1293 Commits (9d114eaffbb6fb88c8aa40c18d5594d29a56364e)

Author	SHA1	Message	Date
Victor Julien	b657705d8c	Fix pcap file mode not shutting down on ctrl-c	16 years ago
Victor Julien	dff6795df5	Detect cleanups.	16 years ago
Victor Julien	8e7b147a23	Fix a endless loop condition introduced by the threshold cleanup.	16 years ago
Victor Julien	d470e11352	Disable flowbits stats.	16 years ago
Victor Julien	d8ad975d09	Clean up flags keyword.	16 years ago
Victor Julien	3a8c0d2cfe	Fix ringbuffer number wrap around issue causing buffer items getting overwritten and thus lost.	16 years ago
Victor Julien	8514132851	Cleanup thresholding code.	16 years ago
Victor Julien	f80016530c	Remove unnecessary locking for thread-local packet-queues breaking on Win32.	16 years ago
Anoop Saldanha	f4120ff5d5	wrap multi line macros in do while	16 years ago
Ondrej Slanina	1357914d23	added support for synchronous log output on WIN32	16 years ago
Victor Julien	32e3fea9e6	Exclude parts of a flow that are not changing after init from the flow mutex. Cleanup flow-hash function.	16 years ago
Pablo Rincon	29a6fc2f03	Adding some flow improvements and recovery on emergency mode	16 years ago
Victor Julien	329742c10e	Small ip to pcap dev cleanup.	16 years ago
Victor Julien	1e707803c0	Enable perf counter updates in the ringbuffer queue handler.	16 years ago
William Metcalf	a42fff541f	fix for potential NULL deref on error in detect-http-method.c	16 years ago
Victor Julien	0140a14a15	Introduce atomic operations API that supports GCC's atomic operations and a fallback using (spin)locks. Convert ringbuffer api to use the new atomic api.	16 years ago
Victor Julien	daea85e491	Lock detection state reset function properly.	16 years ago
Victor Julien	0a0b33ef79	Fix adding the http_uri sigmatch to the uri list twice.	16 years ago
Victor Julien	e3fc53ecb9	Fix a corner case where the pcap receive modules could alloc packets at line rate until memory was depleted.	16 years ago
Victor Julien	0a607fce3d	Finish http_uri keyword, fix invalid read issue in one of the tests.	16 years ago
Gerardo Iglesias Galvan	55dfa36963	Add support for http_uri keyword	16 years ago
Victor Julien	2fe77bf65e	Use ringbuffers in the pcap live auto runmode as well.	16 years ago
Pablo Rincon	3b0c4133fc	Fixing asn1 relative offset, negative values	16 years ago
Gurvinder Singh	cda664a8c4	memroy leaks fixes in detection module, app layer and counters	16 years ago
Pablo Rincon	18954a2c4c	app layer ftp fix (mem leak)	16 years ago
William Metcalf	9ce1399db8	Add option for setting pcap buffer size if it is available	16 years ago
Gurvinder Singh	a0fa924c15	fixed the memory leaks in htp and radix tree	16 years ago
Victor Julien	7a6d4b57f0	Add support for class id in classification code. Submitted by firnsy@securixlive.com, thanks.	16 years ago
Gurvinder Singh	a8ca5719f6	fixed the typo in byte_jump and host.c, Thanks to rmkml for pointing out	16 years ago
Gurvinder Singh	0881be3b17	added the support for setting up distance sig when previous keyword is byte_jump (bug 163)	16 years ago
Jason Ish	ea4b7cc33b	add profiling to stateful detection engine + other fixups.	16 years ago
Jason Ish	a9ed9a8196	In profiling output, include a % for each rule.	16 years ago
Victor Julien	53acf08996	Add multi packet reading for pcap live mode. Add a partly lock free multi writer, multi reader ringbuffer.	16 years ago
Victor Julien	4e7df60b2f	Make pcap file mode read multiple packets per 'read'. Update threading model to deal with this.	16 years ago
Victor Julien	6f502f0da5	lockfree ringbuffer wip2, including proper shutdown.	16 years ago
Victor Julien	a48a767efc	Lockfree ringbuffer wip.	16 years ago
Victor Julien	7f29166aa8	Improve memory handling in error conditions in the radix implementation.	16 years ago
Victor Julien	c73e9318b0	Bump version 0.9.1.	16 years ago
Victor Julien	10a3d7343d	Remove unnecessary header inclusion in app layer ssl.	16 years ago
Victor Julien	bc7c9d928f	Fix radix and stateful detect engine memory leaks.	16 years ago
Victor Julien	747daf4bce	Fix typo in depth changes.	16 years ago
Victor Julien	dab679889c	Properly update depth if offset+content_len < depth. Fixes #164.	16 years ago
William Metcalf	e704d90aaa	set proper caps based run_mode	16 years ago
Jason Ish	a93b2e6b84	Support for reading ERF files.	16 years ago
William Metcalf	2eef905c07	GPL and Copyright header updates.	16 years ago
William Metcalf	0fc8f6cc37	More null deref fixes for util-radix-tree.c	16 years ago
William Metcalf	54da99fe53	compilation fixes for PF_RING and IPFW after removal of mutex_pending	16 years ago
Victor Julien	c2fb90c745	Fix thresholding 'both'. Fixes bug #160.	16 years ago
Victor Julien	2c8282a70b	Fix small memleak in ip only parsing code.	16 years ago
Victor Julien	54c2804ce4	Fix malformed ipv6 packet causing an endless loop in exthdr decoding.	16 years ago
Victor Julien	2910759943	Rename TranslateIPToPcapDev to PcapTranslateIPToDevice and make the length argument size_t.	16 years ago
Ondrej Slanina	55d0d1e7a1	added support for finding pcap device via it's IP.	16 years ago
William Metcalf	179372978f	Null deref fix for detect-id.c	16 years ago
