2505 Commits (818656524003c4501401709aecffb19c28ca588c)

 

All Branches   

Search

Author	SHA1	Message	Date
Anoop Saldanha	727a950e39	Move time elapsed right after we finish all packet processing	14 years ago
Anoop Saldanha	762ac0fe31	update conditional in shutdown forced reassembly to check for flows that required flow reassemly	14 years ago
Anoop Saldanha	15359dc47e	Slot structure now holds the TV it belongs to	14 years ago
Anoop Saldanha	9552e6f696	Shutdown flow timeout reassembly now supports ipv6	14 years ago
Anoop Saldanha	54f8d56f48	Packet inspection keywords modified to not inspect pseudo packet	14 years ago
Anoop Saldanha	c365bafbf6	We now inspect timed out streams + streams not processed as yet, at engine shutdown	14 years ago
Anoop Saldanha	56432cee16	Single thread kill also checks if inq is cleared before shutting down	14 years ago
Anoop Saldanha	8fa923c5ac	- All threads also check to see if their inq is cleared before they shutdown.	14 years ago
Anoop Saldanha	a844eecb0e	- Updated all runmodes to use synchronization points, right before each thread(slot function) tries to de-init the thread. - Main thread now first disables receive thread(s) before it kills receive and rest of the threads.	14 years ago
Anoop Saldanha	e567c2d002	Introduce master-slave synchronization support for ThreadVars	14 years ago
Anoop Saldanha	94c5ecb069	introduce inline function version of TmThreadsSlotProcessPkt macro. Retain the macro as well	14 years ago
Anoop Saldanha	fd6faac196	update TmThreadsSlotProcessPkt with better error handling + post pq processing	14 years ago
Anoop Saldanha	3fb65f5ec2	fix local var usage for slot in tm-threads.c	14 years ago
Anoop Saldanha	acbcee69ff	support post pq packet processing in var slot	14 years ago
Victor Julien	cc4e89fbe1	Profiling: convert all packet profile counters/variables to u64. Improve output for larger numbers.	14 years ago
Eileen Donlon	e8c51e09e8	fixed bug 291 corrected reference to reference-config-file	14 years ago
Eileen Donlon	89599d3b9b	fixed bug 288; corrected config boolean parsing problems	14 years ago
Eric Leblond	de1d002ea6	Return OK when leaving cleanly.	14 years ago
Eric Leblond	2631e5f14f	pcap: get rid of old API.	14 years ago
Eric Leblond	6f975d3248	pcap: add "autofp" runmode ... This patch adds "autofp" runmode. This runmode supports multiple devices and uses the new CPU affinity system.	14 years ago
Eric Leblond	effa295489	pcap: add "single" runmode ... This patch adds support for the "single" mode to the pcap live mode.	14 years ago
Victor Julien	e13181496c	ip-only: added support for matching on ports.	14 years ago
Victor Julien	3d396e8b1e	Update PCRE JIT code to support official JIT implementation in pcre-8.20-RC1.	14 years ago
Victor Julien	751a77a9be	Make sure stream/engine-event signatures are recognized as such.	14 years ago
Victor Julien	c590bba4a4	Undo tunnel reference counting using atomic operations. Revert to mutex based code.	14 years ago
Victor Julien	63f834d9a7	Add profiling to various HTTP buffer MPM calls.	14 years ago
Victor Julien	2675879ff1	Engine and stream events only rules can are deonly compat as well.	14 years ago
Eric Leblond	bd7ac3eaa6	PrintInet: fix compilation on FreeBSD	14 years ago
Eric Leblond	5656e34459	Fix compilation on FreeBSD 8.2 ... FreeBSD has a recent version of autotools which induces some issues. This patch fixes it by improving headers detection code in configure.in.	14 years ago
Anoop Saldanha	3801e00426	fix compliation warnings from runmode-af-packet.c	14 years ago
Victor Julien	baddfcaa1a	Extend packet profiling to other thread 'slot' functions.	14 years ago
Victor Julien	3693a7a9ee	Profiling: add accounting for several detection phases.	14 years ago
Victor Julien	e8e392fb1f	Profiling: add per packet accounting of how much ticks are spend in protocol detection.	14 years ago
Eric Leblond	7425bf5ca6	Rename some decode event structure and macro. ... This patch renames DECODER_SET_EVENT, DECODER_ISSET_EVENT and some other structures to ENGINE equivalent to take into account the fact the event list is now related to all engines and not only to decoder.	14 years ago
