35 Commits (96b8100a511b7abeca5a2b801ba26e8a7daef892)

Author	SHA1	Message	Date
Victor Julien	8347aa01fa	app-layer: clean up counters registration	9 years ago
Giuseppe Longo	e6bac998d9	flow: add timeout for local bypass ... This adds a new timeout value for local bypassed state. For user simplication it is called only `bypassed`. The patch also adds a emergency value so we can clean bypassed flows a bit faster.	9 years ago
Eric Leblond	724069626d	flow: downgrade to local bypass if we see packets ... If we see packets for a capture bypassed flow after some times, it means that the capture method is not handling correctly the bypass so it is better to switch to local bypass method.	9 years ago
Victor Julien	aee1f0bb99	flow: simplify timeout logic ... Instead of a single big FlowProto array containing timeouts separately for normal and emergency cases, plus the 'Free' pointer for the protoctx, split up these arrays. An array made of FlowProtoTimeout for just the normal timeouts and an mirror of that for emergency timeouts are used through a pointer that will be set at init and by swapped by the emergency logic. It's swapped back when the emergency is over. The free funcs are moved to their own array. This simplifies the timeout lookup code and shrinks the data that is commonly used.	9 years ago
Victor Julien	3c788a8c17	flowbits: remove unused debugging code	10 years ago
Victor Julien	a0732d3db2	flow: change flow state logic ... A flow has 3 states: NEW, ESTABLISHED and CLOSED. For all protocols except TCP, a flow is in state NEW as long as just one side of the conversation has been seen. When both sides have been observed the state is moved to ESTABLISHED. TCP has a different logic, controlled by the stream engine. Here the TCP state is leading. Until now, when parts of the engine needed to know the flow state, it would invoke a per protocol callback 'GetProtoState'. For TCP this would return the state based on the TcpSession. This patch changes this logic. It introduces an atomic variable in the flow 'flow_state'. It defaults to NEW and is set to ESTABLISHED for non- TCP protocols when we've seen both sides of the conversation. For TCP, the state is updated from the TCP engine directly. The goal is to allow for access to the state without holding the Flow's main mutex lock. This will later allow the Flow Manager(s) to evaluate the Flow w/o interupting it.	11 years ago
Ken Steele	8f1d75039a	Enforce function coding standard ... Functions should be defined as: int foo(void) { } Rather than: int food(void) { } All functions where changed by a script to match this standard.	11 years ago
Victor Julien	fc6ad56944	flow: move FlowGetFlowState ... Move FlowGetFlowState to flow-private.h so that all parts of the flow engine can use it.	12 years ago
Victor Julien	e892d99827	flow: new flow queue: flow_recycle_q ... This queue will be used by the FlowManager to pass timed out flows to another thread that will do the actual cleanup.	12 years ago
Anoop Saldanha	8523cbadcf	Restructured flow_proto mapping enums. ... Moved FLOW_PROTO_DEFAULT down the enum list.	12 years ago
Victor Julien	db24258acf	Undo changes from 88b8f15663. Atomic stack implementation had a-b-a problem.	14 years ago
Victor Julien	88b8f15663	Add atomic stack implementation. Convert flow spare queue to use this stack. Remove now unused flow-queue code.	14 years ago
Victor Julien	0150e66ede	flow engine: improve scalability ... Major redesign of the flow engine. Remove the flow queues that turned out to be major choke points when using many threads. Flow manager now walks the hash table directly. Simplify the way we get a new flow in case of emergency.	14 years ago
Victor Julien	9baa16af63	Convert flow memcap to u64. Bug #332.	14 years ago
Eric Leblond	674b0bfae7	flow: Add basic SCTP support ... This patch adds a basic flow support to SCTP. SCTP specificities like the verification tag are not taken into account.	15 years ago
Victor Julien	87345e5c60	Switch flow memuse counter to the atomic api.	16 years ago
Victor Julien	d470e11352	Disable flowbits stats.	16 years ago
William Metcalf	2eef905c07	GPL and Copyright header updates.	16 years ago
William Metcalf	ce01927515	Import of GPLv2 Header 050410	16 years ago
Victor Julien	74dfbc0c49	Move flow flags to flow.h	16 years ago
Victor Julien	e3552a8e3f	Add more comments to detect and flow structures.	16 years ago
Pablo Rincon	e26833be3f	Changing mutex/spinlocks/conditions naming types	16 years ago
Pablo Rincon	769022f4be	Adding support for Mac OS X, FreeBSD, centrailizing mutex/spins/conditions in a macro API, and some unittests	16 years ago
Gurvinder Singh	71da019734	some minor changes	16 years ago
Gurvinder Singh	bbb385422d	function to set packet flags	16 years ago
Gurvinder Singh	cc0b4f7181	initial version to support detection byepass	16 years ago
Victor Julien	b102ea2123	Big update: ... - Implement "closing" state in flow. - Add protocol specific timeouts. - Lots of stream tracking updates, fixing a lot of out of window issues. - Stream reassembly fixes. - Implement a new IDS runmode with 4 stream and detect threads. - Added a BUG_ON macro that aborts the engine if the expression is true. - Better balance the flow queue handler for traffic that doesn't have flow (like icmp currently). - Simplify application level protocol in the Tcp Session. - Add some debugging memory counters.	16 years ago
Gurvinder Singh	9dcf6e2de2	handle the FLOW_STATE_CLOSED	16 years ago
Gurvinder Singh	e3b76dcaad	efficient protocol specific timeouts	16 years ago
Gurvinder Singh	b46d9dc2b4	part2 and part3.1 of timout task	16 years ago
Gurvinder Singh	0e64fa78b4	Protocol Specific Timeouts	16 years ago
Brian Rectanus	fa5939ca91	64 bit cleanup part2	17 years ago
Victor Julien	ff4b5a5db7	Add support for flowbits.	17 years ago
Victor Julien	657be002d1	Big detection engine update: scan improvements, b2g/b3g updates, bloom fixes, iponly detection implementation, dsize/flow grouping.	17 years ago
Victor Julien	bab4b62376	Initial add of the files.	17 years ago