Anoop Saldanha
							
						 
						
							 
							
							
							
								
							
								c30dbff63d 
								
							
								 
							
						 
						
							
							
								
								update flow pruning - v4  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Anoop Saldanha
							
						 
						
							 
							
							
							
								
							
								3b0142fa46 
								
							
								 
							
						 
						
							
							
								
								update flow pruning - v3  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Anoop Saldanha
							
						 
						
							 
							
							
							
								
							
								6dcb68abb0 
								
							
								 
							
						 
						
							
							
								
								update flow pruning - v2  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Anoop Saldanha
							
						 
						
							 
							
							
							
								
							
								f197b32a55 
								
							
								 
							
						 
						
							
							
								
								update flow pruning - v1  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Anoop Saldanha
							
						 
						
							 
							
							
							
								
							
								272c2433ec 
								
							
								 
							
						 
						
							
							
								
								Cleanup flow.c before further changes  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Anoop Saldanha
							
						 
						
							 
							
							
							
								
							
								8363533a02 
								
							
								 
							
						 
						
							
							
								
								support for forced stream reassembly for to be pruned flows  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Anoop Saldanha
							
						 
						
							 
							
							
							
								
							
								727a950e39 
								
							
								 
							
						 
						
							
							
								
								Move time elapsed right after we finish all packet processing  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Anoop Saldanha
							
						 
						
							 
							
							
							
								
							
								762ac0fe31 
								
							
								 
							
						 
						
							
							
								
								update conditional in shutdown forced reassembly to check for flows that required flow reassemly  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Anoop Saldanha
							
						 
						
							 
							
							
							
								
							
								15359dc47e 
								
							
								 
							
						 
						
							
							
								
								Slot structure now holds the TV it belongs to  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Anoop Saldanha
							
						 
						
							 
							
							
							
								
							
								9552e6f696 
								
							
								 
							
						 
						
							
							
								
								Shutdown flow timeout reassembly now supports ipv6  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Anoop Saldanha
							
						 
						
							 
							
							
							
								
							
								54f8d56f48 
								
							
								 
							
						 
						
							
							
								
								Packet inspection keywords modified to not inspect pseudo packet  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Anoop Saldanha
							
						 
						
							 
							
							
							
								
							
								c365bafbf6 
								
							
								 
							
						 
						
							
							
								
								We now inspect timed out streams + streams not processed as yet, at engine shutdown  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Anoop Saldanha
							
						 
						
							 
							
							
							
								
							
								56432cee16 
								
							
								 
							
						 
						
							
							
								
								Single thread kill also checks if inq is cleared before shutting down  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Anoop Saldanha
							
						 
						
							 
							
							
							
								
							
								8fa923c5ac 
								
							
								 
							
						 
						
							
							
								
								- All threads also check to see if their inq is cleared before they shutdown.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Anoop Saldanha
							
						 
						
							 
							
							
							
								
							
								a844eecb0e 
								
							
								 
							
						 
						
							
							
								
								- Updated all runmodes to use synchronization points, right before each thread(slot function) tries to de-init the thread. - Main thread now first disables receive thread(s) before it kills receive and rest of the threads.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Anoop Saldanha
							
						 
						
							 
							
							
							
								
							
								e567c2d002 
								
							
								 
							
						 
						
							
							
								
								Introduce master-slave synchronization support for ThreadVars  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Anoop Saldanha
							
						 
						
							 
							
							
							
								
							
								94c5ecb069 
								
							
								 
							
						 
						
							
							
								
								introduce inline function version of TmThreadsSlotProcessPkt macro. Retain the macro as well  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Anoop Saldanha
							
						 
						
							 
							
							
							
								
							
								fd6faac196 
								
							
								 
							
						 
						
							
							
								
								update TmThreadsSlotProcessPkt with better error handling + post pq processing  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Anoop Saldanha
							
						 
						
							 
							
							
							
								
							
								3fb65f5ec2 
								
							
								 
							
						 
						
							
							
								
								fix local var usage for slot in tm-threads.c  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Anoop Saldanha
							
						 
						
							 
							
							
							
								
							
								acbcee69ff 
								
							
								 
							
						 
						
							
							
								
								support post pq packet processing in var slot  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								cc4e89fbe1 
								
							
								 
							
						 
						
							
							
								
								Profiling: convert all packet profile counters/variables to u64. Improve output for larger numbers.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eileen Donlon
							
						 
						
							 
							
							
							
								
							
								e8c51e09e8 
								
							
								 
							
						 
						
							
							
								
								fixed bug 291 corrected reference to reference-config-file  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eileen Donlon
							
						 
						
							 
							
							
							
								
							
								89599d3b9b 
								
							
								 
							
						 
						
							
							
								
								fixed bug 288; corrected config boolean parsing problems  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								de1d002ea6 
								
							
								 
							
						 
						
							
							
								
								Return OK when leaving cleanly.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								2631e5f14f 
								
							
								 
							
						 
						
							
							
								
								pcap: get rid of old API.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								6f975d3248 
								
							
								 
							
						 
						
							
							
								
								pcap: add "autofp" runmode  
							
							 
							
							... 
							
