Victor Julien
da423a59d5
Allow users of the alert-syslog to set the identity.
14 years ago
Victor Julien
07776c113b
Fix valgrind error on pfring_recv, rename threads from RecvPfring to RxPfring so the name still looks right for 100+ threads. Add --pfring commandline option that just enables pfring, then takes interface from config.
14 years ago
Victor Julien
3aeb86d836
Fix header_len in GRE decoder getting out of control in some cases.
14 years ago
Victor Julien
1c9e48ae98
Fix compilation error on non-pfring systems.
14 years ago
Victor Julien
399e56209f
Small pfring doc update by Joshua White from Everis.
14 years ago
Victor Julien
91f28afef4
Add option to PF_RING to have multiple reader threads. Improve general performance of the PF_RING module.
14 years ago
Victor Julien
edeec290f6
Fix missing rename for request-body-limit to request_body_limit.
14 years ago
Eric Leblond
3b3a8ffb94
detect-gid: suppress unused type
...
The DetectGidData type is not used in the code. This patch removes
the type definition from code.
14 years ago
Eric Leblond
ad44f1cfc1
fix possible typo in strtoul error handling.
14 years ago
Eric Leblond
04f2afa81b
nfq: fix exit function
...
Exit function was trying to close the nfq handler even if it was
null. This was causing a crash.
14 years ago
Eric Leblond
277a384af7
Use already defined macro instead of integer
...
Code was using a integer instead of the already defined macro.
14 years ago
Pablo Rincon
ce3b76a102
Fix compilation on Mac OS X (it was missing IPPROTO_SCTP definition)
14 years ago
Victor Julien
153f9298e7
Fix priority handling during the signature parsing stage. Fixes #275 .
14 years ago
Gurvinder Singh
27f67c97de
log error on duplicate sig and also for dup sig with newer revision
14 years ago
Victor Julien
8a390971e7
Print [drop] as well for syslog output.
14 years ago
Victor Julien
0377ae0817
Reduce SCTP_HEADER_LEN to reflect actual pkt header size.
14 years ago
Eric Leblond
005dc599a6
detect.c: Fix usage of integer standing for protocol
...
This patch fixes direct usage of integer to code protocol value.
14 years ago
Eric Leblond
2c80f18dc9
detect: Add sctp detection and parsing.
...
This patch adds the support of SCTP in signature subsystem.
14 years ago
Eric Leblond
674b0bfae7
flow: Add basic SCTP support
...
This patch adds a basic flow support to SCTP. SCTP specificities
like the verification tag are not taken into account.
14 years ago
Eric Leblond
01e955bc27
Add SCTP to packet validation
...
Validation util was missing a test on sctph which can not be null
for SCTP packets.
14 years ago
Eric Leblond
a823160384
detect: Add support for sctp option in rule
...
'sctp' can now be used as a keyword in signature. It is at the same
level as the 'tcp' or 'udp' keywords.
14 years ago
Eric Leblond
482991ad6d
decode: add support for SCTP protocol
...
This patch adds a new counter for SCTP and defines some
macros needed for SCTP support.
14 years ago
Eric Leblond
8be92fdd99
SCTP support: add parsing of sctp
...
This patch adds support of SCTP in all part of the code in charge
of decoding packets.
14 years ago
Eric Leblond
e1d966eaf6
Makefile: add sctp files to build
...
This patch simply adds decode-sctp files to the compilation.
14 years ago
Eric Leblond
b69fd02284
decode sctp: basic SCTP decoding.
...
This files are basically a dummy conversion of UDP one. It
provides basic decoding (source port and destination port).
There is no chunk hanldling which means that suricata regexp
will match on all packet content except initial header and not
only on userspace data.
14 years ago
Eric Leblond
17af1ca123
decode-event: Add SCTP event
...
Almost empty now, because the only definition is packet
too small.
14 years ago
Victor Julien
987ce57a02
Wrap a number of BUG_ON's in the detection engine in DEBUG ifdefs as the conditions they check for are not serious enough to abort the engine.
14 years ago
Victor Julien
a3303fcf9d
Rename request-body-limit to request_body_limit to remain consistant with other options. Keep old notation around for compatibility.
14 years ago
Victor Julien
0d6d0ae371
Increase logline max length.
14 years ago
Victor Julien
c617d7cbfd
Update pfring doc.
14 years ago
Victor Julien
6047a9b562
Improve byte to numeric value error reporting and testing.
14 years ago
Victor Julien
b233105cc2
Fix a issue in stream reassembly causing the segment list getting into a inconsistent state.
14 years ago
Eric Leblond
4e9231266a
Compilation fix for OpenBSD and win32.
...
This patch fixes compilation on OpenBSD platform. It is running
fine on a pcap file. The patch should also fix compilation on
WIN32 platform but this is not tested.
14 years ago
Victor Julien
a8db8b334b
Remove debug stream testing code from non-debug builds.
14 years ago
Victor Julien
477bc1d050
Set DROP flag on a packet in addition to the REJECT flags. This makes sure we not only send a reject, but also drop the offending packet. Closes #248 .
14 years ago
Pablo Rincon
fb5fb3ab3f
IPOnly module fix for building stage. Radix Tree fix inserting diferent netmask user datas
14 years ago
Pablo Rincon
35c168ab03
Fix CPU_* macros for Mac OS X
14 years ago
Eric Leblond
91213d5ec8
Add option to run_check script
...
If given an argument run_check.sh will test this file against
the cocci patches.
14 years ago
Eric Leblond
0cf05856d0
Fix Packet usage.
...
This patch suppresses remaining direct access to pkt and pktlen in the
Packet structure.
14 years ago
Eric Leblond
12369b4393
Coccinelle: test invalid Packet usage
...
This coccinelle patches is checking that there is no direct
use of p->pkt or p->pktlen in the code. This variable must be
acceded via GET_PKT_* macros.
14 years ago
Victor Julien
cec7ece697
Don't print drop log on pseudo packet.
14 years ago
Victor Julien
1ace091bd4
Minor drop log cleanups.
14 years ago
Gurvinder Singh
7d0781b349
added support to log dropped packet as netfilter logs while in inline mode
14 years ago
Victor Julien
1681705e62
Don't print errors/warnings based on malformed traffic.
14 years ago
Anoop Saldanha
9845718138
fix detect-ssl-version.c unittests to accomodate new changes
14 years ago
Anoop Saldanha
95f9f2c28d
minor indentation changes
14 years ago
Gurvinder Singh
8f8b1212af
support for ssl_version keyword
14 years ago
Eric Leblond
a8417377e7
Don't use direct pkt access
...
pkt field in Packet needs to be accessed via macro. This
patch supress some direct access.
14 years ago
Victor Julien
addab7b5ee
Don't test the several packet detection checks against pseudo packets as the matches would not be meaningful anyway. Prevents a segv in the csum detection.
14 years ago
Victor Julien
a2465ffc1c
Fix FreeBSD's compilation of the new affinity code.
14 years ago