmodes.	9 years ago
maxtors	10d1450e49	Added shortening of listening interface in util-runmodes ... Added function LiveSafeDeviceName in util-device that shortens an NIC device name if the name is over a given length and turns it in to Ex: longi...eeth1	9 years ago
Eric Leblond	63937cd903	detect-msg: fix option parsing ... Code removing the space before the double quote at msg option start was not working correctly for option starting with a space.	9 years ago
Victor Julien	7f700a137c	smtp: fix test	9 years ago
Victor Julien	c4a9580fce	detect file: improve multi file handling ... When multiple files were in a tx, the first one(s) closed/complete and a new open one as well, a match in the former could lead to not inspecting the latter. This patch adds a workaround for this case, by allowing the file inspection code to return a special code for 'match, but more files available in tx'. The stateful detection engine will then not make this match final for the tx. It relies on the file pruning to kick in to make sure the already complete files are removed from the tx before the next time the detection engine is called on the tx.	9 years ago
Victor Julien	8cd4405c21	detect file: cleanups	9 years ago
Victor Julien	ea0067add8	debug: add various detect engine debug statements	9 years ago
Victor Julien	83e0529b2b	http: flag destate about new files ... The stateful detection engine needs some assistance when inspecting transactions with multiple files. This patch flags the detect state (if any) about the availability of new files in http. For http it should only apply to multipart bodies although the flag is set for all files.	9 years ago
Victor Julien	aa4ad9d25b	smtp: flag detect state that new files are available ... The stateful detection engine needs some assistance when inspecting transactions with multiple files. This patch flags the detect state (if any) about the availability of new files in smtp.	9 years ago
Victor Julien	807fe4ac9f	detect state: fix issues with multiple files per tx ... Make sure multiple files in a single tx are inspected correctly. This requires resetting part of the stored state on new files.	9 years ago
Victor Julien	19d112ba07	smtp/mime: allow unquoted name/filename fields ... Don't enforce that name/filename fields are quoted. Reported-By: Blair Steven	9 years ago
Victor Julien	5c514c904f	smtp: fix file logging and matching ... When no rules with 'file content' keywords like filemd5 or filestore were used, and non of the file outputs would force 'output' like 'force-md5' and 'force-magic', the file would not be tracked at all. This meant that logging wouldn't work and neither would filename and fileext inspection. This patch removes the tracking bypass from the SMTP code and leaves decisions to the file API.	9 years ago
maxtors	9d3fd82849	Removed duplicate include statements.	9 years ago
maxtors	06d74b5775	Module specific error code for init ctx error.	9 years ago
maxtors	69863f7b1c	Corrected and unified debugmessages for init data errors in *ThreadInit.	9 years ago
maxtors	7f2f7cc48d	Added parsing and utilization of yaml defined payload buffer value.	9 years ago
maxtors	c6bbd89251	Added payload-buffer-size option to yaml configuration	9 years ago
Victor Julien	554080cced	lua: print lua script func/line/file in SCLog* funcs ... Instead of printing the func/line/file of the C code SCLog* wrappers, print them from inside the lua script. They are not always available.	9 years ago
Victor Julien	1c8775b340	QA: --afl-rules for faster rule fuzzing	9 years ago
Victor Julien	c3efc4e072	pcap: small cleanups	9 years ago
Victor Julien	3f16ebe476	dns: don't read uninitialized memory in name parsing ... AFL+ASAN found that with certain input we used an uninitialized byte in the length calculation. Probably harmless as the length was still validated afterwards.	9 years ago
Victor Julien	c4575d1419	stream-tcp: improve test function cleanup	9 years ago
Victor Julien	3aea0bd4f3	stream-tcp: introduce stream cleanup function	9 years ago
Victor Julien	93fa291922	stream-tcp: unify ssn clean up functions ... There were 2 separate function doing ssn cleanup. To prevent issues common with code duplication, unify them.	9 years ago