1568 Commits (87f88867f4ee5f855a92bcfefa4bdffcbc79a23f)

 

All Branches   

Search

Author	SHA1	Message	Date
Pablo Rincon	1ae36b9a6a	Adding rate_filter support for threshold.config, multiline support and unittests	16 years ago
Victor Julien	ca7f54de25	Make sure ICMP unreach packets are not inspected against the flow sgh as it's for the original protocol, not for the ICMP packet. Fixes #174.	16 years ago
Victor Julien	b8fec77f37	Fix tcp connections that are reset (RST packet) not always inspecting the reassembled stream. Update transaction id code to make sure both directions of a transaction are inspected before incrementing the inspect_id.	16 years ago
Victor Julien	26f69aa3a6	Bump version to 0.9.2.	16 years ago
Victor Julien	e46b72758a	Small decode-event code cleanup.	16 years ago
Victor Julien	cdc9570f0e	Have the detect.alerts counter count actual alerts.	16 years ago
Anoop Saldanha	bbb5bf5c51	allow counters clubbing for detect TM	16 years ago
Victor Julien	cb94748dab	Add missing include resulting in a compiler warning.	16 years ago
William Metcalf	0e4235cc94	FLOW_DESTROY added to clean-up UT's that init flow	16 years ago
William Metcalf	9f0bf35cfd	Set -std=gnu99 CFLAG always and Use -march=native by default if supported by installed version of gcc	16 years ago
Victor Julien	2f29b8a724	Improve detection of app layer, making sure we only handle app layer on 'established' packets. Should really fix #166.	16 years ago
Victor Julien	37442a8a84	Prefilter signatures before fully scanning them.	16 years ago
Anoop Saldanha	60668fd01d	Reset the flags used during stateful detection in ContinueDetection(). Made the tests more descriptive as well	16 years ago
Anoop Saldanha	bb8937477d	dce tests to check SigMatchSignatures()'s working against new dce transactions	16 years ago
Victor Julien	d6709b0961	Fix a segv caused by invalidly accessing the smsg_pmq array.	16 years ago
Victor Julien	8cea3779fa	Move dce payload inspection to stateful detection engine.	16 years ago
Anoop Saldanha	015385c6bd	changes to the dce parser stub data processed var. changed to stub data fresh var to indicate if the stub is fresh or not	16 years ago
Anoop Saldanha	45ea0d914e	dce stub content keywords support using dcepayload.c support for all dce related content keywords	16 years ago
Anoop Saldanha	98433f407c	dce rpc stub data held in separate buffers for request and response pdus	16 years ago
Victor Julien	31261e7583	Improve B2g performance by merging pattern array and hash.	16 years ago
Victor Julien	83b2c8abdb	Improve stateful uri detection code.	16 years ago
Victor Julien	9dd753b5f3	Scan uricontent mpm on demand.	16 years ago
Victor Julien	dd88e46f0c	Fix detect engine state unittest, add another.	16 years ago
Victor Julien	e8fce5f7fa	Convert uricontent scanning to use the detect engine state.	16 years ago
Jason MacLulich	835630efbd	Add initial support for reading packets from a DAG card, we only support reading from a single stream at this time. ... Use the --dag <dagname> cmd line option to specify from which DAG card to read pkts from. Issue at the moment with pkts being ejected during shutdown -- at the moment we ignore any packets that are not of link type Ethernet.	16 years ago
Victor Julien	49d68169ea	Allow the user to disable setting cpu affinity and allow configuring the number of detect threads relative to the number of CPU's/CPU cores.	16 years ago
Victor Julien	cb0bb668eb	Add support for retrieving float and double variables from the configuration.	16 years ago
Victor Julien	b60d2c4345	Fix flags mixup issue in the app layer.	16 years ago
Victor Julien	ba12f3c109	Applayer to flow fixes and cleanups.	16 years ago
Pablo Rincon	8cc525c939	UDP support at AppLayer message handling	16 years ago
William Metcalf	e07e9e16ae	Updates to allow for disabling options based on Pierre Chifflier's patch	16 years ago
Pierre Chifflier	4e84ffe2ea	Fix autoconf code for Prelude option (Fix: #175) ... Third and forth arguments of AC_ARG_ENABLE are the actions to be done if option was specified (respect. not given), NOT if option is true (false). Signed-off-by: Pierre Chifflier <chifflier@edenwall.com>	16 years ago
Ondrej Slanina	6bf7d76005	added possibility to run suricata as WIN32 service	16 years ago
William Metcalf	cc76aa4bc6	properly init flows inside of unit-tests caused lock-up when falling back to using mutex locks	16 years ago
Victor Julien	a24f288074	Moving the stream content scanning to have it's own mpm ctx.	16 years ago
Victor Julien	9a08d6c11c	Fixes to stream pattern matching.	16 years ago
Victor Julien	a0c1209a44	Inspect the reassembled stream together with the packet payload in the same direction.	16 years ago
Victor Julien	9f95ab7441	Make sure a stream that has a failing app layer inspection module no longer stops reassembly, but only app layer inspection. This way we can continue to inspect the reassembled stream.	16 years ago
Victor Julien	81f2499834	Store stream msgs processed by the app layer in the tcp session so they can be inspected by the detection module as well. The detection module returns them to the pool.	16 years ago
Victor Julien	3005297af2	Check for being properly setup before activating a thread. Fixes a potential although unlikely null-dereference.	16 years ago
Victor Julien	6c6e6321fc	Fix HTTP HEAD detection code.	16 years ago
Victor Julien	fdd0f3939e	Reduce size of event bit array in the packet structure.	16 years ago
Victor Julien	c26434fef1	Move flow use cnt to atomic and outside of the flow mutex protection.	16 years ago
Victor Julien	87345e5c60	Switch flow memuse counter to the atomic api.	16 years ago
Victor Julien	749fc2613d	Add subtracktion wrapper to the atomic api.	16 years ago
Victor Julien	3484e2abde	Fix flow engine memory handling.	16 years ago
Victor Julien	4dd0169499	Fix detection_filter issue.	16 years ago
Victor Julien	4c3e17d4ab	Fix thresholding issues.	16 years ago
Ondrej Slanina	79443b1991	added INT and TERM signals on WIN32	16 years ago
Pablo Rincon	b491ef2be0	Removing FlowAllocDirect since it's not needed anymore	16 years ago