aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
741 Commits
7 Branches
155 Tags
197 MiB
master
main-7.0.x
master-6.0.x
master-5.0.x
master-4.1.x
master-4.0.x
master-3.2.x
suricata-7.0.8
suricata-7.0.7
suricata-7.0.6
suricata-6.0.20
suricata-7.0.5
suricata-6.0.19
suricata-6.0.18
suricata-7.0.4
suricata-6.0.17
suricata-7.0.3
suricata-6.0.16
suricata-7.0.2
suricata-6.0.15
suricata-7.0.1
suricata-6.0.14
suricata-7.0.0
suricata-7.0.0-rc2
suricata-6.0.13
suricata-6.0.12
suricata-6.0.11
suricata-7.0.0-rc1
suricata-6.0.10
suricata-6.0.9
suricata-7.0.0-beta1
suricata-6.0.8
suricata-6.0.7
suricata-6.0.6
suricata-5.0.10
suricata-6.0.5
suricata-5.0.9
suricata-6.0.4
suricata-5.0.8
suricata-6.0.3
suricata-5.0.7
suricata-6.0.2
suricata-5.0.6
suricata-6.0.1
suricata-5.0.5
suricata-4.1.10
suricata-4.1.9
suricata-5.0.4
suricata-6.0.0
suricata-6.0.0-rc1
suricata-6.0.0-beta1
suricata-5.0.3
suricata-4.1.8
suricata-4.1.7
suricata-5.0.2
suricata-4.1.6
suricata-5.0.1
suricata-5.0.0
suricata-5.0.0-rc1
suricata-4.1.5
suricata-5.0.0-beta1
suricata-4.1.4
suricata-4.1.3
suricata-4.0.7
suricata-4.1.2
suricata-4.1.1
suricata-4.1.0
suricata-4.0.6
suricata-4.1.0-rc2
suricata-4.1.0-rc1
suricata-4.0.5
suricata-4.1.0-beta1
suricata-4.0.4
suricata-4.0.3
suricata-4.0.2
suricata-3.2.5
suricata-4.0.1
suricata-3.2.4
suricata-4.0.0
suricata-4.0.0-rc2
suricata-3.2.3
suricata-4.0.0-rc1
suricata-4.0.0-beta1
suricata-3.2.2
suricata-3.1.4
suricata-3.2.1
suricata-3.2
suricata-3.2RC1
suricata-3.1.3
suricata-3.2beta1
suricata-3.1.2
suricata-3.1.1
suricata-3.1
suricata-3.0.2
suricata-3.1RC1
suricata-3.0.1
suricata-3.0.1RC1
suricata-3.0
suricata-2.0.11
suricata-3.0RC3
suricata-3.0RC2
suricata-3.0RC1
suricata-2.0.10
suricata-2.0.9
suricata-2.1beta4
suricata-2.0.8
suricata-2.0.7
suricata-2.1beta3
suricata-2.0.6
suricata-2.0.5
suricata-2.1beta2
suricata-2.0.4
suricata-2.1beta1
suricata-2.0.3
suricata-2.0.2
suricata-2.0.1
suricata-2.0.1rc1
suricata-2.0
suricata-2.0rc3
suricata-2.0rc2
suricata-2.0rc1
suricata-2.0beta2
suricata-1.4.7
suricata-1.4.6
suricata-1.4.5
suricata-2.0beta1
suricata-1.4.4
suricata-1.4.3
suricata-1.4.2
suricata-1.4.1
suricata-1.3.6
suricata-1.4
suricata-1.3.5
suricata-1.4rc1
suricata-1.3.4
suricata-1.4beta3
suricata-1.3.3
suricata-1.4beta2
suricata-1.3.2
suricata-1.4beta1
suricata-1.3.1
suricata-1.3
suricata-1.3rc1
suricata-1.3beta2
suricata-1.3beta1
suricata-1.2.1
suricata-1.2
suricata-1.2rc1
suricata-1.2beta1
suricata-1.1.1
suricata-0.8.2
suricata-1.0.0
suricata-1.0.1
suricata-1.0.2
suricata-1.0.3
suricata-1.0.4
suricata-1.0.5
suricata-1.1
suricata-1.1beta1
