Victor Julien
8781e9352a
doc/userguide: add documentation for SMTP frames
1 year ago
Juliana Fajardini
aeb200e001
devguide: highlight commit message example
...
Although we have the example for a commit message in our Code Submission
Process sub-chapter, seems that people still oversee it a lot. It was
suggested that we put it in a note-box, to make it more visible.
1 year ago
Jason Ish
3eb8c728fd
doc: update lua sandbox docs for allowed packages/functions
1 year ago
Jason Ish
bc011f2205
lua: use rust crate to vendor (bundle) lua
...
Remove lua-dev(el) from all CI tests.
1 year ago
Jo Johnson
ba6a976e06
doc: Initial doc for lua sandbox
1 year ago
Jo Johnson
712496bb3f
lua: Remove luajit support
...
lua 5.4 support is not available in luajit
Ticket: #4776
1 year ago
Jo Johnson
586c92d9d5
lua: require lua 5.4
...
github-ci: Disable lua on debian 10 as it doesn't have Lua 5.4.
Ticket: #4776
1 year ago
jason taylor
47d6c3a3ab
doc: add source verification docs
...
Ticket: #6908
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
Shivani Bhardwaj
719fda3967
doc: add description about tls.subjectaltname
...
Feature 5234
1 year ago
Philippe Antoine
2c305ba37e
pop3: protocol detection
...
Ticket: #6366
1 year ago
Philippe Antoine
7582b18a9f
http: configures libhtp to allow spaces in uri
...
Ticket: #2881
1 year ago
Giuseppe Longo
8a171c9d74
doc: add arp changes
1 year ago
Philippe Antoine
fcdd7f000a
detect: add options to app-layer-protocol keyword
...
Ticket: 4921
app-layer-protocol keyword accept an optional mode to precise
which protocol we want to match: toclient, toserver, final,
or original
1 year ago
Philippe Antoine
715bf048ee
frames: rust API makes tx_id explicit
...
And set it right for SIP and websocket,
so that relevant tx app-layer metadata gets logged.
Ticket: 6973
1 year ago
Shivani Bhardwaj
6d92596548
doc: add note about fast_pattern w base64_data
...
Bug 5220
1 year ago
jason taylor
abb74245cc
doc: update normalization notes
...
Ticket: #6781
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
5dacf4d92b
doc: add http.connection ref and fix location
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
Victor Julien
fcca5c7514
detect/iprep: update doc about 0 value
...
A value of 0 was already allowed by the rule parser, but didn't
actually work.
Bug: #6834 .
1 year ago
jason taylor
aa919f8081
doc: update flowbits information
...
Ticket: #6991
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
Giuseppe Longo
4f1e71bb4e
doc: add sdp update
1 year ago
Juliana Fajardini
bb59124063
yaml: unify 0 stats counter config option terms
...
When we added feature #5976 (72146b969
), we overlook that we also have
a config stats option for the human-readable stats logs to output
0 counters.
Due to not seeing this before, we now have two different setting names
for basically the same thing, but in different logs:
- zero-valued-counters for EVE
- null-values for stats.log
This ensures we use the same terminology, and change the recently added
one to `null-values`, as this one has been around for longer.
Task #6962
1 year ago
Philippe Antoine
44b6aa5e4b
app-layer: websockets protocol support
...
Ticket: 2695
1 year ago
Sascha Steinbiss
120313f4da
ja4: implement for TLS and QUIC
...
Ticket: OISF#6379
1 year ago
Jeff Lucovsky
7a5a1e2560
doc: Describe noalert keyword
...
Issue: 6685
1 year ago
Juliana Fajardini
72146b969c
eve/stats: allow hiding counters whose valued is 0
...
Some stats can be quite verbose if logging all zero valued-counters.
This allows users to disable logging such counters. Default is still
true, as that's the expected behavior for the engine.
Task #5976
1 year ago
Juliana Fajardini
514e8b8b04
userguide: document exception policy stats
...
Configuration options and defaults, existing counters etc.
Related to
Task #5816
1 year ago
Juliana Fajardini
94b111283d
userguide: highlight exception policy effects
...
Some exception policies can only be applied to entire flows or
individual packets, for some exception scenarios. Make this easier to
read, in the documentation.
Related to
Task #5816
1 year ago
jason taylor
7de16809ef
doc: update http keyword listing order
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
8b3db3c3b5
doc: update file.name keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
49dba7bb94
doc: update file.data keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
bee3aa9709
doc: update http.response_header keyword
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
dcb548106e
doc: update http.request_header keyword
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
3f5d228b9e
doc: update http.host http.host.raw keyword
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
739dfe5e5e
doc: update http.location keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
9ddd8cf9e0
doc: update http.server keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
3af98f3b92
doc: update http.response_body keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
64760e2e75
doc: update http.response_line keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
566bc0d39c
doc: update http.stat_msg keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
271321249f
doc: update http.stat_code keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
71d8488cb5
doc: update http.request_body keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
c2783e9391
doc: update http.header_names keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
5eadbc2ff0
doc: update http.start keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
7e65554462
doc: update http.referer keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
876dfb99ca
doc: update http.content_len keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
8ff06c1bc0
doc: update http.content_type keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
b2854486dd
doc: update http.connection keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
75436dff9c
doc: update http.accept_lang keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
f6375e487e
doc: update http.accept_enc keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
7e3288f5a7
doc: update http keyword normalization notes
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago
jason taylor
9e87d89d2e
doc: update http.accept keyword information
...
Ticket: 3025
Signed-off-by: jason taylor <jtfas90@gmail.com>
1 year ago