suricata

Author	SHA1	Message	Date
Jeff Lucovsky	4a39d7a1ee	app-layer: Extend event container with progress	6 years ago
Jeff Lucovsky	50e23ba93a	app-layer: Initial app layer logging	6 years ago
Victor Julien	6f42ae91c7	app-layer: protocol change API Add API calls to upgrade to TLS or to request a protocol change without a specific protocol expectation. If the HTTP CONNECT session includes a port on the url, use that to look up the probing parser during protocol detection. Solves a missed detection of a SSLv2 session that upgrades to TLSv1. SSLv2 relies on the probing parser which is limited to certain ports. In case of STARTTLS in SMTP and FTP, the port is hardcoded to 443. A new event APPLAYER_UNEXPECTED_PROTOCOL is set if there was a mismatch.	9 years ago
Mats Klepsland	72c757433a	app-layer: add decoder event for missing TLS after STARTTLS	9 years ago
Victor Julien	8eac1156c6	app-layer-events: remove unused API options	9 years ago
Victor Julien	347c0df9c4	app-layer-event: refactor Move app layer event handling into app-layer-event.[ch]. Convert 'Set' macro's to functions. Get rid of duplication in Set and SetRaw. Set now calls SetRaw. Fix potentential int overflow condition in the event storage. Update callers.	12 years ago