Victor Julien
							
						 
						
							 
							
							
							
								
							
								8186565240 
								
							
								 
							
						 
						
							
							
								
								Fix a number of potential issues found by CLANG and cppcheck.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								362c25ec8a 
								
							
								 
							
						 
						
							
							
								
								Fix potential suppression parsing issue found by CLANG.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								0fd71c45c5 
								
							
								 
							
						 
						
							
							
								
								Improve asn1 keyword handling of a malformed asn1 state.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								9b437caaea 
								
							
								 
							
						 
						
							
							
								
								Fix stream unittests.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								b39acddf28 
								
							
								 
							
						 
						
							
							
								
								Add flow counters: memuse, pruning stats, emergency mode. Bug  #348 .  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								b8659daef7 
								
							
								 
							
						 
						
							
							
								
								Add stream engine counters  
							
							 
							
							... 
							
							
							
							Added stream counters:
- tcp.reassembly_memuse -- current memory use by reassembly in bytes
- tcp.memuse -- current memory use by stream tracking in bytes
- tcp.reused_ssn -- ssn reused by new session with identical tuple
- tcp.no_flow -- TCP packets with no flow - indicating flow engine memory at its limits 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								5395071c11 
								
							
								 
							
						 
						
							
							
								
								Make http logging code more robust against cases where the htp state is incomplete (out of memory conditions).  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								7bf1de022c 
								
							
								 
							
						 
						
							
							
								
								Add AF_PACKET to capability system.  
							
							 
							
							... 
							
							
							
							This patch adds the necessary code to have AF_PACKET using
the same capability dropping mechanism as pcap. This should
fix  #361 . 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								7eb83314b4 
								
							
								 
							
						 
						
							
							
								
								Fix compiler warning and fix using GET_IPV4_DST_ADDR_PTR macro to access IPv6 header.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								1df183ac38 
								
							
								 
							
						 
						
							
							
								
								http log: factorize logging function.  
							
							 
							
							... 
							
							
							
							With the introduction of the PrintInet function there was almost
no difference between IPv4 and IPv6 HTTP logging functions. This
patch adds a wrapper that factorizes the code. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								2a8ffe07ea 
								
							
								 
							
						 
						
							
							
								
								http log: factorize extended logging  
							
							 
							
							... 
							
							
							
							Extended logging is not dependant on IP protocol version. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								a5b1de4f0d 
								
							
								 
							
						 
						
							
							
								
								http log: Add extended option  
							
							 
							
							... 
							
							
							
							This patch adds a extended option to log extended HTTP information
when activated. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Chris Wakelin
							
						 
						
							 
							
							
							
								
							
								8b81063fc2 
								
							
								 
							
						 
						
							
							
								
								http log: Add extended information  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eileen Donlon
							
						 
						
							 
							
							
							
								
							
								1adf4b868c 
								
							
								 
							
						 
						
							
							
								
								set layer4 protocol when no ipv6 extension headers  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								9549faae95 
								
							
								 
							
						 
						
							
							
								
								af-packet: add kernel statistics to exit stats.  
							
							 
							
							... 
							
							
							
							This patch should fix  #325 . 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								acf10525f6 
								
							
								 
							
						 
						
							
							
								
								doc: add decode group and related documentation.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								6220134a48 
								
							
								 
							
						 
						
							
							
								
								doc: describe some features and structures.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								eefdbfb55b 
								
							
								 
							
						 
						
							
							
								
								doc: add mainpage.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								60a99915c1 
								
							
								 
							
						 
						
							
							
								
								doc: create http support group  
							
							 
							
							... 
							
							
							
							This patch create an httplayer group and adds related files to
it. It also fixes some typo in documentation string and format. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								b5a3e737c9 
								
							
								 
							
						 
						
							
							
								
								doc: comment link between Flow and application layer.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								b055a21d63 
								
							
								 
							
						 
						
							
							
								
								doc: create doxygen group for state detection.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								0468dbd575 
								
							
								 
							
						 
						
							
							
								
								doc: doxygenise some comments.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								a64eea9628 
								
							
								 
							
						 
						
							
							
								
								Fix minor error message.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								92d74fd480 
								
							
								 
							
						 
						
							
							
								
								doc: Add missing params in func description.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								fdfa85de37 
								
							
								 
							
						 
						
							
							
								
								Add comment to describe file content.  
							
							 
							
							... 
							
							
							
							The name of the file is not really explicit. This patch adds doxygen
to have an easy to use description in the generated documentation. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								830ca7c2c8 
								
							
								 
							
						 
						
							
							
								
								source-nfq: suppress insecable space.  
							
