Commit Graph

1957 Commits (da423a59d59716b39858970c87a695a860464519)
 

Author SHA1 Message Date
Victor Julien da423a59d5 Allow users of the alert-syslog to set the identity. 14 years ago
Victor Julien 07776c113b Fix valgrind error on pfring_recv, rename threads from RecvPfring to RxPfring so the name still looks right for 100+ threads. Add --pfring commandline option that just enables pfring, then takes interface from config. 14 years ago
Victor Julien 3aeb86d836 Fix header_len in GRE decoder getting out of control in some cases. 14 years ago
Victor Julien 1c9e48ae98 Fix compilation error on non-pfring systems. 14 years ago
Victor Julien 399e56209f Small pfring doc update by Joshua White from Everis. 14 years ago
Victor Julien 91f28afef4 Add option to PF_RING to have multiple reader threads. Improve general performance of the PF_RING module. 14 years ago
Victor Julien edeec290f6 Fix missing rename for request-body-limit to request_body_limit. 14 years ago
Eric Leblond 3b3a8ffb94 detect-gid: suppress unused type
The DetectGidData type is not used in the code. This patch removes
the type definition from code.
14 years ago
Eric Leblond ad44f1cfc1 fix possible typo in strtoul error handling. 14 years ago
Eric Leblond 04f2afa81b nfq: fix exit function
Exit function was trying to close the nfq handler even if it was
null. This was causing a crash.
14 years ago
Eric Leblond 277a384af7 Use already defined macro instead of integer
Code was using a integer instead of the already defined macro.
14 years ago
Pablo Rincon ce3b76a102 Fix compilation on Mac OS X (it was missing IPPROTO_SCTP definition) 14 years ago
Victor Julien 153f9298e7 Fix priority handling during the signature parsing stage. Fixes #275. 14 years ago
Gurvinder Singh 27f67c97de log error on duplicate sig and also for dup sig with newer revision 14 years ago
Victor Julien 8a390971e7 Print [drop] as well for syslog output. 14 years ago
Victor Julien 0377ae0817 Reduce SCTP_HEADER_LEN to reflect actual pkt header size. 14 years ago
Eric Leblond 005dc599a6 detect.c: Fix usage of integer standing for protocol
This patch fixes direct usage of integer to code protocol value.
14 years ago
Eric Leblond 2c80f18dc9 detect: Add sctp detection and parsing.
This patch adds the support of SCTP in signature subsystem.
14 years ago
Eric Leblond 674b0bfae7 flow: Add basic SCTP support
This patch adds a basic flow support to SCTP. SCTP specificities
like the verification tag are not taken into account.
14 years ago
Eric Leblond 01e955bc27 Add SCTP to packet validation
Validation util was missing a test on sctph which can not be null
for SCTP packets.
14 years ago
Eric Leblond a823160384 detect: Add support for sctp option in rule
'sctp' can now be used as a keyword in signature. It is at the same
level as the 'tcp' or 'udp' keywords.
14 years ago
Eric Leblond 482991ad6d decode: add support for SCTP protocol
This patch adds a new counter for SCTP and defines some
macros needed for SCTP support.
14 years ago
Eric Leblond 8be92fdd99 SCTP support: add parsing of sctp
This patch adds support of SCTP in all part of the code in charge
of decoding packets.
14 years ago
Eric Leblond e1d966eaf6 Makefile: add sctp files to build
This patch simply adds decode-sctp files to the compilation.
14 years ago
Eric Leblond b69fd02284 decode sctp: basic SCTP decoding.
This files are basically a dummy conversion of UDP one. It
provides basic decoding (source port and destination port).
There is no chunk hanldling which means that suricata regexp
will match on all packet content except initial header and not
only on userspace data.
14 years ago
Eric Leblond 17af1ca123 decode-event: Add SCTP event
Almost empty now, because the only definition is packet
too small.
14 years ago
Victor Julien 987ce57a02 Wrap a number of BUG_ON's in the detection engine in DEBUG ifdefs as the conditions they check for are not serious enough to abort the engine. 14 years ago
Victor Julien a3303fcf9d Rename request-body-limit to request_body_limit to remain consistant with other options. Keep old notation around for compatibility. 14 years ago
Victor Julien 0d6d0ae371 Increase logline max length. 14 years ago
Victor Julien c617d7cbfd Update pfring doc. 14 years ago
Victor Julien 6047a9b562 Improve byte to numeric value error reporting and testing. 14 years ago
Victor Julien b233105cc2 Fix a issue in stream reassembly causing the segment list getting into a inconsistent state. 14 years ago
Eric Leblond 4e9231266a Compilation fix for OpenBSD and win32.
This patch fixes compilation on OpenBSD platform. It is running
fine on a pcap file. The patch should also fix compilation on
WIN32 platform but this is not tested.
14 years ago
Victor Julien a8db8b334b Remove debug stream testing code from non-debug builds. 14 years ago
Victor Julien 477bc1d050 Set DROP flag on a packet in addition to the REJECT flags. This makes sure we not only send a reject, but also drop the offending packet. Closes #248. 14 years ago
Pablo Rincon fb5fb3ab3f IPOnly module fix for building stage. Radix Tree fix inserting diferent netmask user datas 14 years ago
Pablo Rincon 35c168ab03 Fix CPU_* macros for Mac OS X 14 years ago
Eric Leblond 91213d5ec8 Add option to run_check script
If given an argument run_check.sh will test this file against
the cocci patches.
14 years ago
Eric Leblond 0cf05856d0 Fix Packet usage.
This patch suppresses remaining direct access to pkt and pktlen in the
Packet structure.
14 years ago
Eric Leblond 12369b4393 Coccinelle: test invalid Packet usage
This coccinelle patches is checking that there is no direct
use of p->pkt or p->pktlen in the code. This variable must be
acceded via GET_PKT_* macros.
14 years ago
Victor Julien cec7ece697 Don't print drop log on pseudo packet. 14 years ago
Victor Julien 1ace091bd4 Minor drop log cleanups. 14 years ago
Gurvinder Singh 7d0781b349 added support to log dropped packet as netfilter logs while in inline mode 14 years ago
Victor Julien 1681705e62 Don't print errors/warnings based on malformed traffic. 14 years ago
Anoop Saldanha 9845718138 fix detect-ssl-version.c unittests to accomodate new changes 14 years ago
Anoop Saldanha 95f9f2c28d minor indentation changes 14 years ago
Gurvinder Singh 8f8b1212af support for ssl_version keyword 14 years ago
Eric Leblond a8417377e7 Don't use direct pkt access
pkt field in Packet needs to be accessed via macro. This
patch supress some direct access.
14 years ago
Victor Julien addab7b5ee Don't test the several packet detection checks against pseudo packets as the matches would not be meaningful anyway. Prevents a segv in the csum detection. 14 years ago
Victor Julien a2465ffc1c Fix FreeBSD's compilation of the new affinity code. 14 years ago