aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
18,073 Commits
8 Branches
169 Tags
241 MiB
main-8.0.x
main
main-7.0.x
master-6.0.x
master-5.0.x
master-4.1.x
master-4.0.x
master-3.2.x
suricata-8.0.4
suricata-7.0.15
suricata-8.0.3
suricata-7.0.14
suricata-8.0.2
suricata-7.0.13
suricata-8.0.1
suricata-7.0.12
suricata-8.0.0
suricata-7.0.11
suricata-8.0.0-rc1
suricata-8.0.0-beta1
suricata-7.0.10
suricata-7.0.9
suricata-7.0.8
suricata-7.0.7
suricata-7.0.6
suricata-6.0.20
suricata-7.0.5
suricata-6.0.19
suricata-6.0.18
suricata-7.0.4
suricata-6.0.17
suricata-7.0.3
suricata-6.0.16
suricata-7.0.2
suricata-6.0.15
suricata-7.0.1
suricata-6.0.14
suricata-7.0.0
suricata-7.0.0-rc2
suricata-6.0.13
suricata-6.0.12
suricata-6.0.11
suricata-7.0.0-rc1
suricata-6.0.10
suricata-6.0.9
suricata-7.0.0-beta1
suricata-6.0.8
suricata-6.0.7
suricata-6.0.6
suricata-5.0.10
suricata-6.0.5
suricata-5.0.9
suricata-6.0.4
suricata-5.0.8
suricata-6.0.3
suricata-5.0.7
suricata-6.0.2
suricata-5.0.6
suricata-6.0.1
suricata-5.0.5
suricata-4.1.10
suricata-4.1.9
suricata-5.0.4
suricata-6.0.0
suricata-6.0.0-rc1
suricata-6.0.0-beta1
suricata-5.0.3
suricata-4.1.8
suricata-4.1.7
suricata-5.0.2
suricata-4.1.6
suricata-5.0.1
suricata-5.0.0
suricata-5.0.0-rc1
suricata-4.1.5
suricata-5.0.0-beta1
suricata-4.1.4
suricata-4.1.3
suricata-4.0.7
suricata-4.1.2
suricata-4.1.1
suricata-4.1.0
suricata-4.0.6
suricata-4.1.0-rc2
suricata-4.1.0-rc1
suricata-4.0.5
suricata-4.1.0-beta1
suricata-4.0.4
suricata-4.0.3
suricata-4.0.2
suricata-3.2.5
suricata-4.0.1
suricata-3.2.4
suricata-4.0.0
suricata-4.0.0-rc2
suricata-3.2.3
suricata-4.0.0-rc1
suricata-4.0.0-beta1
suricata-3.2.2
suricata-3.1.4
suricata-3.2.1
suricata-3.2
suricata-3.2RC1
suricata-3.1.3
suricata-3.2beta1
suricata-3.1.2
suricata-3.1.1
suricata-3.1
suricata-3.0.2
suricata-3.1RC1
suricata-3.0.1
suricata-3.0.1RC1
suricata-3.0
suricata-2.0.11
suricata-3.0RC3
suricata-3.0RC2
suricata-3.0RC1
suricata-2.0.10
suricata-2.0.9
suricata-2.1beta4
suricata-2.0.8
suricata-2.0.7
suricata-2.1beta3
suricata-2.0.6
suricata-2.0.5
suricata-2.1beta2
suricata-2.0.4
suricata-2.1beta1
suricata-2.0.3
suricata-2.0.2
suricata-2.0.1
suricata-2.0.1rc1
suricata-2.0
suricata-2.0rc3
suricata-2.0rc2
suricata-2.0rc1
suricata-2.0beta2
suricata-1.4.7
suricata-1.4.6
suricata-1.4.5
suricata-2.0beta1
suricata-1.4.4
suricata-1.4.3
suricata-1.4.2
suricata-1.4.1
suricata-1.3.6
suricata-1.4
suricata-1.3.5
suricata-1.4rc1
suricata-1.3.4
suricata-1.4beta3
suricata-1.3.3
suricata-1.4beta2
suricata-1.3.2
suricata-1.4beta1
suricata-1.3.1
suricata-1.3
suricata-1.3rc1
suricata-1.3beta2
suricata-1.3beta1
suricata-1.2.1
suricata-1.2
suricata-1.2rc1
suricata-1.2beta1
suricata-1.1.1
suricata-0.8.2
suricata-1.0.0
suricata-1.0.1
suricata-1.0.2
suricata-1.0.3
suricata-1.0.4
suricata-1.0.5
suricata-1.1
suricata-1.1beta1
suricata-1.1beta2
suricata-1.1beta3
suricata-1.1rc1
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'c479a804d1'
${ noResults }
Commit Graph