William Metcalf	9728e49773	Null deref fix for detect-tls-version.c	16 years ago
William Metcalf	32a2da147b	Null deref fix for detect-engine-iponly.c	16 years ago
William Metcalf	73d2349149	Null deref fix for detect-engine-port.c	16 years ago
William Metcalf	afa8a2b8ba	Null deref fixe for detect-engine-address.c	16 years ago
William Metcalf	b856e607c9	Null deref fixes for util-radix-tree.c	16 years ago
Victor Julien	98c3f0149c	Improve SSL input validation.	16 years ago
Gurvinder Singh	5fe1dc1d24	support for sslv2/sslv3 their unit tests and better stream no reassembly flag handling	16 years ago
Victor Julien	b8641f300d	Rename asn1 files, fix an invalid free, fix improper init of vars in one unittest.	16 years ago
Pablo Rincon	3fa3229e01	ASN1 decoder and keyword implementation	16 years ago
Gurvinder Singh	6b49a90353	added support for setting up bytejump relative when previous keyword is byte_jump (bug 165)	16 years ago
Victor Julien	70b32f7380	First stab at creating a stateful detection engine. ... Stateful detection for app layer detection keywords, except uricontent. Stores it's partial results in the flow structure. Other modifications: - Generalize transaction tracking, logging and inspection. - Adapt http and dcerpc to use the new transaction handling. - Stream engine now always notifies app layer of a stream eof. This commit fixes bug #124.	16 years ago
Jason Ish	18e5ac8cde	Basic rule profiling even though the results may be skewed by a bad rule in a grouping of rules.	16 years ago
William Metcalf	b629b7c5c1	only show cli opts via help that we have support for	16 years ago
Victor Julien	42eeb84c9a	Properly lock flow before setting IP only action flags. Small alert api cleanups.	16 years ago
Pablo Rincon	9bae6a8628	Moving alert logic to detect-engine-alert.c	16 years ago
Victor Julien	692eb935ea	Fix updated memory api using debug mode by default. Small cleanups.	16 years ago
Gerardo Iglesias Galvan	9f4fae5b1a	Fix inconsistent use of dynamic memory allocation	16 years ago
Victor Julien	a8dd484aba	Fix small potential bug in debug mode found by clang.	16 years ago
William Metcalf	8d66323f62	clang fixes for null derefrences	16 years ago
Gurvinder Singh	32a2658233	support setting up byte_test/relative when byte_jumo is previous keyword	16 years ago
Gurvinder Singh	9378bdbad4	set the byte_jum/byte_test with relative keyword when pcre is previous keyword (bug 142)	16 years ago
Gurvinder Singh	ea3165b198	support setting up within keyword when previous keyword is pcre (bug 145) and added unit test for the same	16 years ago
Gurvinder Singh	07e10681d6	fixed a typo in the detect-content.h	16 years ago
Gurvinder Singh	2ea8205063	fixed the flags checking and make it more strict in default case (bug 153)	16 years ago
Victor Julien	bb685751d9	Fix NFQ receive/verdict race condition in cases where the packetpool is empty.	16 years ago
Victor Julien	647b1c0eba	Fix NFQ compilation.	16 years ago
Victor Julien	f4812586de	Fix broken ICMPv4 unittests. Fixes #161.	16 years ago
Victor Julien	ecf5a8fbcc	Fix broken stream unittest.	16 years ago
Victor Julien	76d62778c3	Use bigger stream msg.	16 years ago
Victor Julien	61099cd725	Fix compilation if debug is disabled.	16 years ago
Victor Julien	e741bd0202	Cleanup packet recycling code. Fix issues in the packet tunnel/pseudo code.	16 years ago
Victor Julien	e1a8c8f76c	Switch time api from mutex to spinlock.	16 years ago
Victor Julien	19584d0416	Fix tunneled and defrag reassembled packets with the new pending limits.	16 years ago
Victor Julien	ccf22cf563	Move to different way of enforcing max_pending. Should require less locks.	16 years ago
Victor Julien	42c4b5d53c	Use one less thread in pcap file mode. Reduces locking overhead.	16 years ago
Victor Julien	53b388b669	Improve flow hash debugging, switch to csv output.	16 years ago
Victor Julien	548a3b2c93	Improve flow hash debugging functions. Make sure ICMP errors don't create flows. Handle ICMP DEST UNREACH errors in the flow they are sending the error about.	16 years ago
Victor Julien	2dc5405d3a	Add debug code for tracking flow hash distribution. Only add ICMP DEST_UNREACH packets to the flow engine.	16 years ago
Gurvinder Singh	a4625bd333	fixed setting up byte_test relative when byte_jump is previous keyword (bug 146)	16 years ago
Gurvinder Singh	b05762a575	added unit test for the bug 144 to test isdataat setup	16 years ago
Gurvinder Singh	fdc3f728af	set the isdataat keyword when previous sigmatch is either content or pcre (bug 144)	16 years ago
Victor Julien	8dceb2784e	Small ICMPV6PayloadTest01 unittest cleanup.	16 years ago
Gurvinder Singh	9a2bcb6a3c	added unittest to check the payload setup, which causes the segv in detection module	16 years ago
Gurvinder Singh	21a89e22de	fixed the segv caused by null payload due to incorrect icmpv6 decoding	16 years ago
Victor Julien	0ebf7cbc5e	Convert flow bucket lock from mutex to spinlock. Locks should be very short, so spinlocks should be faster.	16 years ago
Victor Julien	e27cefa6f7	Complete conversion of pattern id mpm storage vs sig id storage.	16 years ago
Victor Julien	46831e0f8f	Fix signature grouping bug for protocols without ports. Add debugging code.	16 years ago