Eric Leblond	5bbd8fe910	Add reference to events sig files in suricata YAML config.	14 years ago
Eric Leblond	552c6731b2	Add signature file for stream events. ... This patch adds a rules/stream-events.rules file which contains alert related to all stream events.	14 years ago
Eric Leblond	de65b11c42	decode signature optimisation requires different treatment ... Decode signature are using the fact that no proto is set on packet to increase the matching speed. This is not the case of stream and other engine events. Thus a difference needs to be made.	14 years ago
Eric Leblond	3f153fb0da	Add 'stream-event' keyword. ... This patch adds an alias to the 'engine-event' keyword. It is now possible to access to the stream events via the 'stream-event' keyword. A simple transformation is done: stream-event:reassembly_segment_before_base_seq is a shortcut for: engine-event:stream.reassembly_segment_before_base_seq	14 years ago
Eric Leblond	eb0d4e4d8b	Add stream events support to 'engine-event' keyword ... This patch adds the list of stream events (with associated keywords) to the list of events that can be treated by 'engine-event'.	14 years ago
Eric Leblond	e3a6d8955e	Introduce engine-event keyword ... This patch renames the 'decode-event' keyword to 'engine-event' and keep it for backword compatibility of rulesets. All *DecodeEvent* references in the code are replaced by EngineEvent version.	14 years ago
Eric Leblond	2ac8755382	Rename detect-decode-event to detect-engine-event ... This patch does a simple renaming of detect-decode-event file to the more global detect-engine-event name.	14 years ago
Victor Julien	21f387d2c7	profiling: fix stream ticks miscalculation on stream end pseudo packets.	14 years ago
Eric Leblond	ff6365dd33	af-packet: switch to pcktacqloop API. ... This patch gets rid of the old API and brings some optimisation by reordering structure and optimisinf an error test.	14 years ago
Eric Leblond	834c91eece	af-packet: add AFP to per packet performance system.	14 years ago
Eric Leblond	fb4be6199f	af-packet: change option name ... This patch changes the option name. af-packet long option is now used instead of -a to mimic pfring behaviour. This patch improves the standard parsing of the command line. Running suricata -c suricata.yaml --af-packet will start a suricata running in AF_PACKET mode listening on all interfaces defined in the suricata.yaml configuration file. The traditionnal syntax: suricata -c suricata.yaml --af-packet=ppp0 will start a suricata listening on ppp0 only.	14 years ago
Eric Leblond	e253da092c	device: Add function to build interface list from config ... This patch adds a new function which build the list of interfaces to use by parsing the configuration file. This is using the new format and thus only af-packet can benefit of this feature.	14 years ago
Eric Leblond	df7dbe36b6	af-packet: Add option to disable promiscuous mode ... This patch adds an option to suricata.yaml to be able to disable the switch of the interface into promiscuous mode.	14 years ago
Eric Leblond	fbca1a4e6b	af-packet: multi interface support ... This patch adds multi interface support to AF_PACKET. A structure is used at thread creation to give all needed information to the input module. Parsing of the options is done in runmode preparation through a dedicated function which return the configuration in a structure usable by thread creation.	14 years ago
Eric Leblond	18c6503a08	af-packet: change configuration format for multi interface	14 years ago
Eric Leblond	dc667af1a1	conf: Introduce new function to input configuration. ... The input modules are needing a per interface configuration. This implies some new operations to be able to parse easily te configuration. The syntax of the configuration file is for example: af-packet: - interface: eth0 threads: 2 - interface: eth1 threads: 3 We need a way to express get a configuration variable for interface[eth0]. This is by using ConfNodeLookupKeyValue() to get the matching node. And after that value can be fetch by using ConfGetChildValue*() functions.	14 years ago