696 Commits (d7958f7983937f48f9f5a5ade0c6f2960ec2f993)

Author	SHA1	Message	Date
Victor Julien	ae2535c960	Small counter output fixes.	16 years ago
Anoop Saldanha	ed820e22cf	perf task bugs fixed v2	16 years ago
Anoop Saldanha	fc8bb6c934	perf_task_bugs_fixex_v1	16 years ago
Anoop Saldanha	a5fb240a4a	Changes added for the Performance Counter API	16 years ago
Victor Julien	175eaeca93	Slightly moved around the NFQ define a bit.	16 years ago
Victor Julien	e6400bf456	--enable-unittests now controls compilation of unittest code. Added crude commandline support for running unittests: ./eidps runtests	16 years ago
Victor Julien	462a346bf6	Fix printf formatting error in a pool unittest.	16 years ago
William Metcalf	a3510f2025	Made NFQ optional via --enable-nfqueue, --enable-logsigs will now load local.rules in the path other fixes	16 years ago
Victor Julien	646262a755	Small cleanups.	16 years ago
William Metcalf	3046cf391d	Small printf fixes to detect-flow	16 years ago
William Metcalf	9b4c0d057f	Updated flow parsing code for validation, added unit tests, fixed statless check	16 years ago
Victor Julien	1dc2916c3a	Add debug output to SetupPkt.	16 years ago
Victor Julien	7c36b315fd	Kill the engine if one of the threads fails to initialize.	16 years ago
Victor Julien	051f21e797	Output more info about sequence gaps.	16 years ago
Victor Julien	9854c19a88	Adapt Flow subsys init function to be able to initialize quietly for us in unit tests. Add flow to PPP unit tests. Fixes a floating point exception error.	16 years ago
Victor Julien	416bdd543a	Add unit test to pool for the bug from yesterday.	16 years ago
Victor Julien	c42fa78287	Fix wrong segment ordering, fix stream messages not being queue'd right.	16 years ago
Victor Julien	77b19f6d82	Fix pool bug.	16 years ago
Victor Julien	c53dfea379	Improve the threading code to enable a single pcap file processing thread.	16 years ago
William Metcalf	d79b85d251	Small regex fix for portlists in detect-parse.c	16 years ago
William Metcalf	d4e9ca8417	source-pcap.c comments modified for doxygen formatting	16 years ago
Victor Julien	689bbfdc45	Rename all structure definitions in the "typedef struct _SomeStruct" format to "typedef struct SomeStruct_" to make the Doxygen output more useful. ... Remove the Trie multi pattern matcher code. It wasn't used anymore.	16 years ago
Victor Julien	ffa013b2d8	Implement flow:established and flow:stateless	16 years ago
William Metcalf	1ae490e6c8	Small debug fix in decode-udp.c	16 years ago
Victor Julien	516ca7ead5	Fix IPv4 and IPv6 decoders not being able to deal with ethernet packets with trailing bytes.	16 years ago
Victor Julien	72b430d0bb	Small pcap cleanups.	16 years ago
William Metcalf	1d1f080733	Remove Libpcap GlobalVars from source-pcap.c	16 years ago
William Metcalf	2ab8291ea8	Multi-Threading capable libpcap	16 years ago
Victor Julien	8c3d0c054b	Pcap fixes.	16 years ago
William Metcalf	b5c19be29c	libpcap fixes for error handling and defines	16 years ago
Victor Julien	4715c2f596	Small pcap layout fixes, also made it a little bit more quiet.	16 years ago
Will Metcalf	af992242a8	libpcap stuff v2	16 years ago
Victor Julien	c957dc7775	Updates & cleanups to stream & l7 stuff	16 years ago
Victor Julien	76581ef967	Small layout fixes to the ppp code.	16 years ago
Breno Silva	dec11038c6	PPP Support	16 years ago
Victor Julien	1c2240cfeb	Stream reassembly update and WIP code for L7 modules.	16 years ago
Victor Julien	2c8df73d24	Add decoder events to ethernet and sll decoding.	16 years ago
Victor Julien	eb0a5d8762	Add Address copy macro.	16 years ago
Victor Julien	de1639e263	Enforce max pool size.	16 years ago
Victor Julien	51a9e36e10	Remove vips references. Rename to eidps.	16 years ago
Victor Julien	8bc0a2e465	Add tests for pool.	16 years ago
Victor Julien	668e9514d7	Pool update. Stream reassembly start.	16 years ago
Victor Julien	8397413942	Comment updates.	16 years ago
Victor Julien	9c7f5afa79	Large update: pcap support, threading fixes, initial stream tracking, time handling, pool support, runmodes, decoders added, autojunk update.	16 years ago
Victor Julien	a0b390c541	Fix pktvar and http uri memory leaks.	16 years ago
Victor Julien	930aa4e038	Fix ip-only again: flowbit sigs were not handled correctly and tcp/udp sigs with ports set also were not.	16 years ago
Victor Julien	a93d51fcde	IP only rule loading optimization and counting fix.	16 years ago
Victor Julien	84aa365a3b	Fix iponly matching.	16 years ago