suricata-1.1beta2
suricata-1.1beta3
suricata-1.1rc1
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'd7958f7983'
${ noResults }
Commit Graph

696 Commits (d7958f7983937f48f9f5a5ade0c6f2960ec2f993)

Author SHA1 Message Date
Jamie afa8a6766e test cases for PPPoE, ICMPv4 16 years ago
Victor Julien e31563f61c Fix nfq compilation. 16 years ago
Victor Julien 720ac9efe8 Improve unittest error message if unittests are not compiled in. 16 years ago
Victor Julien 5501212e62 Fix sizeof printf related compiler warnings. 16 years ago
Brian Rectanus fa5939ca91 64 bit cleanup part2 16 years ago
Brian Rectanus 9a9b506c34 64 bit cleanup 16 years ago
Victor Julien 2a6aa00cd8 Use double for the avg counter. 16 years ago
Victor Julien 2e4cc2ad3d Convert tabs to spaces in PPPoE code. 16 years ago
Jamie 8817364ef6 initial PPPoE decoder commit 16 years ago
Victor Julien 3cf7e2e94e Add two counters: avg_pkt_size and max_pkt_size. 16 years ago
Victor Julien 1c3c13c7eb Fix missing limits.h include. 16 years ago
Anoop Saldanha 8af9f902e8 additional support for type qualifier for the stats api 16 years ago
Victor Julien 630a58b719 Fix unittests -u commandline option. 16 years ago
William Metcalf dd86b51dbc added optional option to specify signature file to load 16 years ago
Victor Julien 73217d60b9 Fix compiler warning in binsearch fix. 16 years ago
Victor Julien 9f78d47c2a Further work on the stream L7 parser, it's api and the http stub implementation. 16 years ago
Victor Julien 08ae4482a2 Fix 1 byte searching in BinSearch function. 16 years ago
Victor Julien 9b7ee312e3 Small update. 16 years ago
Victor Julien 5a9a23f9bb Update to the parsers. 16 years ago
Victor Julien 8e10844f95 Initial code of Application Layer parsing framework. Rename of L7* to AppLayer*. 16 years ago
Victor Julien 95f4706549 Merge branch 'victor_local' 16 years ago
Victor Julien 4f358c5a07 Fix list handling in reassembly 16 years ago
William Metcalf 413efe8668 fix regression in detect-parse.c 16 years ago
Jason Ish fed12be6c0 Add some usage. 16 years ago
Jason Ish f28ffebf0e Basic command line support for pcap (file, network), nfq and unit test modes. 
Just some basic command line support I had in my tree for setting the
run-mode, including unit tests.  Seems fine for simple setups, but I
think we'll want to make things setup in the config file.  Anyways, I
like to switch from file to real device without a recompile :)

Also want to check with you if the patch is formatted correctly.. I
use git format-patch then used it as a template into mutt, which seems
easier than the git send-email command.