54 Commits (c479a804d1afb4a69c3774e236a6d0619c299ac6)

Author SHA1 Message Date
Shivani Bhardwaj 885a28f62a version: start development towards 8.0.5 1 month ago
Juliana Fajardini 6af634b19b release: 8.0.4; update changelog 1 month ago
Lukas Sismis 1d7e58209f misc: time unit parsing function 
(cherry picked from commit 3e4fdb2118)
 1 month ago
Shivani Bhardwaj 563066a6dd version: start development towards 8.0.4 3 months ago
Juliana Fajardini 3bd9f773bd release: 8.0.3; update changelog 3 months ago
Shivani Bhardwaj 2cfc2f4dc0 version: start development towards 8.0.3 5 months ago
Shivani Bhardwaj 79db7b1ad4 release: 8.0.2; update changelog 6 months ago
Li Heng 002bd1f1ee snmp: can be set to detection-only 
Realloc alp_ctx.ctxs when a dynamic alproto is registered and
g_alproto_max increases. So dynamic alproto can be treated as
real/normal ones. And app-layer switch can be set to any value
of no/deteciton-only/yes.

Ticket: 8000
(cherry picked from commit c141c55bc6)
 6 months ago
Philippe Antoine 647bfad14d output/jsonbuilder: helper function SCJbSetPrintAsciiString 
To replace C PrintStringsToBuffer and avoid a stack alloc
+ copy

Ticket: 8004
(cherry picked from commit 7447651fa0)
 6 months ago
Shivani Bhardwaj 0d65d35c92 version: start development towards 8.0.2 7 months ago
Jason Ish 2444feed0d release: 8.0.1; update changelog 7 months ago
Shivani Bhardwaj e4b3b75b23 version: start development towards 8.0.1 10 months ago
Shivani Bhardwaj 9956286fb8 release: 8.0.0; update changelog 10 months ago
Shivani Bhardwaj 6a6104304d version: start development towards 8.0.0 10 months ago
Shivani Bhardwaj cdfebcdc9c release: 8.0.0-rc1; update changelog 10 months ago
Philippe Antoine 6dbc421825 rust: bindgen AppLayerParserConfParserEnabled 
Ticket: 7667
 11 months ago
Philippe Antoine 49b2a2be5d rust: bindgen SCAppLayerParserRegisterLogger 
Ticket: 7667
 11 months ago
Philippe Antoine 7bfef2e1e8 rust: bindgen AppLayerParserRegisterParserAcceptableDataDirection 
Ticket: 7667
 11 months ago
Philippe Antoine 1ff4dbfc24 rust: bindgen AppLayerParserSetStreamDepth 
Ticket: 7667
 11 months ago
Philippe Antoine b29d46d81f rust: bindgen SCAppLayerParserStateIssetFlag 
Ticket: 7667
 11 months ago
Philippe Antoine 6d56beffef rust: bindgen AppLayerParserStateSetFlag 
Ticket: 7667
 11 months ago
Philippe Antoine 7bb0c94ae9 rust: bindgen app-layer-detect-proto.h 
Ticket: 7667
 11 months ago
Jason Ish 4a655053e8 mdns: add mdns parser, logger and detection 
The mDNS support is based heavily on the DNS support, reusing the
existing DNS parser where possible. This meant adding variations on
DNS, as mDNS is a little different. Mainly being that *all* mDNS
traffic is to_server, yet there is still the concept of request and
responses.

Keywords added are:
- mdns.queries.rrname
- mdns.answers.rrname
- mdns.additionals.rrname
- mdns.authorities.rrname
- mdns.response.rrname

They are mostly in-line with the DNS keywords, except
mdns.answers.rdata which is a better than that mdns.response.rrname,
as its actually looking at the rdata, and not rrnames.

mDNS has its own logger that differs from the DNS logger:

- No grouped logging

- In answers/additionals/authorities, the rdata is logged in a field
  that is named after the rdata type. For example, "txt" data is no
  longer logged in the "rdata" field, but instead a "txt" field. We
  currently already did this in DNS for fields that were not a single
  buffer, like SOA, SRV, etc. So this makes things more consistent. And
  gives query like semantics that the "grouped" object was trying to
  provide.

