Juliana Fajardini
72146b969c
eve/stats: allow hiding counters whose valued is 0
...
Some stats can be quite verbose if logging all zero valued-counters.
This allows users to disable logging such counters. Default is still
true, as that's the expected behavior for the engine.
Task #5976
11 months ago
Lukas Sismis
10590e6d94
dpdk: support 52 byte long key on ice (E810) cards
11 months ago
Lukas Sismis
d4085fceb6
dpdk: enlarge key length to 52 bytes
11 months ago
Philippe Antoine
365a66ac1c
ci: clean some disk space to run CIFuzz again
11 months ago
Jason Ish
1657b6ff3c
cargo: add description and license
...
Required for publishing to crates.io.
11 months ago
Jason Ish
b9127e8b96
automake/rust: remove path.lib
...
Remove the path.lib parameter that is substituted into the output
Cargo.toml by autoconf. Instead, as part of the build, "cd" into the
source directory. We already set the Rust target directory to the
external build directory.
This makes the Cargo.toml more generic, and in a format suitable for
publishing to crates.io. It also makes it easier to pull in external
crates without needing to patch up their Cargo.toml, for example, it
might make pulling libhtp-rs easier.
11 months ago
Victor Julien
172775ed84
alert/syslog: fetch ipproto once
11 months ago
Victor Julien
7ad1a6b21b
alert/syslog: stringify addresses outside alert loop
11 months ago
Victor Julien
291250f705
alert/syslog: minor code cleanups
11 months ago
Victor Julien
285fda5de8
alert/syslog: only hold lock for syslog call
11 months ago
Juliana Fajardini
172b55c547
log/stats: allow longer counter names
...
With the addition of exception policy stats counters, the human readable
version of the sats log was mis-aligned, when counters for per-app-proto
were enabled.
Width change made large enough to accomodate a counter as long as
"app_layer.error.bittorrent-dht.exception_policy.pass_packet" which
could be valid.
Task #5816
11 months ago
Juliana Fajardini
0f6dbf650e
yaml: minor wording fix on Suricata package version
11 months ago
Juliana Fajardini
8defee93b2
yaml: explicitly mention exception policy in conf
...
While our documentation indicated what were the possible configuration
settings for exception policies, our yaml only explicitly mentioned
exception policy for the master switch. Clearly indicate which config
settings are about exception policies.
Related to
Task #5816
11 months ago
Juliana Fajardini
514e8b8b04
userguide: document exception policy stats
...
Configuration options and defaults, existing counters etc.
Related to
Task #5816
11 months ago
Juliana Fajardini
94b111283d
userguide: highlight exception policy effects
...
Some exception policies can only be applied to entire flows or
individual packets, for some exception scenarios. Make this easier to
read, in the documentation.
Related to
Task #5816
11 months ago
Juliana Fajardini
caf590d51f
stream/midstream: add counter for exception policy
...
Add stats counters for when there is an exception policy applied in case
of a session picked up midstream.
Task #5816
11 months ago
Juliana Fajardini
fd9a20ffcf
stream/reassemble: add exception policy counters
...
Add stats counters for exception policies applied in case of memcap hit
during stream reassembly.
Task #5816
11 months ago
Juliana Fajardini
2dee3772bf
stream/tcp: add ssnmemcap exception policy counter
...
Add stats counters for exception policies applied in case a stream
session memcap is hit.
Task #5816
11 months ago
Juliana Fajardini
a71ace8575
applayer: add stats counters for exception errors
...
Add stats counters for exception policy are applied for app-layer errors
Part of
Task #5816
11 months ago
Juliana Fajardini
485c0e1d9a
defrag: add exception policy memcap stats counters
...
Add defrag memcap stats counter.
Task #5816
11 months ago
Juliana Fajardini
657419b53e
decode/flow: add exception policy stats counters
...
We will register stats counters for all policies, even though for now
Suri only uses one possible configuration policy at a time. The idea is
that this could change in the near future, so we want to have this
ready.
Task #5816
11 months ago
Juliana Fajardini
c2c8cdb78a
exceptions: make types and ToStr fns more accessible
...
Decode file needed ExceptionPolicy types and exception-policy file
needed Decode types, rendering some works quite difficult to work
around.
ExceptionPolicyToStr is useful for registering exception policy
counters, so make that public.
Part of
Task #5816
11 months ago
Juliana Fajardini
ce001d8eae
schema: apply clang formatting changes
11 months ago
Juliana Fajardini
112f5cc0ad
app-layer/htp: clean up unused code in unittests
...
Remove unit test that was disabled and printf statements that were
replaced but not deleted, both in 48cf0585fb
.
11 months ago
Juliana Fajardini
cea917c38c
app-layer: fix minor typo and formatting in LogInfo
...
Also update copyright years.
11 months ago
Daniel Olatunji
d9148d1023
detect/analyzer: add more details for tcp_seq
...
Log the matched Sequence number of a packet
Issue: 6353
11 months ago
Lukas Sismis
e54084fa87
dpdk: implement DPDK SW tests
...
Implement Github CI tests to run DPDK Suri with the minimal
configuration to verify that Suricata can start in both IDS
and IPS configuration.
11 months ago
Lukas Sismis
28ac3c2097
dpdk: fix thread slot assignment
...
Commit 5592ec07
introduced a bug where ptv->slot was
assigned with the current one instead of the next one
in the list. This caused a Suricata crash in the DPDK mode.
Ticket: 6877
11 months ago
Lukas Sismis
3fdcf7fbe4
dpdk: make static variables thread_local
...
Per a newly obtained knowledge, static variables in functions
are not thread-safe and as a result thread_local attribute was
added.
11 months ago
Lukas Sismis
78313100a4
ci: bump up the DPDK versions
11 months ago
jason taylor
7de16809ef
doc: update http keyword listing order
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
8b3db3c3b5
doc: update file.name keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
49dba7bb94
doc: update file.data keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
bee3aa9709
doc: update http.response_header keyword
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
dcb548106e
doc: update http.request_header keyword
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
3f5d228b9e
doc: update http.host http.host.raw keyword
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
739dfe5e5e
doc: update http.location keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
9ddd8cf9e0
doc: update http.server keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
3af98f3b92
doc: update http.response_body keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
64760e2e75
doc: update http.response_line keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
566bc0d39c
doc: update http.stat_msg keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
271321249f
doc: update http.stat_code keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
71d8488cb5
doc: update http.request_body keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
c2783e9391
doc: update http.header_names keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
5eadbc2ff0
doc: update http.start keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
7e65554462
doc: update http.referer keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
876dfb99ca
doc: update http.content_len keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
8ff06c1bc0
doc: update http.content_type keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
b2854486dd
doc: update http.connection keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago
jason taylor
75436dff9c
doc: update http.accept_lang keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
11 months ago