Victor Julien
bc38cd5932
doc: initial xbits documentation
8 years ago
Victor Julien
cb08f02140
xbits: clean up parsing and tests
8 years ago
Jason Ish
27ec811187
pcap-log: fix memory leak during initialization of ring buffer
...
A free was missing when files are removed during initialization
of the ring buffer.
Redmine issue:
https://redmine.openinfosecfoundation.org/issues/1985
8 years ago
Eric Leblond
9f6b58747b
smtp: commands and replies are not case sensitive
...
RFC states that "Commands and replies are not case sensitive" and
patterns were registered to be case sensitive. So this patch fixes
a trivial evasion of SMTP signatures.
8 years ago
Mats Klepsland
ffcb4ad232
tls: fix tls_cert_subject prefilter bug
...
If check in prefilter was checking that issuer was non-NULL, when
it in fact should be checking subject.
8 years ago
Mats Klepsland
10c93221fa
tls: increase max number of tls records per packet
...
Tls packets may contain several records. This increase the number
of allowed records per packet from 30 to 255, and adds a new and
more informative decoder event when this limit is reached.
8 years ago
Mats Klepsland
554065189c
tls: don't trigger decoder event on no extensions in CLIENT_HELLO
...
No extensions are allowed in <TLSv.1.2, so don't trigger SURICATA
TLS handshake invalid length decoder event when no extensions are
specified in CLIENT HELLO.
8 years ago
Victor Julien
810e43f373
magic: make optional
...
Make libmagic optional. If installed it will be enabled by default in
configure. Use --disable-libmagic to disable.
8 years ago
Jason Ish
79a3c6c7b1
log-pcap: use a snaplen of 262144 instead of -1.
...
Newer versions of libpcap will not open pcap files with a
snaplen of -1, instead use the current maximum value of
262144.
Issue:
https://redmine.openinfosecfoundation.org/issues/1987
8 years ago
Victor Julien
41074a87a0
doc: DNP3 support is now available
8 years ago
Victor Julien
a44b612a41
hostbits/xbits: free hostbit
...
Fix memory leak. Hostbits were not actually freed.
Bug #1975 .
8 years ago
Victor Julien
579d6d3ff7
http: allow lower/mixed case in proto detect
...
In HTTP detection registered patterns were upper case only. Since the
detection is based on both sides this would still work for sessions
where one of the talkers misbehaved. If both sides misbehave this
would fail however, so this patch introduces case insensive matching.
8 years ago
Jason Ish
94bc7e5f5f
travis: use a build matrix and add additional builds
...
The following builds were added:
- linux, clang with -Wshadow
- linux w/ profiling
- linux w/ debug
- linux w/ no-json support
Removes the extra OS X build.
Travis file was reworked signficantly for readabilty.
8 years ago
Jason Ish
92885d6960
profiling: fix shadow error
...
Local variable store was shadowing variable in function
definition.
8 years ago
Victor Julien
abbc0f76eb
unix-socket: clean up path handling
...
Create/check socket path in a single place. Don't use dynamic
memory allocation.
8 years ago
Victor Julien
c5e550b10d
unix-socket: create socket directory if possible
...
Create the socket directory in the default case.
Since we're doing stat+mkdir indicate to Coverity not to worry about
the toctou case.
8 years ago
Victor Julien
3f741e450b
unix-socket: be more specific about problems
8 years ago
Victor Julien
9368013645
unix-socket: don't error out on unix socket failure
...
If --init-errors-fatal is specified do error out.
Bug https://redmine.openinfosecfoundation.org/issues/1973
8 years ago
Victor Julien
7db3172479
Update Changelog for 3.2 release
8 years ago
Jason Ish
2ce95babd6
dnp3: use _ in keyword names instead of "."
...
dnp3.ind -> dnp3_ind
dnp3.func -> dnp3_func
dnp3.obj -> dnp3_obj
The variations with a "." are now aliases.
8 years ago
Victor Julien
ab8faefd37
af-packet: fix fanout support on Debian Jessie
...
Debian Jessie with kernel 3.16 would not accept the 'id' of 99 used
in the test. Id 1 does work.
8 years ago
Alexander Gozman
e492f0dc89
Fix port parsing in config file, added one more corresponding test.
...
Some examples from wiki caused parsing errors.
For example, "[1:80,![2,4]]" was treated as a mistake.
Also fixed loop detection in variables declaration. For example,
'A: "HOME_NET, !$HOME_NET"' resulted in parsing error.
8 years ago
Victor Julien
8b8426934f
qa: only run cocci tests on one linux builder
8 years ago
Jason Ish
51f5ce6563
travis: macos support
8 years ago
Jason Ish
ba6a1aa73e
unittest-helper: fix format string compiler warnings
8 years ago
Jason Ish
4aceaf9fcd
detect-stream_size: fix format string compiler warnings
8 years ago
Jason Ish
c0377a9870
stream-tcp: fix format string compiler warnings
8 years ago
Jason Ish
5c80a3edf7
modbus: fix format string compiler warnings
8 years ago
Jason Ish
53a8c75385
dnp3: rename "index" variables to "point_index"
...
Gcc 4.6 will warning with -Wshadow for a local variable
named "index" as <strings.h> has a function named "index".
Newer versions of gcc handle this case.
8 years ago
Jason Ish
2a0bb108d0
dnp3-gen: rename index variable to point_index
...
Gcc 4.6 will warning with -Wshadow for a local variable
named "index" as <strings.h> has a function named "index".
Newer versions of gcc handle this case.
8 years ago
Victor Julien
4d8e9ae665
qa: add -Wshadow to appveyor builds
8 years ago
Victor Julien
b4ac048b41
proto detect: fix -Wshadow warning
8 years ago
Victor Julien
07e1e3e02a
dcerpc: fix -Wshadow warnings
8 years ago
Victor Julien
783d2991e5
commandline: fix -Wshadow warnings
8 years ago
Victor Julien
66c213f30c
detect-address: fix -Wshadow warnings
8 years ago
Victor Julien
9a20335b6d
asn1: fix -Wshadow warnings
8 years ago
Victor Julien
dab51144af
asn1: modernize test
8 years ago
Victor Julien
613174e9ce
yaml: fix tests for -Wshadow
8 years ago
Victor Julien
968813b655
dnp3: fix test for -Wshadow
8 years ago
Victor Julien
bb2d8a7133
runmodes: fix -Wshadow warnings
8 years ago
Victor Julien
8c1d157cd2
mpm ac-bs: fix -Wshadow warnings
8 years ago
Victor Julien
0d6d8e01c8
threads: fix -Wshadow warnings
8 years ago
Victor Julien
cd04da673b
commandline: fix -Wshadow warnings
8 years ago
Victor Julien
69ee2f0eb9
nfq: fix -Wshadow warnings
...
Rename globals to make sure it's clear they are globals.
8 years ago
Victor Julien
65d2443ccd
reputation: fix -Wshadow warnings
8 years ago
Victor Julien
d893bc55e0
eve-flow: fix -Wshadow warning
8 years ago
Victor Julien
9477fd4628
eve-file: fix -Wshadow warnings
8 years ago
Victor Julien
ed0918bc35
ippair: fix -Wshadow warning
8 years ago
Victor Julien
5f786b5cd7
host: fix -Wshadow warning
8 years ago
Victor Julien
0c3b89356e
flow: fix -Wshadow warning
8 years ago