Thanks
-- Jason
 16 years ago
Victor Julien e147b87d5f Fix small error in thread creation. 16 years ago
Victor Julien 8c0a5269c0 Fix pcap returning out of it's loop every time. 16 years ago
Anoop Saldanha 53c21410b6 improve the threading api for the ids 16 years ago
Anoop Saldanha d0e70309c0 Implements counters for the decode module 16 years ago
Victor Julien fb68d1c658 Merge branch 'de' 16 years ago
Victor Julien 63d32f723f Fix decode event compiler warning. 16 years ago
Victor Julien b7ad199c97 Fix broken test. Fix content keyword parsing not escaping properly. 16 years ago
William Metcalf ebd569ca4a Added unit tests to detect-content.c to show problems with escaped chars ; " \ : in snort rule lang 16 years ago
Victor Julien b6d55f84ac Revert default runmode change. Fix running decode event unittests twice. 16 years ago
Breno Silva c90b4e6fcd Decode event rule 16 years ago
Victor Julien 54ae12b1f9 Fixes for the stream reassembly. It turned out that using both a prev_seg pointer and a list_seg->prev pointer at the same time was not the best of ideas. So removed the prev_seg ptr. Cleaned up some copy functions too. Added some more debug statements. Made sure the L7 stuff doesn't kick in when running the unittests for reassembly. 16 years ago
Victor Julien e40495e31d Fix git merge artifact. 16 years ago
Victor Julien 387472185d Small reshuffling of the unittests, fix of a buffer overflow, hide some dbg output in the stream reassembly. 16 years ago
Victor Julien 1f995361dd Switch to pthread_cond_timedwait in streammsg queue. 16 years ago
Victor Julien b7c42d55f5 Fix setting l7 thread name. 16 years ago
Victor Julien 4dc8ebac0c Fix locking error causing deadlocks. 16 years ago
Gurvinder Singh 994473cea0 Target Based Stream Reassembly with comments 16 years ago
Victor Julien 25f696106c valgrind memcheck: fix a b3g mem leak at shutdown. 16 years ago
Victor Julien c5b2b8c082 valgrind memcheck: fix small pool memory leaks in the unittests. 16 years ago
Victor Julien dbe2a86ffe valgrind drd: fix flow mutex reinitialization in the flow subsystem when called by unittests. 16 years ago
Victor Julien f5eeea5b0b Make sure flow isn't freed while stream msgs are still in use. 16 years ago
Victor Julien ad093e3021 Add doxygen syntaxed comments to the threadvars structure. 16 years ago
Victor Julien f9227969b0 Add some dbg output to the counters. 16 years ago
Victor Julien 28ad13c7f4 Small output fix for counters. 16 years ago
Anoop Saldanha 7dcd0252ca perf task bugs fixed v3 16 years ago
Victor Julien ae2535c960 Small counter output fixes. 16 years ago
Anoop Saldanha ed820e22cf perf task bugs fixed v2 16 years ago
Anoop Saldanha fc8bb6c934 perf_task_bugs_fixex_v1 16 years ago
Anoop Saldanha a5fb240a4a Changes added for the Performance Counter API 16 years ago
Victor Julien 175eaeca93 Slightly moved around the NFQ define a bit. 16 years ago
Victor Julien e6400bf456 --enable-unittests now controls compilation of unittest code. Added crude commandline support for running unittests: ./eidps runtests 16 years ago
Victor Julien 462a346bf6 Fix printf formatting error in a pool unittest. 16 years ago
William Metcalf a3510f2025 Made NFQ optional via --enable-nfqueue, --enable-logsigs will now load local.rules in the path other fixes 16 years ago
Victor Julien 646262a755 Small cleanups. 16 years ago
William Metcalf 3046cf391d Small printf fixes to detect-flow 16 years ago
William Metcalf 9b4c0d057f Updated flow parsing code for validation, added unit tests, fixed statless check 16 years ago
Victor Julien 1dc2916c3a Add debug output to SetupPkt. 16 years ago
Victor Julien 7c36b315fd Kill the engine if one of the threads fails to initialize. 16 years ago
Victor Julien 051f21e797 Output more info about sequence gaps. 16 years ago
Victor Julien 9854c19a88 Adapt Flow subsys init function to be able to initialize quietly for us in unit tests. Add flow to PPP unit tests. Fixes a floating point exception error. 16 years ago
Victor Julien 416bdd543a Add unit test to pool for the bug from yesterday. 16 years ago
Victor Julien c42fa78287 Fix wrong segment ordering, fix stream messages not being queue'd right. 16 years ago
Victor Julien 77b19f6d82 Fix pool bug. 16 years ago
Victor Julien c53dfea379 Improve the threading code to enable a single pcap file processing thread. 16 years ago
William Metcalf d79b85d251 Small regex fix for portlists in detect-parse.c 16 years ago
William Metcalf d4e9ca8417 source-pcap.c comments modified for doxygen formatting 16 years ago
Victor Julien 689bbfdc45 Rename all structure definitions in the "typedef struct _SomeStruct" format to "typedef struct SomeStruct_" to make the Doxygen output more useful. 