- Types are logged in lower case ("txt" instead of "TXT")

- Flags are logged as an array: "flags": ["aa", "z"]

Ticket: #3952
 11 months ago
Philippe Antoine 6bc86230a5 rust: bindgen part of util-debug.h 
Ticket: 7667

Especially SCLogLevel whose enum redef is removed in rust
 11 months ago
Philippe Antoine a2b5225612 rust: bindgen SCSigMatchAppendSMToList 
Ticket: 7667
 11 months ago
Philippe Antoine 78034b218d rust: bindgen SCDetectSignatureSetAppProto 
Ticket: 7667
 11 months ago
Philippe Antoine dc20129195 rust: bindgen SCDetectHelperBufferMpmRegister 
Ticket: 7667
 11 months ago
Jeff Lucovsky 07205ab057 detect/xform: Support transform identity data 
Transforms that support optional strings, like from_base64 and
pcrexform, should also support identity-strings to treat transforms with
like transform options as the same.

This commit adds transform identity data handling:
- When computing a hash, include identity data from the transform
- When comparing, include the identity data from the transforms
- Omitting the "options" ptr from the transform hash/compare
- Modify xor, pcrexform and from_base64 to supply identification data for
  disambiguation in the compare/hash logic.
 11 months ago
Philippe Antoine 4af3bd9c91 rust: bindgen SCDetectHelperKeywordSetCleanCString 
Ticket: 7667
 11 months ago
Philippe Antoine 13449344e8 rust: bindgen SCDetectHelperKeywordRegister 
Ticket: 7667
 11 months ago
Philippe Antoine f909bbba68 rust: bindgen SCDetectHelperKeywordAliasRegister 
Ticket: 7667
 11 months ago
Philippe Antoine a7448a0c16 rust: bindgen SCDetectHelperBufferRegister 
Ticket: 7667
 11 months ago
Philippe Antoine 0d82e905bc rust: bindgen DetectHelperMultiBufferMpmRegister 
Ticket: 7667
 11 months ago
Philippe Antoine dfa4df9f54 rust: bindgen SCDetectHelperMultiBufferProgressMpmRegister 
Ticket: 7667
 11 months ago
Philippe Antoine fd7bd9c200 src: new file detect-engine-inspect-buffer.h 
For InspectionBuffer structure and related functions

Bindgen it for rust, especially transforms

Ticket: 7667
 12 months ago
Philippe Antoine df0dc2e8ea rust: bindgen SCDetectSignatureAddTransform 
by moving it to detect-engine-buffer.h and prefixing it

Ticket: 7667
 12 months ago
Philippe Antoine cf336396c3 rust: bindgen detect-engine-helper.h 
Ticket: 7667

Begin by focusing on transforms
 12 months ago
Philippe Antoine dadf9012fc rust: bindgen detect-engine-buffer.h 
Ticket: 7667

And prefix SCDetectBufferSetActiveList to be exported

Allows less use of suricata crate in plugin as we get the functions
prototypes from suricata_sys and they are more correct.
 12 months ago
Jason Ish 8b2fafcfa2 version: start development towards 8.0.0-rc1 1 year ago
Philippe Antoine 51859050cb rust: export jsonbuilder API in sys crate 
using cbindgen + bindgen
 1 year ago
Philippe Antoine 3b271b3f5b detect: rename with prefix SCSigTablePreRegister 
to make it available to rust via bindgen
 1 year ago
Philippe Antoine d24a3eb5f6 snmp: register protocol dynamically 
Ticket: 4103
 1 year ago
Philippe Antoine 924129b185 output: public header for use in rust 
Ticket: 5053

Move enum OutputJsonLogDirection and struct
EveJsonTxLoggerRegistrationData to a public header user by rust
thanks to bindgen

Rename to use SC prefix on the way

And make EveJsonSimpleTxLogFunc use a const pointer to transaction
 1 year ago
Philippe Antoine 243d14cda2 output: plugins can log flow or packet direction 1 year ago
Philippe Antoine 850bd72399 app-layer: helper function AppProtoNewProtoFromString 
So that we do not have to know g_alproto_max to register
dynamically a new protocol from its name
 1 year ago
Philippe Antoine 30af626a92 conf: extend API for rust 
Will allow rust to list the values of an array such as
dns.types for outputs
 1 year ago
Jason Ish 813eb27b95 rust/conf: use generated bindings to SCConf API 1 year ago
Philippe Antoine c164cfcf6b plugins: check version for all plugins 1 year ago
Philippe Antoine 5742df3783 plugins: bind constant SC_PLUGIN_API_VERSION 1 year ago
Philippe Antoine 52862e50be plugin: constify some fields 
including the tx parameter to the logger function
 1 year ago