16190 Commits (da1645b3e1ef51f9f0e4b05c76cae84a9b4d71e4)

 

All Branches   

Search

Author	SHA1	Message	Date
Victor Julien	da1645b3e1	rust: bump time to most recent ... Fixes build on rustc 1.80. Bumps the MSRV to 1.67.1. Bug: #7130.	1 year ago
Victor Julien	058ad87089	rust: set MSRV to 1.67.1 ... This is needed for updating the ``time`` crate.	1 year ago
Victor Julien	e480938724	github-actions: switch dist builders to ubuntu 22.04 ... Part of bumping MSRV. 22.04 is the first Ubuntu release to ship a new enough Sphinx.	1 year ago
Victor Julien	f94988d050	github-actions: update for MSRV 1.67.1	1 year ago
Victor Julien	a0bf282963	rust: address clippy errors	1 year ago
Victor Julien	5bda7b5017	ssh/hassh: fix clippy warning	1 year ago
Shivani Bhardwaj	638b5c4da7	eve/stats: add description for flow stats ... Ticket 6434	1 year ago
Philippe Antoine	7617fe5ab0	ldap: reset tx_index_completed on tx removal ... So, that this index does not overflow	1 year ago
Philippe Antoine	7f6c963ac4	doh2: log like dns v3	1 year ago
Philippe Antoine	8aa2964e73	doh: move fields into dedicated Optional struct ... So as to consume less memory for HTTP2Transaction	1 year ago
Philippe Antoine	6e12475f48	doh2: handle dns message in POST requests ... Ticket: 5773 Handles both directions the same way for data if content type is application/dns-message	1 year ago
Philippe Antoine	bd5ad0d74a	util/profiling: remove assertion ... Now a flow alproto can be changed by a call to AppLayerParserParse when HTTP2 forces the flow to turn into DOH2.	1 year ago
Philippe Antoine	0ccad8fd88	doh: make dns and http keywords for doh2 ... Ticket: 5773	1 year ago
Philippe Antoine	1e82e20c65	doh: implement dns over http2 app-proto ... Ticket: 5773	1 year ago
Philippe Antoine	46d98ae81c	http2: log dns if DoH is recognized ... Ticket: 5773	1 year ago
Philippe Antoine	29d9dc2729	http2: rustfmt	1 year ago
Philippe Antoine	b5f55b5b1f	dns: prepare for dns over http2 support ... by making tx parsing and creation more easily available, without needing a dns state. Dns event NotResponse is now set on the right tx, and not the one before. Also debug log for Z-flag on request says "request" instead of "response" Also rustfmt dns.rs	1 year ago
Philippe Antoine	eff7b52327	build: Wimplicit-int-float-conversion checked with --enable-warnings ... When configure is used with --enable-warnings, we try to add most warning flags that should pass. This commits adds the warning Wimplicit-int-float-conversion	1 year ago
Philippe Antoine	10ef4e832f	runmodes: fix -Wshorten-64-to-32 warnings ... Ticket: #6186	1 year ago
Philippe Antoine	ce2c087e92	defrag: fix -Wshorten-64-to-32 warnings ... Ticket: #6186	1 year ago
Philippe Antoine	bb9a45cfd0	datasets: fix -Wshorten-64-to-32 warnings ... Ticket: #6186	1 year ago
Victor Julien	6598a6953e	rust/ldap: add ldap-parser to Cargo.lock.in	1 year ago
Giuseppe Longo	70ed9f91d8	doc: add ldap protocol	1 year ago
Giuseppe Longo	910a5b226c	rust/ldap: implement logger	1 year ago
Giuseppe Longo	93da339975	rust/ldap: implement app-layer	1 year ago
Giuseppe Longo	ce7e190501	rust/ldap: implement types and filters ... This implementation adds types and filters specified in the LDAP RFC to work with the ldap_parser. Although using the parser directly would be best, strange behavior has been observed during transaction logging. It appears that C pointers are being overwritten, leading to incorrect output when LDAP fields are logged.	1 year ago
Philippe Antoine	b8c12090f7	smtp: add port 465 for probing	1 year ago