Remove the Trie multi pattern matcher code. It wasn't used anymore.
 16 years ago
Victor Julien ffa013b2d8 Implement flow:established and flow:stateless 16 years ago
William Metcalf 1ae490e6c8 Small debug fix in decode-udp.c 16 years ago
Victor Julien 516ca7ead5 Fix IPv4 and IPv6 decoders not being able to deal with ethernet packets with trailing bytes. 16 years ago
Victor Julien 72b430d0bb Small pcap cleanups. 16 years ago
William Metcalf 1d1f080733 Remove Libpcap GlobalVars from source-pcap.c 16 years ago
William Metcalf 2ab8291ea8 Multi-Threading capable libpcap 16 years ago
Victor Julien 8c3d0c054b Pcap fixes. 16 years ago
William Metcalf b5c19be29c libpcap fixes for error handling and defines 16 years ago
Victor Julien 4715c2f596 Small pcap layout fixes, also made it a little bit more quiet. 16 years ago
Will Metcalf af992242a8 libpcap stuff v2 16 years ago
Victor Julien c957dc7775 Updates & cleanups to stream & l7 stuff 16 years ago
Victor Julien 76581ef967 Small layout fixes to the ppp code. 16 years ago
Breno Silva dec11038c6 PPP Support 16 years ago
Victor Julien 1c2240cfeb Stream reassembly update and WIP code for L7 modules. 16 years ago
Victor Julien 2c8df73d24 Add decoder events to ethernet and sll decoding. 16 years ago
Victor Julien eb0a5d8762 Add Address copy macro. 16 years ago
Victor Julien de1639e263 Enforce max pool size. 16 years ago
Victor Julien 51a9e36e10 Remove vips references. Rename to eidps. 16 years ago
Victor Julien 8bc0a2e465 Add tests for pool. 16 years ago
Victor Julien 668e9514d7 Pool update. Stream reassembly start. 16 years ago
Victor Julien 8397413942 Comment updates. 16 years ago
Victor Julien 9c7f5afa79 Large update: pcap support, threading fixes, initial stream tracking, time handling, pool support, runmodes, decoders added, autojunk update. 16 years ago
Victor Julien a0b390c541 Fix pktvar and http uri memory leaks. 16 years ago
Victor Julien 930aa4e038 Fix ip-only again: flowbit sigs were not handled correctly and tcp/udp sigs with ports set also were not. 16 years ago
Victor Julien a93d51fcde IP only rule loading optimization and counting fix. 16 years ago
Victor Julien 84aa365a3b Fix iponly matching. 16 years ago
Victor Julien 766ebed4d4 Fix Flowvar idx retrieval. 16 years ago
Victor Julien 2ecc7f2b4b Use different rule grouping settings for toclient and toserver. Fix flowbits accounting. 16 years ago
Victor Julien ff4b5a5db7 Add support for flowbits. 16 years ago
Victor Julien 657be002d1 Big detection engine update: scan improvements, b2g/b3g updates, bloom fixes, iponly detection implementation, dsize/flow grouping. 16 years ago
Victor Julien e877d69a2d Add compare func to hash table, fix remove in hashlist table. 16 years ago
Victor Julien 5df5b35e90 Put all globals in the detection engine ctx. Add HashList type, a hash that also stores the items ina list to it can be traversed. Many cleanups. 16 years ago
Victor Julien b2eb954099 Add b3g 3gram BNDM pattern matcher. Fix multi queue nfq initialization. Improve speed of b2g and wumanber. 16 years ago
Victor Julien ec39f5446c Fix rule tree update. Fix bloomfilter error in b2g. 16 years ago
Victor Julien 1c0ad1d415 Add implementation of the Simple BNDM 2gram pattern matcher algorithm. 16 years ago
Victor Julien efb10fc0d6 big update 16 years ago
Victor Julien 21364b34dc Fix uricontent scan for copied siggroupheads. 16 years ago
Victor Julien 69e056e33f Add the scanning to uricontent as well. 16 years ago
William Metcalf 85675ba066 added fix for compiler warning in reject code 16 years ago
Victor Julien fedcc397de Detection engine improvement: don't run pattern matcher on packets with payload sizes less that the biggest content we need to match. Add some extra stats. 16 years ago
