1199 Commits (969739d06791057d2b1fa8abe7ad19cf96b26d00)

Author	SHA1	Message	Date
Philippe Antoine	969739d067	detect: http2.errorcode is now a generic integer ... Ticket: 7889	1 month ago
Philippe Antoine	401b2fcae6	detect: http2.frametype is now a generic integer ... Ticket: 7889	1 month ago
Jeff Lucovsky	16d124cfda	doc/output: Highlight ethertype value change ... Issue: 7855 Highlight the change to how ether_type values are displayed. Previously, they were displayed in network order as a decimal value. They are now displayed in host order as a decimal value.	1 month ago
Jason Ish	ced0c2c466	doc: upgrade notes for changes to ike output	1 month ago
Victor Julien	48972d544c	doc/userguide: link to protocol details from transactional rules	2 months ago
Victor Julien	480e664b4c	doc/userguide: add xbits tx scope support ... Ticket #7680.	2 months ago
Victor Julien	a1c4167d94	doc/userguide: add initial protocols overview ... Explain per protocol mechanics for rule matching.	2 months ago
Victor Julien	7034a17d1d	doc/devguide: remove WIP mention of files in txs ... Work has been completed, so comment is no longer accurate.	2 months ago
Victor Julien	e2a5bc058c	doc/userguide: fix DCERPC headings	2 months ago
Victor Julien	be5c83ed53	doc/userguide: add rule hooks to protocol doc ... Ticket #7662.	2 months ago
Victor Julien	91f258e2bc	doc/userguide: add missing app-layer protocols	2 months ago
Victor Julien	2623e67a80	doc/userguide: add missing rule protocols	2 months ago
Philippe Antoine	3641b4eda1	detect/nfs: move nfs_procedure to rust ... Make it able to use strings on the way Ticket: 6723	2 months ago
Philippe Antoine	9869fb776b	detect/snmp: pdu_type keyword now accepts strings ... Ticket: 6723	2 months ago
Philippe Antoine	0553dfa814	detect/krb5: move krb5_msg_type to rust ... Makes it a generic u32 on the way Unit tests are covered by SV tests Ticket: 6723	2 months ago
Philippe Antoine	da486af881	detect: list-keywords cli shows integers ... Ticket: 7875	2 months ago
Philippe Antoine	b298bce0e7	detect: list-keywords cli shows multi-buffers ... Ticket: 7571	2 months ago
Andreas Dolp	375b5dd306	doc: fix typo /var/run/suricata in file permissions docs.	2 months ago
Andreas Dolp	cc590b54c7	doc: fix typo and missing newline in rules/ssh_keywords.	2 months ago
Andreas Dolp	228abb7da0	doc: fix doc syntax error in rate_filter example.	2 months ago
Juliana Fajardini	21b27597d6	doc/rules/internals: minor fixes ... Fix typo and add a reference about the classtype keyword effect. Related to Task #5449	2 months ago
Fupeng Zhao	e79d735374	decode/etag: ETag 802.1BR decoder ... Ticket: #3953.	2 months ago
Philippe Antoine	cb9ab951b9	detect/integers: subslice for multi-integers	2 months ago
Philippe Antoine	82f0e725a2	detect/integers: index or_absent and or_oob ... To match if array is empty, or index is out of bounds	2 months ago
Philippe Antoine	1480cf47ab	detect/integers: nb index to match a specific number of times ... For example dns.rrtype: !A,nb>3 will match if we have more than 3 dns records which are not A	2 months ago
Philippe Antoine	6f848eeaaf	detect/integers: all1 index to match only on non-empty arrays	2 months ago
Philippe Antoine	5add185f22	http2/detect: http2.window can now use index ... Ticket: 7480	2 months ago
Philippe Antoine	83868778b9	http2/detect: http2.priority can now use index ... Ticket: 7480	2 months ago
Philippe Antoine	9fc407fd75	mqtt/detect: mqtt.type can now use index ... Ticket: 7480	2 months ago
Philippe Antoine	dad424d74a	doc: multi-integers section for rules ... Ticket: 7480 Describing the usage of index	2 months ago
