Commit Graph

26 Commits (f46a8776ecc3f73c58d129b964f48d90727580a0)

Author SHA1 Message Date
Shivani Bhardwaj 1345c6d1cb doc/file-extraction: fix highlight syntax 1 month ago
Victor Julien c0d9b3c078 doc/userguide: spelling 1 year ago
Philippe Antoine 096dce4bba http2: allow filestore to work with HTTP2 4 years ago
Jeff Lucovsky 06f41f608c doc: Improve grammar, spelling and clarifications
This commit improves the overall documentation's grammar, spelling, and
adds clarifications  where needed.
4 years ago
Jeff Lucovsky 496306e6a9 doc: update stream-depth description 4 years ago
Jeff Lucovsky ec07f58705 doc: update file-store stream depth description 4 years ago
Jeff Lucovsky b116a56a32 doc: Correct typos 4 years ago
Jason Ish 6b8320d1c0 doc: document file-store v1 to v2 configuration changes 4 years ago
Jason Ish 6850dbc852 suricata.yaml: remove filestore v1 configuration 4 years ago
Jason Ish 873bc290bc doc/filestore(v1) - make deprecation text a note
Highlights that is is deprecated in the HTML output.
5 years ago
Jason Ish 7f32822843 doc/filestore(v1) - document force-filestore field 5 years ago
Giuseppe Longo 972be0a560 doc: update file-extraction section 5 years ago
Victor Julien d6903e70c1 file-log: remove and add warning
Feature was deprecated and scheduled for removal.

Ticket #2376
6 years ago
Pascal Delalande 64922a476e doc: remove deprecated force-md5 flag from userguide 6 years ago
Victor Julien 1edd9d19fc doc: add SMB to file extraction. Minor improvements. 7 years ago
Pascal Delalande 0ff60f65ec doc: update filestore for file hash extraction
Update for extraction based on md5, sha1 and sha256
7 years ago
Jason Ish 5420c0ab06 doc: document file-store v2 7 years ago
Eric Leblond 24f745553c doc: update file extraction document
Define the list of protocol parsers supporting extraction in one
single place following Andreas Herz' suggestion.
7 years ago
Eric Leblond f5ba4c231d doc: update following ftp-data changes 7 years ago
Gaurav Singh 637a7c8e55 Adds options to mark when a file is final.
This takes the form of an option to add the pid of the process to file
names. Additionally, it adds a suffix to the file name to indicate it is
not finalized.

Adding the pid to the file name reduces the likelihood that a file is
overwritten when suricata is unexpectedly killed. The number in the
waldo file is only written out during a clean shutdown. In the event
of an improper shutdown, extracted files will be written using the old
number and existing files with the same name will be overwritten.

Writes extracted files and their metadata to a temporary file suffixed
with '.tmp'. Renames the files when they are completely done being
written. As-is there is no way to know that a file on disk is still
being written to by suricata.
7 years ago
Eric Leblond e933eb849a doc: document filestore update 7 years ago
Jason Ish cd4c9e73f8 doc: fix sphinx warnings
This involved removing documents that were intentionally
not referenced as they are not good candidates for the
user guide.
8 years ago
Giuseppe Longo 3f214b506a file-store: add depth setting
When a rules match and fired filestore we may want
to increase the stream reassembly depth for this specific.

This add the 'depth' setting in file-store config,
which permits to specify how much data we want to reassemble
into a stream.
8 years ago
Victor Julien 7011d8f34c doc: remove/cleanup 'guides' 8 years ago
Andreas Herz 7806ae8f57 docs: sync up to recent redmine 8 years ago
Jason Ish 2751baae46 doc: rename from "sphinx" to "userguide" 8 years ago