Commit Graph

10683 Commits (bcea73026635c3bf080d9dab1717077acc23c5f2)
 

Author SHA1 Message Date
Jeff Lucovsky bcea730266 util-error: define SC_ERR_PCRE_COPY_SUBSTRING 5 years ago
Jeff Lucovsky be4c6b85de general: Convert _Bool to bool
This commit addresses task 3167 and changes usages of '_Bool` to `bool`.
The latter is included from `suricata-common.h`
5 years ago
Jeff Lucovsky 3385859176 doc/userguide: Update for dump-features 5 years ago
Jeff Lucovsky 1519c1f006 detect/feature: Support --dump-features 5 years ago
Jeff Lucovsky 5e08e6bccf detect: update version comment 5 years ago
Jeff Lucovsky 1cddbc085b detect: Fix typos/spelling errors. 5 years ago
Jeff Lucovsky 8f6e133497 main: feature init and release 5 years ago
Jeff Lucovsky 9631808b04 output/filestore: announce provided features 5 years ago
Jeff Lucovsky cf840c37b3 detect/filestore: Warn if req'd feature missing 5 years ago
Jeff Lucovsky 31e2cff9cb detect/analysis: Warn if required feature missing 5 years ago
Jeff Lucovsky f83b199f2a feature: feature tracking services 5 years ago
Philippe Antoine 5597801ccb perf: optimizes alert fast log
In the case when we have multiple alerts for one packet
We suppose this happens more often than having decoder_event != 0
5 years ago
Phil Young 1c99536945 napatech: add hardware based bypass support
Napatech hardware bypass support enables Suricata to utilize
capabilities of Napatech SmartNICs to selectively bypass flow-based
traffic.
5 years ago
Phil Young 3fbcacf9a8 napatech: documentation hardware based bypass support
Napatech hardware bypass support enables Suricata to utilize
capabilities of Napatech SmartNICs to selectively bypass flow-based
traffic.
5 years ago
Andreas Herz f1f3b03143 doxygen: update config from 1.8.4 to 1.8.17 5 years ago
Philippe Antoine 52970d8508 detect/parse: move spaces skip up the stack
Switch to isspace() as well.
5 years ago
Philippe Antoine 6663246563 parser: make rust probing parsers optional 5 years ago
Jeff Lucovsky 427ec4e739 decode: Fix typos/spelling 5 years ago
Jeff Lucovsky aec4e9a032 decode: Handle ERSPAN Type I 5 years ago
Victor Julien 99d48cc91f configure: update to match autoscan suggestions 5 years ago
Victor Julien a3ef1b307d configure: clean up func checks 5 years ago
Philippe Antoine af2a689a99 init: move main to a separate file
so as to reuse code from suricata.c with fuzz targets
5 years ago
Philippe Antoine bb42be7e08 fuzz: disable signal handlers while fuzzing 5 years ago
Philippe Antoine 47eba33110 init: make PostConfLoadedSetup global
to be used by fuzz targets
5 years ago
Philippe Antoine 913082941c init: fix PostConfLoadedSetup to use local suri ptr 5 years ago
Philippe Antoine d2b3668a68 init: InitGlobal function
To be reused by fuzz targets
5 years ago
Philippe Antoine f5190da67e util: UTHmemsearch to use memmem if defined 5 years ago
Philippe Antoine ce55d06569 check: Using const keyword for some arguments
For ConfigSetLogDirectory and PrintRawLineHexBuf
5 years ago
Philippe Antoine 12a3a24906 log: can use a file set from env variable
Enables the redirection of log to a file set by an environment
variable SC_LOG_FILE when SC_LOG_OP_IFACE=file
5 years ago
vanlink 2456f27d08 stream/reassembly: fix data overlap check
Fix function CheckOverlap bug.
5 years ago
Victor Julien aeefc82eb9 tls: fix missing extern logic for cert_id tracking 5 years ago
Victor Julien 62c0f3d2b4 stats: fix missing extern keyword 5 years ago
Victor Julien 903291f88a defrag: fix use of globals 5 years ago
Victor Julien 5c3c6c609c threading: fix queue handlers globals use 5 years ago
Victor Julien 3ae1854d2f htp: fix globals use for flags 5 years ago
Victor Julien 85289f3283 proto: fix globals use 5 years ago
Victor Julien 5e583f3a12 flow: fix global variable use 5 years ago
Victor Julien 29f54a34ae stream: fix global declaration of the config 5 years ago
Victor Julien 2436daccd9 threading/modules: fix global declarations 5 years ago
Victor Julien c5f4b41881 ippair: fix global declarations 5 years ago
Victor Julien 0a006d2258 host: fix global declarations 5 years ago
Victor Julien 29780d6164 mpm: fix global declarations 5 years ago
Victor Julien b89059bda7 detect: fix global declaration of sigmatch_table 5 years ago
Victor Julien 0118e07d57 spm: fix global declaration of spm_table 5 years ago
Victor Julien a12c0b499d threading: fix global declaration of threading_set_cpu_affinity 5 years ago
Victor Julien 45955d2e58 unix-socket: avoid using global variable w/o extern 5 years ago
Victor Julien a9a522fac3 decode: fix default-packet-size global variable 5 years ago
Victor Julien f68c255f09 nfs: implement post-GAP transaction cleanup
Close all prior transactions in the direction of the GAP, except the
file xfers. Those use their own logic described below.

After a GAP all normal transactions are closed. File transactions
are left open as they can handle GAPs in principle. However, the
GAP might have contained the closing of a file and therefore it
may remain active until the end of the flow.

This patch introduces a time based heuristic for these transactions.
After the GAP all file transactions are stamped with the current
timestamp. If 60 seconds later a file has seen no update, its marked
as closed.

This is meant to fix resource starvation issues observed in long
running SMB sessions where packet loss was causing GAPs. Due to the
similarity of the NFS and SMB parsers, this issue is fixed for NFS
as well in this patch.

Bug #3424.
Bug #3425.
5 years ago
Victor Julien 7709b90c16 detect/file-data: remove debug abort that wasn't reachable 5 years ago
Victor Julien ac8ceae9bf detect/file-data: fix function doc 5 years ago