Fupeng Zhao	4f68cb026f	decoder/vxlan: add configurable reserved bits validation for VXLAN ... Add support for two VXLAN reserved bits check modes: - strict: validate all reserved bits for standard VXLAN format - permissive: skip all reserved bits validation (allows extensions) Configuration added to suricata.yaml.in with 'strict' as default. Includes comprehensive unit tests and documentation updates. Ticket: 7753	2 months ago
Alice Akaki	8e0b0ef35f	detect: add email.body_md5 keyword ... email.body_md5 matches on md5 hash generated from email body This keyword maps to the EVE field email.body_md5 It is a sticky buffer Supports prefiltering Ticket: #7587	2 months ago
Victor Julien	46203de0e9	doc: adjust for master to main rename	2 months ago
Victor Julien	e62eb00459	doc/userguide: add ips chapter; add concept ... Move setup guides into the new chapter as well. Explain `stream.inline` logic. Ticket: #5513. Ticket: #6284.	2 months ago
Philippe Antoine	9146fc8957	doc: upgrade note about keyword tls.cert_subject ... Following commit 5379b52af2 rules that use multiple times the keyword tls.cert_subject will result in Warning: detect: duplicate instance for tls.cert_subject These rules likely meant to use a multi-buffer which is not the case for tls.cert_subject (even if it was documented so). Ticket: 7890 This is put in a new section of upgrade notes for upgrading to 8.0.1	2 months ago
Juliana Fajardini	27e165f760	doc/rules/index: keep rule types doc near the end ... As this chapter is more meta than about rule keywords, keep it by the end of the index, to have some semantic separation from the other sections.	2 months ago
Juliana Fajardini	d5810a42e1	userguide: document how suricata processes rules ... Added a page that explains how rules are prioritized by Suri, as well as what main different types of inspection happen and what elements are involved when ordering rules. Task #5449	2 months ago
Shivani Bhardwaj	b21f737aee	doc: add doc on internals of inspection of raw data ... Explain briefly the internals of inspection of raw data in the following order: - Stream Engine - Stream reassembly - Role of Detection Engine and Applayer Parsers - High level communication between Stream and Detection Engine - Relevant suricata.yaml settings alongwith some diagrams. Ticket 4351	2 months ago
Shivani Bhardwaj	9ed5ac7669	doc: make firewall table names consistent	2 months ago
Shivani Bhardwaj	7fec1883cd	doc: add more info to firewall design ... Add information about: - available tables, default policies and rule ordering - Packet layer and applayer tables and hooks - engine analysis output - commandline options available - how to load firewall rules Also, reorganize sections and content to assist the definitions.	2 months ago
Jeff Lucovsky	17e7387ff4	doc/fileinfo: Document fileinfo context/usage ... Issue: 6498	2 months ago
Thomas Winter	0b2dfa2b68	doc: Add upgrade note for ppp changes	2 months ago
Philippe Antoine	0026019dcf	doc: complete list of multi-buffers ... Ticket: 7867	2 months ago
Philippe Antoine	646c78269a	doc/devguide: section with conceptualized steps for adding app-layer ... Ticket: 6840	3 months ago
Tommy Wang	fc6b96fb85	doc/lualib: fix wrong tuple section markdown in flowlib ... Sections had wrong levels due to wrong markdown.	3 months ago
Tommy Wang	a10053e62c	doc/lualib: fix flow timestamps return value order ... Task #7854	3 months ago
Philippe Antoine	d0a513df6a	detect/integers: support kibibyte unit ... Ticket: 7869	3 months ago
Philippe Antoine	be9858d3aa	detect/integers: document usage of units ... Ticket: 7190	3 months ago
Theo Buehler	315844ccd8	docs: fix deprecated inclusion of rtd theme path ... Since userguide/conf.py uses the deprecated get_html_theme_path(), sphinx emits a warning which breaks the build as warnings are treated as errors. Issue: 7859	3 months ago
Juliana Fajardini	ec1da6fd3a	doc/exceptions: fix wrong section markdown ... Sections had wrong levels due to wrong markdown.	3 months ago