9417 Commits (97da91dc5ef45c9f8448bf6410343cf60897c603)

 

All Branches   

Search

Author	SHA1	Message	Date
Eric Leblond	97da91dc5e	ebpf: include files in make dist	6 years ago
Victor Julien	b51e4a3959	changelog: update for 4.1.2 release	6 years ago
Victor Julien	8b570c0293	smb: improve request/response mapping ... Only use ssn_id and msg_id for mapping a response to a request. By not using the tree_id it can always be included in the tx.hdr which means it can be logged properly in case of IOCTL and DCERPC.	6 years ago
Travis Green	6f5eb487a1	doc: add missing and fix 404 for --list-keywords	6 years ago
Travis Green	c2adb9e669	doc: added tos keyword ... Redmine issue: https://redmine.openinfosecfoundation.org/issues/2583	6 years ago
Philippe Antoine	7fca771ef4	Fixes other affected tests for smtp pipelining ... Either checking state has pipelining Or removing pipelining from input	6 years ago
Philippe Antoine	447c1042f4	smtp: improve pipelining support ... Fixes #1863	6 years ago
Victor Julien	8357ef3f8f	proto/detect: workaround dns misdetected as dcerpc ... The DCERPC UDP detection would misfire on DNS with transaction ID 0x0400. This would happen as the protocol detection engine gives preference to pattern based detection over probing parsers for performance reasons. This hack/workaround fixes this specific case by still running the probing parser if DCERPC has been detected on UDP. The probing parser result will take precedence. Bug #2736.	6 years ago
Victor Julien	11f3659f64	teredo: be stricter on what to consider valid teredo ... Invalid Teredo can lead to valid DNS traffic (or other UDP traffic) being misdetected as Teredo. This leads to false negatives in the UDP payload inspection. Make the teredo code only consider a packet teredo if the encapsulated data was decoded without any 'invalid' events being set. Bug #2736.	6 years ago
Victor Julien	e30212c5d8	detect: fix crash during startup with malformed yaml ... detect-engine: custom-values: toclient-groups: 200 toserver-groups: 200 Bug #2745	6 years ago
Victor Julien	9dd925a46a	userguide/install: add rust, python-yaml to ubuntu	6 years ago
Victor Julien	4c8f6b2246	offloading: on bsd, disable rxcsum and v6 variants	6 years ago
Victor Julien	fa6b73d1c9	offloading: don't set multiple times per interface ... This could happen with netmap igb0->igb0^ IPS mode.	6 years ago
Victor Julien	d1fa4a35eb	changelog: update for 4.1.1	6 years ago
Victor Julien	ad1945aae4	detect: fix content inspection flags ... Fix generic inspect function content inspection flags so that streaming buffers work correctly.	6 years ago
Victor Julien	394e115036	detect/rawbytes: improve error message plus do minor cleanups	6 years ago
Victor Julien	f336ba3217	detect/file-data: fix enabling http body tracking	6 years ago
Pierre Chifflier	3eade88bd8	Krb5: make TCP probing function less strict, messages can be fragmented	6 years ago
Victor Julien	3eec088d31	detect/parse: error out on unused sticky buffers	6 years ago
Victor Julien	b36e921cf9	detect/prefilter: add closing debug return statement	6 years ago
Victor Julien	1dd81f7346	yaml: add missing eve pcap-file comment	6 years ago
Victor Julien	3a057c5f54	capture: fix mtu plus sign names for non-netmap ... Bug #2502.	6 years ago
Victor Julien	31f81429c2	stats: more accurate interval handling ... In the stats loop sleep for a time period more closely matching the stats.interval setting. Fix an off by one that would make the loop wake up ~1 second early. Bug #2716	6 years ago
Jason Ish	c1238af3e0	check-setup: fix script names for .sh to .py	6 years ago
Jason Ish	56af22803b	travis: update rust version to 1.24.1 and 1.31.0. ... 1.24.1 is now the oldest version we test support for. All major distributions appear to be at this version or new. With the release of 1.31.0 just out, test that as the most recent version.	6 years ago
