696 Commits (d7958f7983937f48f9f5a5ade0c6f2960ec2f993)

Author	SHA1	Message	Date
Victor Julien	ff4b5a5db7	Add support for flowbits.	16 years ago
Victor Julien	657be002d1	Big detection engine update: scan improvements, b2g/b3g updates, bloom fixes, iponly detection implementation, dsize/flow grouping.	16 years ago
Victor Julien	e877d69a2d	Add compare func to hash table, fix remove in hashlist table.	16 years ago
Victor Julien	5df5b35e90	Put all globals in the detection engine ctx. Add HashList type, a hash that also stores the items ina list to it can be traversed. Many cleanups.	16 years ago
Victor Julien	b2eb954099	Add b3g 3gram BNDM pattern matcher. Fix multi queue nfq initialization. Improve speed of b2g and wumanber.	16 years ago
Victor Julien	ec39f5446c	Fix rule tree update. Fix bloomfilter error in b2g.	16 years ago
Victor Julien	1c0ad1d415	Add implementation of the Simple BNDM 2gram pattern matcher algorithm.	16 years ago
Victor Julien	efb10fc0d6	big update	16 years ago
Victor Julien	21364b34dc	Fix uricontent scan for copied siggroupheads.	16 years ago
Victor Julien	69e056e33f	Add the scanning to uricontent as well.	16 years ago
William Metcalf	85675ba066	added fix for compiler warning in reject code	16 years ago
Victor Julien	fedcc397de	Detection engine improvement: don't run pattern matcher on packets with payload sizes less that the biggest content we need to match. Add some extra stats.	16 years ago
Victor Julien	0250642cc0	Fix negated variables, add tests.	16 years ago
Victor Julien	dce2c12915	Add Scan before Search to the detection engine.	16 years ago
Victor Julien	4c4862d838	Improve logging, add alert-output module, at module exit stats, add HTTP POST uri capture.	16 years ago
Victor Julien	724d942688	Fix port check.	16 years ago
Victor Julien	43571f21a4	default to all.rules	16 years ago
Victor Julien	e0ed51d049	Small fixes and dbg additions.	16 years ago
Victor Julien	b064d0f435	Fix sig unittests	16 years ago
Victor Julien	9b07710389	Add hashing and bloomfilter api's: now include buildsys update	16 years ago
Victor Julien	49117f5e64	Add hashing and bloomfilter api's	16 years ago
Victor Julien	27f236778a	make output more quiet	16 years ago
Victor Julien	298d4be7bb	Threading update for tunneling and high load	16 years ago
Victor Julien	4b6a8715fd	Fix packets getting stuck in NFQ under high load.	16 years ago
Victor Julien	c4f2fe4bd7	Implement per packet variables and switch the http stuff to it.	16 years ago
Victor Julien	edf8650a7e	Tunnel update.	16 years ago
Victor Julien	835d609fc5	Small format fix.	16 years ago
Victor Julien	8cda70668c	Tunnel fixes.	16 years ago
Victor Julien	28d9415e37	New approach to tunnel decoding.	16 years ago
Victor Julien	982542cde6	New approach for the empty packet queue issue. Now we just wait until it's no longer empty.	16 years ago
Victor Julien	2f6a186078	Alloc a new packet if the queue is empty. Fix this.	16 years ago
Victor Julien	a454fe4fb7	Small fixes	16 years ago
Victor Julien	274d92478e	Alloc a new packet if the queue is empty.	16 years ago
Victor Julien	da3125e888	Fix a Floating point exception error.	16 years ago
William Metcalf	817d0e0855	added macros for ICMP defines	16 years ago
William Metcalf	7006085195	udp decoding added icmp unreachables added to reject	16 years ago
Victor Julien	3f7195454b	Big detection engine update.	16 years ago
Victor Julien	ea5bb1c8d5	Small update and new tests for wu-manber.	16 years ago
Victor Julien	ebf41c3b1e	Remove obsolete decode-http files.	16 years ago
Victor Julien	1cb274a39a	Update build sys	16 years ago
Victor Julien	aecda426bf	Update the wu-manber pattern matcher: it supports dynamic hash sizes and improves init times.	16 years ago
Victor Julien	54ffe2053e	Large detection engine update.	16 years ago
Victor Julien	8b3d06fd92	Rename some detection engine related files.	16 years ago
Victor Julien	f3a94413db	Properly support 'alert ip' rules. Add support for handling ip only rules differently.	16 years ago
Victor Julien	dee5ab1aa3	Fix uricontent mpm ctx comparison.	16 years ago
Victor Julien	fed6926809	Small cleanups	16 years ago
Victor Julien	dc48c58473	Switch to using a detection engine ctx.	16 years ago
Victor Julien	171c8c777d	Group signatures by protocol.	16 years ago
Victor Julien	3446566e44	Style cleanups for resets.	16 years ago
Victor Julien	45f83f7636	branching test	16 years ago
William Metcalf	0ffa1c2465	updates for configure.in, added reject code, some decode stuff for tcp	16 years ago