Victor Julien	766ebed4d4	Fix Flowvar idx retrieval.	16 years ago
Victor Julien	2ecc7f2b4b	Use different rule grouping settings for toclient and toserver. Fix flowbits accounting.	16 years ago
Victor Julien	ff4b5a5db7	Add support for flowbits.	16 years ago
Victor Julien	657be002d1	Big detection engine update: scan improvements, b2g/b3g updates, bloom fixes, iponly detection implementation, dsize/flow grouping.	16 years ago
Victor Julien	e877d69a2d	Add compare func to hash table, fix remove in hashlist table.	16 years ago
Victor Julien	5df5b35e90	Put all globals in the detection engine ctx. Add HashList type, a hash that also stores the items ina list to it can be traversed. Many cleanups.	16 years ago
Victor Julien	b2eb954099	Add b3g 3gram BNDM pattern matcher. Fix multi queue nfq initialization. Improve speed of b2g and wumanber.	16 years ago
Victor Julien	ec39f5446c	Fix rule tree update. Fix bloomfilter error in b2g.	16 years ago
Victor Julien	1c0ad1d415	Add implementation of the Simple BNDM 2gram pattern matcher algorithm.	16 years ago
Victor Julien	efb10fc0d6	big update	16 years ago
Victor Julien	21364b34dc	Fix uricontent scan for copied siggroupheads.	16 years ago
Victor Julien	69e056e33f	Add the scanning to uricontent as well.	16 years ago
William Metcalf	85675ba066	added fix for compiler warning in reject code	16 years ago
Victor Julien	fedcc397de	Detection engine improvement: don't run pattern matcher on packets with payload sizes less that the biggest content we need to match. Add some extra stats.	16 years ago
Victor Julien	0250642cc0	Fix negated variables, add tests.	16 years ago
Victor Julien	dce2c12915	Add Scan before Search to the detection engine.	16 years ago
Victor Julien	4c4862d838	Improve logging, add alert-output module, at module exit stats, add HTTP POST uri capture.	16 years ago
Victor Julien	724d942688	Fix port check.	16 years ago
Victor Julien	43571f21a4	default to all.rules	16 years ago
Victor Julien	e0ed51d049	Small fixes and dbg additions.	16 years ago
Victor Julien	b064d0f435	Fix sig unittests	16 years ago
Victor Julien	9b07710389	Add hashing and bloomfilter api's: now include buildsys update	16 years ago
Victor Julien	49117f5e64	Add hashing and bloomfilter api's	16 years ago
Victor Julien	27f236778a	make output more quiet	16 years ago
Victor Julien	298d4be7bb	Threading update for tunneling and high load	16 years ago
Victor Julien	4b6a8715fd	Fix packets getting stuck in NFQ under high load.	16 years ago
Victor Julien	c4f2fe4bd7	Implement per packet variables and switch the http stuff to it.	16 years ago
Victor Julien	edf8650a7e	Tunnel update.	16 years ago
Victor Julien	835d609fc5	Small format fix.	16 years ago
Victor Julien	8cda70668c	Tunnel fixes.	16 years ago
Victor Julien	28d9415e37	New approach to tunnel decoding.	16 years ago
Victor Julien	982542cde6	New approach for the empty packet queue issue. Now we just wait until it's no longer empty.	16 years ago
Victor Julien	2f6a186078	Alloc a new packet if the queue is empty. Fix this.	16 years ago
Victor Julien	a454fe4fb7	Small fixes	16 years ago
Victor Julien	274d92478e	Alloc a new packet if the queue is empty.	16 years ago
Victor Julien	da3125e888	Fix a Floating point exception error.	16 years ago
William Metcalf	817d0e0855	added macros for ICMP defines	16 years ago
William Metcalf	7006085195	udp decoding added icmp unreachables added to reject	16 years ago
Victor Julien	3f7195454b	Big detection engine update.	16 years ago
Victor Julien	ea5bb1c8d5	Small update and new tests for wu-manber.	16 years ago
Victor Julien	ebf41c3b1e	Remove obsolete decode-http files.	16 years ago
Victor Julien	1cb274a39a	Update build sys	16 years ago
Victor Julien	aecda426bf	Update the wu-manber pattern matcher: it supports dynamic hash sizes and improves init times.	16 years ago
Victor Julien	54ffe2053e	Large detection engine update.	16 years ago
Victor Julien	8b3d06fd92	Rename some detection engine related files.	16 years ago
Victor Julien	f3a94413db	Properly support 'alert ip' rules. Add support for handling ip only rules differently.	16 years ago
Victor Julien	dee5ab1aa3	Fix uricontent mpm ctx comparison.	16 years ago
Victor Julien	fed6926809	Small cleanups	16 years ago
Victor Julien	dc48c58473	Switch to using a detection engine ctx.	16 years ago
Victor Julien	171c8c777d	Group signatures by protocol.	16 years ago
Victor Julien	3446566e44	Style cleanups for resets.	16 years ago
Victor Julien	45f83f7636	branching test	16 years ago
