Commit Graph

7565 Commits (bc38cd593224405c1bb55284524533200b6a944f)
 

Author SHA1 Message Date
Victor Julien bc38cd5932 doc: initial xbits documentation 8 years ago
Victor Julien cb08f02140 xbits: clean up parsing and tests 8 years ago
Jason Ish 27ec811187 pcap-log: fix memory leak during initialization of ring buffer
A free was missing when files are removed during initialization
of the ring buffer.

Redmine issue:
https://redmine.openinfosecfoundation.org/issues/1985
8 years ago
Eric Leblond 9f6b58747b smtp: commands and replies are not case sensitive
RFC states that "Commands and replies are not case sensitive" and
patterns were registered to be case sensitive. So this patch fixes
a trivial evasion of SMTP signatures.
8 years ago
Mats Klepsland ffcb4ad232 tls: fix tls_cert_subject prefilter bug
If check in prefilter was checking that issuer was non-NULL, when
it in fact should be checking subject.
8 years ago
Mats Klepsland 10c93221fa tls: increase max number of tls records per packet
Tls packets may contain several records. This increase the number
of allowed records per packet from 30 to 255, and adds a new and
more informative decoder event when this limit is reached.
8 years ago
Mats Klepsland 554065189c tls: don't trigger decoder event on no extensions in CLIENT_HELLO
No extensions are allowed in <TLSv.1.2, so don't trigger SURICATA
TLS handshake invalid length decoder event when no extensions are
specified in CLIENT HELLO.
8 years ago
Victor Julien 810e43f373 magic: make optional
Make libmagic optional. If installed it will be enabled by default in
configure. Use --disable-libmagic to disable.
8 years ago
Jason Ish 79a3c6c7b1 log-pcap: use a snaplen of 262144 instead of -1.
Newer versions of libpcap will not open pcap files with a
snaplen of -1, instead use the current maximum value of
262144.

Issue:
https://redmine.openinfosecfoundation.org/issues/1987
8 years ago
Victor Julien 41074a87a0 doc: DNP3 support is now available 8 years ago
Victor Julien a44b612a41 hostbits/xbits: free hostbit
Fix memory leak. Hostbits were not actually freed.

Bug #1975.
8 years ago
Victor Julien 579d6d3ff7 http: allow lower/mixed case in proto detect
In HTTP detection registered patterns were upper case only. Since the
detection is based on both sides this would still work for sessions
where one of the talkers misbehaved. If both sides misbehave this
would fail however, so this patch introduces case insensive matching.
8 years ago
Jason Ish 94bc7e5f5f travis: use a build matrix and add additional builds
The following builds were added:
- linux, clang with -Wshadow
- linux w/ profiling
- linux w/ debug
- linux w/ no-json support

Removes the extra OS X build.

Travis file was reworked signficantly for readabilty.
8 years ago
Jason Ish 92885d6960 profiling: fix shadow error
Local variable store was shadowing variable in function
definition.
8 years ago
Victor Julien abbc0f76eb unix-socket: clean up path handling
Create/check socket path in a single place. Don't use dynamic
memory allocation.
8 years ago
Victor Julien c5e550b10d unix-socket: create socket directory if possible
Create the socket directory in the default case.

Since we're doing stat+mkdir indicate to Coverity not to worry about
the toctou case.
8 years ago
Victor Julien 3f741e450b unix-socket: be more specific about problems 8 years ago
Victor Julien 9368013645 unix-socket: don't error out on unix socket failure
If --init-errors-fatal is specified do error out.

Bug https://redmine.openinfosecfoundation.org/issues/1973
8 years ago
Victor Julien 7db3172479 Update Changelog for 3.2 release 8 years ago
Jason Ish 2ce95babd6 dnp3: use _ in keyword names instead of "."
dnp3.ind -> dnp3_ind
dnp3.func -> dnp3_func
dnp3.obj -> dnp3_obj

The variations with a "." are now aliases.
8 years ago
Victor Julien ab8faefd37 af-packet: fix fanout support on Debian Jessie
Debian Jessie with kernel 3.16 would not accept the 'id' of 99 used
in the test. Id 1 does work.
8 years ago
Alexander Gozman e492f0dc89 Fix port parsing in config file, added one more corresponding test.
Some examples from wiki caused parsing errors.
For example, "[1:80,![2,4]]" was treated as a mistake.

Also fixed loop detection in variables declaration. For example,
'A: "HOME_NET, !$HOME_NET"' resulted in parsing error.
8 years ago
Victor Julien 8b8426934f qa: only run cocci tests on one linux builder 8 years ago
Jason Ish 51f5ce6563 travis: macos support 8 years ago
Jason Ish ba6a1aa73e unittest-helper: fix format string compiler warnings 8 years ago
Jason Ish 4aceaf9fcd detect-stream_size: fix format string compiler warnings 8 years ago
Jason Ish c0377a9870 stream-tcp: fix format string compiler warnings 8 years ago
Jason Ish 5c80a3edf7 modbus: fix format string compiler warnings 8 years ago
Jason Ish 53a8c75385 dnp3: rename "index" variables to "point_index"
Gcc 4.6 will warning with -Wshadow for a local variable
named "index" as <strings.h> has a function named "index".

Newer versions of gcc handle this case.
8 years ago
Jason Ish 2a0bb108d0 dnp3-gen: rename index variable to point_index
Gcc 4.6 will warning with -Wshadow for a local variable
named "index" as <strings.h> has a function named "index".

Newer versions of gcc handle this case.
8 years ago
Victor Julien 4d8e9ae665 qa: add -Wshadow to appveyor builds 8 years ago
Victor Julien b4ac048b41 proto detect: fix -Wshadow warning 8 years ago
Victor Julien 07e1e3e02a dcerpc: fix -Wshadow warnings 8 years ago
Victor Julien 783d2991e5 commandline: fix -Wshadow warnings 8 years ago
Victor Julien 66c213f30c detect-address: fix -Wshadow warnings 8 years ago
Victor Julien 9a20335b6d asn1: fix -Wshadow warnings 8 years ago
Victor Julien dab51144af asn1: modernize test 8 years ago
Victor Julien 613174e9ce yaml: fix tests for -Wshadow 8 years ago
Victor Julien 968813b655 dnp3: fix test for -Wshadow 8 years ago
Victor Julien bb2d8a7133 runmodes: fix -Wshadow warnings 8 years ago
Victor Julien 8c1d157cd2 mpm ac-bs: fix -Wshadow warnings 8 years ago
Victor Julien 0d6d8e01c8 threads: fix -Wshadow warnings 8 years ago
Victor Julien cd04da673b commandline: fix -Wshadow warnings 8 years ago
Victor Julien 69ee2f0eb9 nfq: fix -Wshadow warnings
Rename globals to make sure it's clear they are globals.
8 years ago
Victor Julien 65d2443ccd reputation: fix -Wshadow warnings 8 years ago
Victor Julien d893bc55e0 eve-flow: fix -Wshadow warning 8 years ago
Victor Julien 9477fd4628 eve-file: fix -Wshadow warnings 8 years ago
Victor Julien ed0918bc35 ippair: fix -Wshadow warning 8 years ago
Victor Julien 5f786b5cd7 host: fix -Wshadow warning 8 years ago
Victor Julien 0c3b89356e flow: fix -Wshadow warning 8 years ago