Victor Julien	9e5049cddc	Improve memory handling and parsing of the msg rule keyword.	16 years ago
Victor Julien	eb1c4e4987	Large update to the detection engine. Greatly improve initialization speed and memory usage.	16 years ago
Victor Julien	b1a13c89bd	Improve memory handling of the pcre rule keyword.	16 years ago
Victor Julien	a603577132	Small update to the pcre used for signature parsing.	16 years ago
Victor Julien	0489370f5b	Big speedup of the initialization code for signatures. Contains WIP code as well.	16 years ago
Victor Julien	ac60f32197	Make nocase keyword initilization failure fatal and slightly improve the error message it prints.	16 years ago
Victor Julien	84087e7077	Fix a memory error in the addresslist parsing code. Add a functions aimed at speeding up the signature initialization code.	16 years ago
Victor Julien	b50fc8aecd	Speed up appending of sigs to a sig group head by using a tail ptr.	16 years ago
Victor Julien	0726efead9	Support address lists.	16 years ago
Victor Julien	f2fbf395b8	Fix mixed up CI and CS searching in WuManber. Add better tests.	16 years ago
Victor Julien	69162f9cd0	Fix issue with log-httplog where it logged uri's of previous packets because of a broken uri check.	16 years ago
Victor Julien	05fd319f6c	Add log-httplog module that logs http request uri's, hosts and useragents to a per line text format.	16 years ago
Victor Julien	eaaeb30cd6	Add noalert keyword for use with sigs that are used for capturing only.	16 years ago
Victor Julien	63bb777100	Use a default prio of 3.	16 years ago
Victor Julien	f0ed41fb0a	Support priority keyword, add priority to alert-fastlog.	16 years ago
Victor Julien	867d493d7f	Source NFQ update... less hackish, but still needs work as soon as we know how to do configuration.	16 years ago
Victor Julien	dc224cb2d2	Large update containing the first step to making the detection engine use rule groups. Address based rule groups are now implemented.	16 years ago
Victor Julien	9afa171d71	cosmetic update of alert-fastlog Will	16 years ago
Victor Julien	a7ee4c5b1b	Update todo of alert-fastlog	16 years ago
Victor Julien	3df4b7da2b	Set p->proto and add TCP, UDP, etc macros.	16 years ago
Victor Julien	b7bc35e8b2	support for 'negation' in addresses and the 'any' special case.	16 years ago
Victor Julien	876f0c95c7	Signature rule keywords are case insensitive. Support that.	16 years ago
Victor Julien	d036264f80	Cleanup signature parsing and other detect.c parts.	16 years ago
Victor Julien	f1db87276c	Start on addr and proto parsing in rules.	16 years ago
Victor Julien	6c1f2071be	Add unittest registration to the threading modules api.	16 years ago
Victor Julien	cd19ee8bf2	Fix crash when to_client traffic was scanned for uricontent when there was no uri available...	16 years ago
Victor Julien	f77c654d13	Further develop the address api. Added dynamic group head support.	16 years ago
Victor Julien	3ec5f66729	Fix some address code related compiler warnings.	16 years ago
Victor Julien	d2b089f359	Fix including the header for htonl breaking the code.	16 years ago
Victor Julien	bbbb644dea	Add error checking to CIDRGet and make it quiet.	16 years ago
Victor Julien	a798f84bf5	Add simple test report to unittesting.	16 years ago
Victor Julien	151512a45c	Split up address code in ipv4 and ipv6 specific files. Cleanups.	16 years ago
Victor Julien	41647a5430	small fixes for Wills patch	16 years ago
William Metcalf	559edc01e3	NFQUE drop support added with ident of 4 :-(	16 years ago
Victor Julien	37e31e0240	Implement the address code for IPv6 as well.	16 years ago
Victor Julien	b8ad4adf81	complete rename of address2 to address	16 years ago
Victor Julien	9c321af65e	Rename address2 to address	16 years ago
Victor Julien	e746a40d2e	No longer track Makefile.in files in Git.	16 years ago
Victor Julien	28b0d82169	Remove partial and broken address handling implementation now address2 is working.	16 years ago
Victor Julien	fad31a43c2	WIP addressing handling. Big progress. Address groups for ipv4 more or less getting shape.	16 years ago
William Metcalf	3488cf1a93	fixed sig written with ?<http_uri	16 years ago
William Metcalf	87411594e2	groups fixed for pcre < 7	16 years ago
Victor Julien	7aada782a4	WIP address matching stuff	16 years ago
Victor Julien	ec37171d36	Add copyright msg (test commit).	16 years ago
Victor Julien	bab4b62376	Initial add of the files.	16 years ago