William Metcalf	0ffa1c2465	updates for configure.in, added reject code, some decode stuff for tcp	16 years ago
Victor Julien	9e5049cddc	Improve memory handling and parsing of the msg rule keyword.	16 years ago
Victor Julien	eb1c4e4987	Large update to the detection engine. Greatly improve initialization speed and memory usage.	16 years ago
Victor Julien	b1a13c89bd	Improve memory handling of the pcre rule keyword.	16 years ago
Victor Julien	a603577132	Small update to the pcre used for signature parsing.	16 years ago
Victor Julien	0489370f5b	Big speedup of the initialization code for signatures. Contains WIP code as well.	16 years ago
Victor Julien	ac60f32197	Make nocase keyword initilization failure fatal and slightly improve the error message it prints.	16 years ago
Victor Julien	84087e7077	Fix a memory error in the addresslist parsing code. Add a functions aimed at speeding up the signature initialization code.	16 years ago
Victor Julien	b50fc8aecd	Speed up appending of sigs to a sig group head by using a tail ptr.	16 years ago
Victor Julien	0726efead9	Support address lists.	16 years ago
Victor Julien	f2fbf395b8	Fix mixed up CI and CS searching in WuManber. Add better tests.	16 years ago
Victor Julien	69162f9cd0	Fix issue with log-httplog where it logged uri's of previous packets because of a broken uri check.	16 years ago
Victor Julien	05fd319f6c	Add log-httplog module that logs http request uri's, hosts and useragents to a per line text format.	16 years ago
Victor Julien	eaaeb30cd6	Add noalert keyword for use with sigs that are used for capturing only.	16 years ago
Victor Julien	63bb777100	Use a default prio of 3.	16 years ago
Victor Julien	f0ed41fb0a	Support priority keyword, add priority to alert-fastlog.	16 years ago
Victor Julien	867d493d7f	Source NFQ update... less hackish, but still needs work as soon as we know how to do configuration.	16 years ago
Victor Julien	dc224cb2d2	Large update containing the first step to making the detection engine use rule groups. Address based rule groups are now implemented.	16 years ago
Victor Julien	9afa171d71	cosmetic update of alert-fastlog Will	16 years ago
Victor Julien	a7ee4c5b1b	Update todo of alert-fastlog	16 years ago
Victor Julien	3df4b7da2b	Set p->proto and add TCP, UDP, etc macros.	16 years ago
Victor Julien	b7bc35e8b2	support for 'negation' in addresses and the 'any' special case.	16 years ago
Victor Julien	876f0c95c7	Signature rule keywords are case insensitive. Support that.	16 years ago
Victor Julien	d036264f80	Cleanup signature parsing and other detect.c parts.	16 years ago
Victor Julien	f1db87276c	Start on addr and proto parsing in rules.	16 years ago
Victor Julien	6c1f2071be	Add unittest registration to the threading modules api.	16 years ago
Victor Julien	cd19ee8bf2	Fix crash when to_client traffic was scanned for uricontent when there was no uri available...	16 years ago
Victor Julien	f77c654d13	Further develop the address api. Added dynamic group head support.	16 years ago
Victor Julien	3ec5f66729	Fix some address code related compiler warnings.	16 years ago
Victor Julien	d2b089f359	Fix including the header for htonl breaking the code.	16 years ago
Victor Julien	bbbb644dea	Add error checking to CIDRGet and make it quiet.	16 years ago
Victor Julien	a798f84bf5	Add simple test report to unittesting.	16 years ago
Victor Julien	151512a45c	Split up address code in ipv4 and ipv6 specific files. Cleanups.	16 years ago
Victor Julien	41647a5430	small fixes for Wills patch	16 years ago
William Metcalf	559edc01e3	NFQUE drop support added with ident of 4 :-(	16 years ago
Victor Julien	37e31e0240	Implement the address code for IPv6 as well.	16 years ago
Victor Julien	b8ad4adf81	complete rename of address2 to address	16 years ago
Victor Julien	9c321af65e	Rename address2 to address	16 years ago
Victor Julien	e746a40d2e	No longer track Makefile.in files in Git.	16 years ago
Victor Julien	28b0d82169	Remove partial and broken address handling implementation now address2 is working.	16 years ago
Victor Julien	fad31a43c2	WIP addressing handling. Big progress. Address groups for ipv4 more or less getting shape.	16 years ago
William Metcalf	3488cf1a93	fixed sig written with ?<http_uri	16 years ago
William Metcalf	87411594e2	groups fixed for pcre < 7	16 years ago
Victor Julien	7aada782a4	WIP address matching stuff	16 years ago
Victor Julien	ec37171d36	Add copyright msg (test commit).	16 years ago
Victor Julien	bab4b62376	Initial add of the files.	16 years ago