1027 Commits (b708d7f65d5c985b7879f1979444596a57a376b2)

 

All Branches   

Search

Author	SHA1	Message	Date
Breno Silva	7e299834d2	FragOffset Rule Keyword	16 years ago
Victor Julien	f96511a8b1	Check reassembly limits against correct stream direction. Set proper direction flag in stream msgs.	16 years ago
Gurvinder Singh	ed99e73622	bug 78	16 years ago
Kirby Kuehl	58c8103a4b	fix unittest	16 years ago
Victor Julien	53c9276d51	Cleanup pcap output.	16 years ago
Victor Julien	e0aacac4c6	Move bpf string retrieval to it's own function. Clean up pcap sourcres a bit.	16 years ago
William Metcalf	ba46c16aac	bpf support for pcap modes	16 years ago
Victor Julien	424ff432ec	Build update	16 years ago
Victor Julien	faf6e82aa4	Build sys update after applying prelude patches.	16 years ago
Pierre Chifflier	4515ae13e4	Add Prelude output plugin ... Add support for reporting alerts to the Prelude SIEM system, using libprelude to send IDMEF (RFC4765) messages. Each message contains the alert description and reference (using the SID/GID), and a normalized description (assessment, impact, sources etc.) libprelude handles the connection with the manager (collecting component), spooling and sending the event asynchronously. It also offers transport security (using TLS and trusted certificates) and reliability (events are retransmitted if not sent successfully). This modules requires a Prelude profile to work (see man prelude-admin and the Prelude Handbook for help). Signed-off-by: Pierre Chifflier <chifflier@edenwall.com>	16 years ago
Pierre Chifflier	eb33dc163f	Prelude plugin: add detection in configure script ... Add the --enable-plugin option to configure script (disabled by default). Signed-off-by: Pierre Chifflier <chifflier@inl.fr>	16 years ago
Gurvinder Singh	cf5266094d	bug 66 patch	16 years ago
Victor Julien	148883cedf	Work around for unsupported CONNECT support handling.	16 years ago
Victor Julien	7deb4e9f09	Cleanup AppLayerDetectGetProto a bit.	16 years ago
Victor Julien	fd409049cb	First step for proper HTTP CONNECT handling.	16 years ago
Victor Julien	9f3f9e9ba1	Fix ipfw verdict.	16 years ago
Gurvinder Singh	3cad20946d	bug 64 patch	16 years ago
Victor Julien	53977fded6	Small compilation fixes when debugging is disabled.	16 years ago
Victor Julien	6a53ab9c5a	Stream engine memory handling update ... The stream engine memory handling needed updating as it didn't scale. Changes: - pools can now be initialized to size 0, meaning unlimited - stream engine uses a memcap setting. Sessions, segments and aldata is part of this, app layer state isn't. - memory is accounted using a global int that is spinlocked. - a counter for sessions that have not been picked up because of memcap was added. - all reassembly errors are converted to debug msgs.	16 years ago
Victor Julien	df4c642c70	Fix weird compile error	16 years ago
Victor Julien	b1531f7244	Manually merge Pablo's IPFW action patch.	16 years ago
Pablo Rincon	51dc773eec	Changing the veredict actions to flags to allow simultaneous veredict	16 years ago
Nick Rogness	2b7b78f1bf	Intial IPFW support FreeBSD and OSX	16 years ago
Jason Ish	fbf03a927d	Fix issue 71. The insert and re-assemble need to be done under the same tracker lock.	16 years ago
Victor Julien	f7f33ec889	Fix the flow manager sleeping for way too long in some situations.	16 years ago
Kirby Kuehl	298bf4cc88	dcerpc over smb for transact	16 years ago
Victor Julien	bbfe1d293e	Fix merge artifact.	16 years ago
Victor Julien	f08d01a8e8	Set sensible tcp timeout defaults and no longer set the timeouts from the stream engine.	16 years ago
Pablo Rincon	7f250a814a	Fixing redeclaration of run_mode	16 years ago
Pablo Rincon	5592189c04	Loading flow settings from config	16 years ago
Kirby Kuehl	8efbe491a1	dcerpc refactoring	16 years ago
Kirby Kuehl	008de4321b	refactor dcerpc in prep for dcerpc over smb	16 years ago
Anoop Saldanha	546e9b5f28	AddressCutNot fix for address engine ipv6	16 years ago
Anoop Saldanha	e25696afce	engine address ipv6 refactored	16 years ago
Gurvinder Singh	d9677c7e2a	bug 76 patch	16 years ago
Jason Ish	0a5bc2d600	Fix issue 74. separate initialization of run modes from adding them to a thread. - fixes issues with multiple output threads.	16 years ago
Pablo Rincon	260e581929	First version of the reputation API	16 years ago
Kirby Kuehl	f15ca04889	fix padding calculation and stubdata parser for dcerpc	16 years ago
William Metcalf	811f2f605d	small fix for ! inside of content match	16 years ago
Pablo Rincon	9ec2057a21	Small fix, renaming	16 years ago
William Metcalf	22f3e3d818	added configure option for enabling march=native gcc 4.2 and later	16 years ago
Victor Julien	2481f2102b	Add missing return value evaluation in port parsing and fix broken unittest.	16 years ago
Victor Julien	b3bcba077f	Only inspect http flows against uri sigs, clean up uri scanning code.	16 years ago
Gurvinder Singh	0cb43d27e9	uricontent new design	16 years ago
Gurvinder Singh	356a8bf385	applayer uri match and modified http handling	16 years ago
Victor Julien	fcb03099a3	Fix reassembly updating the wrong stream on ACK ... The stream reassembly updated the wrong stream on received ACK packets. Instead of the opposing stream it updated the stream in packet direction. This caused issues in the app layer handling. Updated the unittests as well.	16 years ago
Pablo Rincon	256d745b39	Including header file for cpu detection	16 years ago
Pablo Rincon	17cd010b0c	Detect the number of CPUs configured and online. Printing a small summary at the startup	16 years ago
Victor Julien	0d3da34f64	remove unused variables	16 years ago
Victor Julien	c352bff6fb	Remove unused conditional locking code from the app layer parsing code.	16 years ago