Philippe Antoine	eac9cd959f	smtp: do not return error on NULL buffer for end of stream	1 year ago
Philippe Antoine	e2d1d05878	smtp: recognize more reply codes ... Ticket: 6821	1 year ago
Philippe Antoine	694b2797cd	ftp: adds server side detection	1 year ago
Philippe Antoine	cc3dde8ada	smtp: adds server side detection ... Ticket: #1125	1 year ago
mmaatuq	64d18e3cc2	imap: extend detection patterns ... Ticket: #2886 Signed-off-by: mmaatuq <mahmoudmatook.mm@gmail.com>	1 year ago
Philippe Antoine	bce8f4b853	detect/ssh: remove deprecated keywords ... Ticket: 2377	1 year ago
Philippe Antoine	0a1062fad2	detect/mqtt: move keywords to rust ... Ticket: 4863 On the way, convert some keywords to use the first-class integer support. And helpers for pure rust the support for multi-buffer. Move the C unit tests about keyword mqtt.protocol_version to unit tests for generic integer parsing, and test version 5 instead of testing twice version 3. Also iterate all tx's messages for reason code as is done for other keywords. And allow detection on empty topics.	1 year ago
Philippe Antoine	f4e7d1e217	detect: helper function for multibuffer registration ... So that rust does not need to know about SIG_FLAG_TOCLIENT value	1 year ago
Philippe Antoine	4e074b8f38	output/alert: remove now unused include ... Including the mqtt one, now that it is almost rust only	1 year ago
Philippe Antoine	ad08309c75	mqtt: parse and store raw connect flags ... for easier later matching	1 year ago
Philippe Antoine	9adf4224e4	rust/derive: string enumeration become case insensitive ... As needed for MQTTTypeCode which accepts both CONNECT uppercase and unassigned lowercase	1 year ago
Philippe Antoine	3c5ad7a23d	rust/derive: transform all uppercase names the right way ... So that MQTTTypeCode::CONNECT does not become c_o_n_n_e_c_t	1 year ago
Philippe Antoine	daad7f2d41	detect/integers: harmonize parser return handling ... Ticket: 7172 When parsing an integer for a rule keyword fails, we return error straight away, without bothering to try to free the NULL pointer. On the way, remove some one-line wrapper around DetectUxParse	1 year ago
Jason Ish	fcc1b1067b	eve/dns: make version required ... The "eve.version" field is not always logged. Update the schema to enforce that it is, and fix it for records that don't log it. Ticket: #7167	1 year ago
Jason Ish	6d5022cd1e	github-ci: pf-ring build	1 year ago
Jason Ish	5f516c5896	doc: add pf-ring plugin upgrade notes ... Ticket: #7162	1 year ago
Jason Ish	4d0e09c6b2	configure: fail on --enable-pfring and --disable-shared ... Plugins can't be build using the standard autoconf/automake methods. We can get around this by creating our own Makefiles, but they're often less portable. For now, fail during ./configure instead of during compile.	1 year ago
Jason Ish	b318e78b3a	pf-ring: bring back command line arguments ... Bring back the pf-ring command line arguments, but instead of initializing the pfring runmode, initialize the capture plugin runmode with a plugin named "pfring". Ticket: #7162	1 year ago
Jason Ish	1173bb788e	.gitignore: globally ignore .la files ... With automake and libraries, these files are creeping in.	1 year ago
Jason Ish	155501f250	pf-ring: load plugin by default ... Ticket: #7162	1 year ago
Jason Ish	79df4b4c89	pf-ring: add as plugin ... Ticket: #7162	1 year ago
Jason Ish	c3092b6e5a	pf-ring: remove, to make room for plugin ... Ticket: #7162	1 year ago
Victor Julien	223a4194ea	config: switch default config to IEEE 1541 notation	1 year ago