Victor Julien 0250642cc0 Fix negated variables, add tests. 16 years ago
Victor Julien dce2c12915 Add Scan before Search to the detection engine. 16 years ago
Victor Julien 4c4862d838 Improve logging, add alert-output module, at module exit stats, add HTTP POST uri capture. 16 years ago
Victor Julien 724d942688 Fix port check. 16 years ago
Victor Julien 43571f21a4 default to all.rules 16 years ago
Victor Julien e0ed51d049 Small fixes and dbg additions. 16 years ago
Victor Julien b064d0f435 Fix sig unittests 16 years ago
Victor Julien 9b07710389 Add hashing and bloomfilter api's: now include buildsys update 16 years ago
Victor Julien 49117f5e64 Add hashing and bloomfilter api's 16 years ago
Victor Julien 27f236778a make output more quiet 16 years ago
Victor Julien 298d4be7bb Threading update for tunneling and high load 16 years ago
Victor Julien 4b6a8715fd Fix packets getting stuck in NFQ under high load. 16 years ago
Victor Julien c4f2fe4bd7 Implement per packet variables and switch the http stuff to it. 16 years ago
Victor Julien edf8650a7e Tunnel update. 16 years ago
Victor Julien 835d609fc5 Small format fix. 16 years ago
Victor Julien 8cda70668c Tunnel fixes. 16 years ago
Victor Julien 28d9415e37 New approach to tunnel decoding. 16 years ago
Victor Julien 982542cde6 New approach for the empty packet queue issue. Now we just wait until it's no longer empty. 16 years ago
Victor Julien 2f6a186078 Alloc a new packet if the queue is empty. Fix this. 16 years ago
Victor Julien a454fe4fb7 Small fixes 16 years ago
Victor Julien 274d92478e Alloc a new packet if the queue is empty. 16 years ago
Victor Julien da3125e888 Fix a Floating point exception error. 16 years ago
William Metcalf 817d0e0855 added macros for ICMP defines 16 years ago
William Metcalf 7006085195 udp decoding added icmp unreachables added to reject 16 years ago
Victor Julien 3f7195454b Big detection engine update. 16 years ago
Victor Julien ea5bb1c8d5 Small update and new tests for wu-manber. 16 years ago
Victor Julien ebf41c3b1e Remove obsolete decode-http files. 16 years ago
Victor Julien 1cb274a39a Update build sys 16 years ago
Victor Julien aecda426bf Update the wu-manber pattern matcher: it supports dynamic hash sizes and improves init times. 16 years ago
Victor Julien 54ffe2053e Large detection engine update. 16 years ago
Victor Julien 8b3d06fd92 Rename some detection engine related files. 16 years ago
Victor Julien f3a94413db Properly support 'alert ip' rules. Add support for handling ip only rules differently. 16 years ago
Victor Julien dee5ab1aa3 Fix uricontent mpm ctx comparison. 16 years ago
Victor Julien fed6926809 Small cleanups 16 years ago
Victor Julien dc48c58473 Switch to using a detection engine ctx. 16 years ago
Victor Julien 171c8c777d Group signatures by protocol. 16 years ago
Victor Julien 3446566e44 Style cleanups for resets. 16 years ago
Victor Julien 45f83f7636 branching test 16 years ago
William Metcalf 0ffa1c2465 updates for configure.in, added reject code, some decode stuff for tcp 16 years ago
Victor Julien 9e5049cddc Improve memory handling and parsing of the msg rule keyword. 16 years ago
Victor Julien eb1c4e4987 Large update to the detection engine. Greatly improve initialization speed and memory usage. 16 years ago
Victor Julien b1a13c89bd Improve memory handling of the pcre rule keyword. 16 years ago
Victor Julien a603577132 Small update to the pcre used for signature parsing. 16 years ago
Victor Julien 0489370f5b Big speedup of the initialization code for signatures. Contains WIP code as well. 16 years ago
Victor Julien ac60f32197 Make nocase keyword initilization failure fatal and slightly improve the error message it prints. 16 years ago