Jason Ish	d03a5be118	dns json v2 (C) - log rrtype in response ... Redmine issue: https://redmine.openinfosecfoundation.org/issues/2723	6 years ago
Jason Ish	b7083bc3a8	rust/dns/v2 - log rrtype in response ... Redmine issue: https://redmine.openinfosecfoundation.org/issues/2723	6 years ago
Jason Ish	b7a58680db	dns/rust - if let Some over options instead of loop. ... Except in one case where the loop makes more sense for easy break out. Also remove one line of non-conforming debug logging.	6 years ago
Jason Ish	4163d5c360	rust/dns/lua - fix call convention to match C. ... Also, when requesting the query, if the request doesn't exist, return the query from the response. This makes it behave more like C implementation. Redmine issue: https://redmine.openinfosecfoundation.org/issues/2730	6 years ago
Jason Ish	87250da0fc	rust/dns: add v1 dns logging ... Redmine issue: https://redmine.openinfosecfoundation.org/issues/2704	6 years ago
Victor Julien	9d36182b74	unix: fix deadlock in unix runmode on many cores ... Same issue as in 7f8795c756, with the solution now also applied to the unix socket runmode. Bug #2734	6 years ago
Victor Julien	8d2883f3fa	output/tx: fix multi-instance logger output ... Fix transactions not being logged after the first tx logger had logged.	6 years ago
Victor Julien	0e40231189	app-layer: improve transaction cleanup handling ... The app layers with a custom iterator would skip a tx if during the ..Cleanup() pass a transaction was removed. Address this by storing the current index instead of the next index. Also pass in the next "min_tx_id" to be incremented from the last TX. Update loops to do this increment. Also make sure that the min_id is properly updated if the last TX is removed when out of order. Finally add a SMB unittest to test this. Reported by: Ilya Bakhtin	6 years ago
Victor Julien	d34e41068f	app-layer: fix tx tracking updates in tx cleanup ... Fix min_id not getting updated in all cases. Reported by: Ilya Bakhtin	6 years ago
Victor Julien	e62e4bdc49	app-layer: add debug statements to tx cleanup logic	6 years ago
Victor Julien	37203c98a1	unittests/app-layer: add helper to get app tx trackers	6 years ago
jason taylor	fc395eb2c5	userguide: updated hyperscan version reference ... Signed-off-by: jason taylor <jtfas90@gmail.com>	6 years ago
Travis Green	3539ae3041	Updated link for Prelude SIEM ... Updated link for Prelude SIEM to https://www.prelude-siem.org/	6 years ago
Eric Leblond	f3be8eaaf4	detect-depth: remove semi coma from desc ... It was breaking the CSV export.	6 years ago
Eric Leblond	8c1b16e22d	doc: fix some links in list-keywords command	6 years ago
Eric Leblond	24806c2102	suricata.yaml: fix path to XDP doc	6 years ago
Eric Leblond	64df672cf7	util-bpf: workaround OpenBSD old libpcap ... OpenBSD is not using a pcap_compile_* function so we can just comment the code for OpenBSD users.	6 years ago
Eric Leblond	6853683085	af-packet: remove unused field in AFPThreadVars	6 years ago
Eric Leblond	750651a45a	configure.ac: better llc binary detection ... llc is needed to build the ebpf files and current autoconf code was not working properly on Debian.	6 years ago
Eric Leblond	6bfecd6906	af-packet: remove years old todos	6 years ago
Eric Leblond	017acaa465	netmap: use custom BPF compile function	6 years ago
Eric Leblond	28e9e4c85c	af-packet: use the new BPF compilation function	6 years ago
Eric Leblond	3c566e0f89	util-bpf: introduce custom BPF compile functions ... We can't get error from pcap_compile_nopcap() so let's get our own function and output message.	6 years ago
Eric Leblond	e98b5e4946	af-packet: micro optimization ... Use a else if instead of two chained if constructs.	6 years ago
Eric Leblond	9efa4ace69	af-packet: improve error handling ... Stress condition in Suricata could lead to interface to disconnect when it is not necessary. This patch updates the error handling code to try to continue reading when such a case occurs.	6 years ago