Commit Graph

32 Commits (ccd1df99fdacf0c7451d5e793cd34294b166e6b6)

Author SHA1 Message Date
Victor Julien 28ba93e60c ndpi: minor optimization
Check protocol before doing more expensive work.
2 weeks ago
Victor Julien 278da4bc6a npdi: fix null pointer deref in detect keywords
Check for the existence of a flow before calling FlowGetStorageById() on it.

Ticket: #8308.
2 weeks ago
Jason Ish 77d96851f5 pfring: use static functions; add void arg to SCPluginRegister
Minor cleanups.
3 weeks ago
Jason Ish a60e93c2cd pfring: fix typo in StringParseUint16
StringParseUnt16 -> StringParseUint16

Ticket: #8271
3 weeks ago
Jason Ish 828d105cea pfring: copy cflags over from src/
This should cause the following warning to error out:

runmode-pfring.c: In function 'OldParsePfringConfig':
runmode-pfring.c:118:17: error: implicit declaration of function 'StringParseUnt16'; did you mean 'StringParseInt16'? [-Wimplicit-function-declaration]
  118 |             if (StringParseUnt16(&pfconf->threads, 10, 0, threadsstr) < 0) {
      |                 ^~~~~~~~~~~~~~~~
      |                 StringParseInt16

Ticket: #8271
3 weeks ago
Lukas Sismis 400328c3c3 pcap-file: prep codebase for pcap_cnt move refactor
For an easier review process, this is a two-step change process,
in which pcap_cnt is first accessed by functions-to-be, implemented
as simple macros.

In the follow-up commit, the actual refactor is implemented with the new
function. The old macros are deleted.

Ticket: 7835
1 month ago
Philippe Antoine dd6baccabd src: doc: remove more double-space typos
Found with git grep -E '[a-z]  [a-z]'
2 months ago
Victor Julien 7c0776abeb counters: remove ThreadVars from counter registration
Just pass the StatsThreadContext pointer directly.
3 months ago
Victor Julien 77ddbbb9c8 counters: regular counter get local API update 3 months ago
Victor Julien 78da4cfcae counters: regular counter Incr API update 3 months ago
Victor Julien 045142a1f1 counters: regular counter Set API update 3 months ago
Victor Julien c27d0b4192 counters: remove ThreadVars from sync API 3 months ago
Victor Julien 444166ec84 counters: move regular counter id to dedicated type 3 months ago
Victor Julien f6b67a8d50 napatech: update thread count callback to match API change 5 months ago
Victor Julien 7807b47ca0 pfring: update thread count callback to match API change
Use uint16_t internally and in parsing as well.
5 months ago
Philippe Antoine a2b5225612 rust: bindgen SCSigMatchAppendSMToList
Ticket: 7667
10 months ago
Philippe Antoine 13449344e8 rust: bindgen SCDetectHelperKeywordRegister
Ticket: 7667
10 months ago
Jason Ish 9d5158594f util-device: break into public and private definitions
util-device.h exposes some details that are particularly problematic
for C++, even when wrapped in 'extern "C"'. To address this, break the
header into public and private parts. The public part exposes
LiveDevice as an opaque data structure, while the private header has
the actual definition.

The idea is that only Suricata C source files should include the
private header, it should not be re-included in any other header
file. And this is the header library users should use, however we
don't enforce it with tecnical means, a library user could still
include the private header, but the clue there is in the name.
10 months ago
Philippe Antoine 96afdce283 detect: rename SCSigTableElmt to SCSigTableAppLiteElmt 11 months ago
Jason Ish 155706f96b jsonbuilder: prefix C API with SC 11 months ago
Jason Ish 813eb27b95 rust/conf: use generated bindings to SCConf API 11 months ago
Jason Ish 22b77b0c56 conf: prefix conf API with SC 11 months ago
Jason Ish 81915548de ndpi: ignore packets that have a different proto than the flow
This can happen when the flow is UDP, but an ICMP unreachable is
returned, which gets assigned to the same flow.

Reference: https://github.com/ntop/nDPI/issues/2762
11 months ago
Jason Ish 10ed6280ff ndpi: fix memory in keyword setup
- remove duplicate calls to ndpi_init_detection_module
- cleanup ndpi_init_detection_module when no longer needed
11 months ago
Jason Ish d3835bbb11 detect: split new keyword id from registration
Split DetectHelperKeywordRegister into 2 functions, one for acquiring
a new keyword ID, and another to perform the registration.

This makes it easier to do the traditional C keyword initialization
with a dynamic ID.
11 months ago
Alfredo Cardigliano dfd9ef5784 ndpi: initial implementation of nDPI plugin
Ticket: #7231
11 months ago
Philippe Antoine c164cfcf6b plugins: check version for all plugins 11 months ago
Jeff Lucovsky 7d5c170dd2 gen/bool: Clarify bool checks
Remove comparisons with true or false with C bools.
1 year ago
Victor Julien 1591ad4408 packetpool: allow larger max-pending-packets
Original limit was due to a specific data structure.

(lifted from 96a0ffadde)
1 year ago
Jeff Lucovsky d5feb8accc napatech: add as plugin
Issue: 7165
1 year ago
Victor Julien 96a0ffadde packetpool: allow larger max-pending-packets
Original limit was due to a specific data structure.
2 years ago
Jason Ish 79df4b4c89 pf-ring: add as plugin
Ticket: #7162
2 years ago