Victor Julien 84087e7077 Fix a memory error in the addresslist parsing code. Add a functions aimed at speeding up the signature initialization code. 16 years ago
Victor Julien b50fc8aecd Speed up appending of sigs to a sig group head by using a tail ptr. 16 years ago
Victor Julien 0726efead9 Support address lists. 16 years ago
Victor Julien f2fbf395b8 Fix mixed up CI and CS searching in WuManber. Add better tests. 16 years ago
Victor Julien 69162f9cd0 Fix issue with log-httplog where it logged uri's of previous packets because of a broken uri check. 16 years ago
Victor Julien 05fd319f6c Add log-httplog module that logs http request uri's, hosts and useragents to a per line text format. 16 years ago
Victor Julien eaaeb30cd6 Add noalert keyword for use with sigs that are used for capturing only. 16 years ago
Victor Julien 63bb777100 Use a default prio of 3. 16 years ago
Victor Julien f0ed41fb0a Support priority keyword, add priority to alert-fastlog. 16 years ago
Victor Julien 867d493d7f Source NFQ update... less hackish, but still needs work as soon as we know how to do configuration. 16 years ago
Victor Julien dc224cb2d2 Large update containing the first step to making the detection engine use rule groups. Address based rule groups are now implemented. 16 years ago
Victor Julien 9afa171d71 cosmetic update of alert-fastlog Will 16 years ago
Victor Julien a7ee4c5b1b Update todo of alert-fastlog 16 years ago
Victor Julien 3df4b7da2b Set p->proto and add TCP, UDP, etc macros. 16 years ago
Victor Julien b7bc35e8b2 support for 'negation' in addresses and the 'any' special case. 16 years ago
Victor Julien 876f0c95c7 Signature rule keywords are case insensitive. Support that. 16 years ago
Victor Julien d036264f80 Cleanup signature parsing and other detect.c parts. 16 years ago
Victor Julien f1db87276c Start on addr and proto parsing in rules. 16 years ago
Victor Julien 6c1f2071be Add unittest registration to the threading modules api. 16 years ago
Victor Julien cd19ee8bf2 Fix crash when to_client traffic was scanned for uricontent when there was no uri available... 16 years ago
Victor Julien f77c654d13 Further develop the address api. Added dynamic group head support. 16 years ago
Victor Julien 3ec5f66729 Fix some address code related compiler warnings. 16 years ago
Victor Julien d2b089f359 Fix including the header for htonl breaking the code. 16 years ago
Victor Julien bbbb644dea Add error checking to CIDRGet and make it quiet. 16 years ago
Victor Julien a798f84bf5 Add simple test report to unittesting. 16 years ago
Victor Julien 151512a45c Split up address code in ipv4 and ipv6 specific files. Cleanups. 16 years ago
Victor Julien 41647a5430 small fixes for Wills patch 16 years ago
William Metcalf 559edc01e3 NFQUE drop support added with ident of 4 :-( 16 years ago
Victor Julien 37e31e0240 Implement the address code for IPv6 as well. 16 years ago
Victor Julien b8ad4adf81 complete rename of address2 to address 16 years ago
Victor Julien 9c321af65e Rename address2 to address 16 years ago
Victor Julien e746a40d2e No longer track Makefile.in files in Git. 16 years ago
Victor Julien 28b0d82169 Remove partial and broken address handling implementation now address2 is working. 16 years ago
Victor Julien fad31a43c2 WIP addressing handling. Big progress. Address groups for ipv4 more or less getting shape. 16 years ago
William Metcalf 3488cf1a93 fixed sig written with ?<http_uri 16 years ago
William Metcalf 87411594e2 groups fixed for pcre < 7 16 years ago
Victor Julien 7aada782a4 WIP address matching stuff 16 years ago
Victor Julien ec37171d36 Add copyright msg (test commit). 16 years ago
Victor Julien bab4b62376 Initial add of the files. 16 years ago