							
							
							This patch adds "autofp" runmode. This runmode supports multiple
devices and uses the new CPU affinity system. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								effa295489 
								
							
								 
							
						 
						
							
							
								
								pcap: add "single" runmode  
							
							 
							
							... 
							
							
							
							This patch adds support for the "single" mode to the pcap live
mode. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								e13181496c 
								
							
								 
							
						 
						
							
							
								
								ip-only: added support for matching on ports.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								3d396e8b1e 
								
							
								 
							
						 
						
							
							
								
								Update PCRE JIT code to support official JIT implementation in pcre-8.20-RC1.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								751a77a9be 
								
							
								 
							
						 
						
							
							
								
								Make sure stream/engine-event signatures are recognized as such.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								c590bba4a4 
								
							
								 
							
						 
						
							
							
								
								Undo tunnel reference counting using atomic operations. Revert to mutex based code.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								63f834d9a7 
								
							
								 
							
						 
						
							
							
								
								Add profiling to various HTTP buffer MPM calls.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								2675879ff1 
								
							
								 
							
						 
						
							
							
								
								Engine and stream events only rules can are deonly compat as well.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								bd7ac3eaa6 
								
							
								 
							
						 
						
							
							
								
								PrintInet: fix compilation on FreeBSD  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								5656e34459 
								
							
								 
							
						 
						
							
							
								
								Fix compilation on FreeBSD 8.2  
							
							 
							
							... 
							
							
							
							FreeBSD has a recent version of autotools which induces some issues.
This patch fixes it by improving headers detection code in configure.in. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Anoop Saldanha
							
						 
						
							 
							
							
							
								
							
								3801e00426 
								
							
								 
							
						 
						
							
							
								
								fix compliation warnings from runmode-af-packet.c  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								baddfcaa1a 
								
							
								 
							
						 
						
							
							
								
								Extend packet profiling to other thread 'slot' functions.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								3693a7a9ee 
								
							
								 
							
						 
						
							
							
								
								Profiling: add accounting for several detection phases.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								e8e392fb1f 
								
							
								 
							
						 
						
							
							
								
								Profiling: add per packet accounting of how much ticks are spend in protocol detection.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								7425bf5ca6 
								
							
								 
							
						 
						
							
							
								
								Rename some decode event structure and macro.  
							
							 
							
							... 
							
							
							
							This patch renames DECODER_SET_EVENT, DECODER_ISSET_EVENT and some
other structures to ENGINE equivalent to take into account the fact
the event list is now related to all engines and not only to decoder. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								5bbd8fe910 
								
							
								 
							
						 
						
							
							
								
								Add reference to events sig files in suricata YAML config.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								552c6731b2 
								
							
								 
							
						 
						
							
							
								
								Add signature file for stream events.  
							
							 
							
							... 
							
							
							
							This patch adds a rules/stream-events.rules file which contains
alert related to all stream events. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								de65b11c42 
								
							
								 
							
						 
						
							
							
								
								decode signature optimisation requires different treatment  
							
							 
							
							... 
							
							
							
							Decode signature are using the fact that no proto is set on packet
to increase the matching speed. This is not the case of stream and
other engine events. Thus a difference needs to be made. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								3f153fb0da 
								
							
								 
							
						 
						
							
							
								
								Add 'stream-event' keyword.  
							
							 
							
							... 
							
							
							
							This patch adds an alias to the 'engine-event' keyword. It is now
possible to access to the stream events via the 'stream-event'
keyword. A simple transformation is done:
    stream-event:reassembly_segment_before_base_seq
is a shortcut for:
    engine-event:stream.reassembly_segment_before_base_seq 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								eb0d4e4d8b 
								
							
								 
							
						 
						
							
							
								
								Add stream events support to 'engine-event' keyword  
							
							 
							
							... 
							
							
							
							This patch adds the list of stream events (with associated
keywords) to the list of events that can be treated by 'engine-event'. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								e3a6d8955e 
								
							
								 
							
						 
						
							
							
								
								Introduce engine-event keyword  
							
							 
							
							... 
							
							
							
							This patch renames the 'decode-event' keyword to 'engine-event' and
keep it for backword compatibility of rulesets. All *DecodeEvent*
references in the code are replaced by EngineEvent version. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								2ac8755382 
								
							
								 
							
						 
						
							
							
								
								Rename detect-decode-event to detect-engine-event  
							
							 
							
							... 
							
							
							
							This patch does a simple renaming of detect-decode-event file to
the more global detect-engine-event name. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								21f387d2c7 
								
							
								 
							
						 
						
							
							
								
								profiling: fix stream ticks miscalculation on stream end pseudo packets.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								ff6365dd33 
								
							
								 
							
						 
						
							
							
								
								af-packet: switch to pcktacqloop API.  
							
							 
							
							... 
							
							
							
							This patch gets rid of the old API and brings some optimisation
by reordering structure and optimisinf an error test. 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Eric Leblond
							
						 
						
							 
							
							
							
								
							
								834c91eece 
								
							
								 
							
						 
						
							
							
								
								af-packet: add AFP to per packet performance system.  
							
							 
							
							
							
						 
						
							14 years ago