							 
							
							... 
							
							
							
							This patch supresses an insecable space and fixes an
indentation. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								01beefc1c9 
								
							
								 
							
						 
						
							
							
								
								pfring: improve error handling  
							
							 
							
							... 
							
							
							
							Treat TmThreadsSlotProcessPkt return. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								0d7f25580d 
								
							
								 
							
						 
						
							
							
								
								pcap: improve error handling.  
							
							 
							
							... 
							
							
							
							Treat TmThreadsSlotProcessPkt return. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								c469824bed 
								
							
								 
							
						 
						
							
							
								
								af-packet: improve error handling  
							
							 
							
							... 
							
							
							
							The return of TmThreadsSlotProcessPkt function was not handled. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								9ac51900f6 
								
							
								 
							
						 
						
							
							
								
								Fix broken macro call.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								4071d3cf57 
								
							
								 
							
						 
						
							
							
								
								PACKET_INITIALIZE is enough for packet init.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								d296223ffe 
								
							
								 
							
						 
						
							
							
								
								cuda: Suppress sprintf usage.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								6bf15bac31 
								
							
								 
							
						 
						
							
							
								
								Fix various packet access.  
							
							 
							
							... 
							
							
							
							The coccinelle based tests have detected invalid uses of access to
Packet data. This patch fixes the detected problems. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								eef3e28b17 
								
							
								 
							
						 
						
							
							
								
								invalid use of strncat.  
							
							 
							
							... 
							
							
							
							sltrlcat must be used instead. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								2be09b0c86 
								
							
								 
							
						 
						
							
							
								
								Fix Defrag unit test.  
							
							 
							
							... 
							
							
							
							This patch fixes the unittest for IPV4 defrag. The direct usage
of the pkt pointer in the Packet structure is not allowed. This
is fixed by using PacketCopyData function.
This modification was requiring some other fixes, like using
memcmp to compare data instead of an iteration on pkt pointer. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								324986694a 
								
							
								 
							
						 
						
							
							
								
								decode: improve and fix comments.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								24f15fa321 
								
							
								 
							
						 
						
							
							
								
								Don't warn about non enable non existing output module  
							
							 
							
							... 
							
							
							
							This patch modifies output module loading to only trigger alert
message for non existing modules when they are loaded. It also
warn about unified1 removal. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								3944357058 
								
							
								 
							
						 
						
							
							
								
								Remove unified related enum.  
							
							 
							
							... 
							
							
							
							This patch removes the enum related to unified1 output. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								391d813c82 
								
							
								 
							
						 
						
							
							
								
								Remove unified1 output module.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								047fcd6ade 
								
							
								 
							
						 
						
							
							
								
								Add missing case sensitive to insensitive conversions for http_header, http_raw_header, http_method, http_cookie and http_raw_uri with 'nocase' set.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								bde55578d6 
								
							
								 
							
						 
						
							
							
								
								Override HTP IDS personality normalizing the query string to lowercase. Bug  #362 .  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								7ef34b7bcc 
								
							
								 
							
						 
						
							
							
								
								Exlcude DSIZE LT case from setting the 'need payload' mask bit as it can include 0, which means no payload.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								09b5dca343 
								
							
								 
							
						 
						
							
							
								
								Consider signatures with the flags keyword to be packet inspecting only, not stream.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								30d84ab20d 
								
							
								 
							
						 
						
							
							
								
								Unlock flow in StreamTcpSegmentForEach if there is no TCP session.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								9aeadd5696 
								
							
								 
							
						 
						
							
							
								
								prelude: suppress unused variable.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								db17f3de6c 
								
							
								 
							
						 
						
							
							
								
								prelude: add stream segment dump  
							
							 
							
							... 
							
							
							
							This patch should fix  #355 . 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								2073b9db0c 
								
							
								 
							
						 
						
							
							
								
								debuglog: uses state selection system.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								1596241687 
								
							
								 
							
						 
						
							
							
								
								debuglog: fix segment logging.  
							
							 
							
							... 
							
							
							
							StreamSegmentForEach returns the number of segments or < 0 in case
of error. This patch synchronizes debuglog output module with this
behaviour. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								3644e90a2c 
								
							
								 
							
						 
						
							
							
								
								Don't set higher transaction id's in HTTP sessions than we have.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								67cea09911 
								
							
								 
							
						 
						
							
							
								
								Handle failing thread modules that are called by the Pcap file callback.  
							
							 
							
							
							
						 
						
							14 years ago