aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
9,578 Commits
7 Branches
155 Tags
197 MiB
master
main-7.0.x
master-6.0.x
master-5.0.x
master-4.1.x
master-4.0.x
master-3.2.x
suricata-7.0.8
suricata-7.0.7
suricata-7.0.6
suricata-6.0.20
suricata-7.0.5
suricata-6.0.19
suricata-6.0.18
suricata-7.0.4
suricata-6.0.17
suricata-7.0.3
suricata-6.0.16
suricata-7.0.2
suricata-6.0.15
suricata-7.0.1
suricata-6.0.14
suricata-7.0.0
suricata-7.0.0-rc2
suricata-6.0.13
suricata-6.0.12
suricata-6.0.11
suricata-7.0.0-rc1
suricata-6.0.10
suricata-6.0.9
suricata-7.0.0-beta1
suricata-6.0.8
suricata-6.0.7
suricata-6.0.6
suricata-5.0.10
suricata-6.0.5
suricata-5.0.9
suricata-6.0.4
suricata-5.0.8
suricata-6.0.3
suricata-5.0.7
suricata-6.0.2
suricata-5.0.6
suricata-6.0.1
suricata-5.0.5
suricata-4.1.10
suricata-4.1.9
suricata-5.0.4
suricata-6.0.0
suricata-6.0.0-rc1
suricata-6.0.0-beta1
suricata-5.0.3
suricata-4.1.8
suricata-4.1.7
suricata-5.0.2
suricata-4.1.6
suricata-5.0.1
suricata-5.0.0
suricata-5.0.0-rc1
suricata-4.1.5
suricata-5.0.0-beta1
suricata-4.1.4
suricata-4.1.3
suricata-4.0.7
suricata-4.1.2
suricata-4.1.1
suricata-4.1.0
suricata-4.0.6
suricata-4.1.0-rc2
suricata-4.1.0-rc1
suricata-4.0.5
suricata-4.1.0-beta1
suricata-4.0.4
suricata-4.0.3
suricata-4.0.2
suricata-3.2.5
suricata-4.0.1
suricata-3.2.4
suricata-4.0.0
suricata-4.0.0-rc2
suricata-3.2.3
suricata-4.0.0-rc1
suricata-4.0.0-beta1
suricata-3.2.2
suricata-3.1.4
suricata-3.2.1
suricata-3.2
suricata-3.2RC1
suricata-3.1.3
suricata-3.2beta1
suricata-3.1.2
suricata-3.1.1
suricata-3.1
suricata-3.0.2
suricata-3.1RC1
suricata-3.0.1
suricata-3.0.1RC1
suricata-3.0
suricata-2.0.11
suricata-3.0RC3
suricata-3.0RC2
suricata-3.0RC1
suricata-2.0.10
suricata-2.0.9
suricata-2.1beta4
suricata-2.0.8
suricata-2.0.7
suricata-2.1beta3
suricata-2.0.6
suricata-2.0.5
suricata-2.1beta2
suricata-2.0.4
suricata-2.1beta1
suricata-2.0.3
suricata-2.0.2
suricata-2.0.1
suricata-2.0.1rc1
suricata-2.0
suricata-2.0rc3
suricata-2.0rc2
suricata-2.0rc1
suricata-2.0beta2
suricata-1.4.7
suricata-1.4.6
suricata-1.4.5
suricata-2.0beta1
suricata-1.4.4
suricata-1.4.3
suricata-1.4.2
suricata-1.4.1
suricata-1.3.6
suricata-1.4
suricata-1.3.5
suricata-1.4rc1
suricata-1.3.4
suricata-1.4beta3
suricata-1.3.3
suricata-1.4beta2
suricata-1.3.2
suricata-1.4beta1
suricata-1.3.1
suricata-1.3
suricata-1.3rc1
suricata-1.3beta2
suricata-1.3beta1
suricata-1.2.1
suricata-1.2
suricata-1.2rc1
suricata-1.2beta1
suricata-1.1.1
suricata-0.8.2
suricata-1.0.0
suricata-1.0.1
suricata-1.0.2
suricata-1.0.3
suricata-1.0.4
suricata-1.0.5
suricata-1.1
suricata-1.1beta1
suricata-1.1beta2
suricata-1.1beta3
suricata-1.1rc1
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'f90733fe3f'
${ noResults }
Commit Graph

9578 Commits (f90733fe3f00ba9cd01dac3ba2de6aca95f3f681)
 

Author SHA1 Message Date
Victor Julien b9bcd4e115 detect/http_header: move tests into tests/ 6 years ago
Victor Julien 5e951a8b06 detect/http_header: inspect v2 api 6 years ago
Victor Julien 74b06b56f2 detect/http_header: test cleanups 6 years ago
Victor Julien 2a61ee13e1 detect/http_header: remove unused func args 6 years ago
Victor Julien dac182741b detect: add http.cookie sticky buffer keyword 6 years ago
Victor Julien ab027cb481 detect/http_cookie: move tests into tests/ 6 years ago
Victor Julien 988cc8468e detect/http_cookie: switch to inspect v2 api 6 years ago
Victor Julien 0aab3ac336 detect/http_cookie: minor cleanups 6 years ago
Victor Julien e222017a29 detect/http_user_agent: set alternative and info flags 6 years ago
Victor Julien b8a0a0d6ea detect: add http.stat_code sticky buffer keyword 6 years ago
Victor Julien 2f342da048 detect/http_stat_code: move tests into tests/ 6 years ago
Victor Julien 382fa2e81d detect/http_stat_code: use inspect v2 api 6 years ago
Victor Julien db7d7b2401 detect/http_stat_code: minor code cleanups 6 years ago
Victor Julien 59c3c748c9 detect: add http.stat_msg sticky buffer keyword 6 years ago
Victor Julien 5dfba01b2e detect/http_stat_msg: move tests to tests/ 6 years ago
Victor Julien 9b9cf2cc5f detect/http_stat_msg: switch to inspect v2 6 years ago
Victor Julien 880724d2ee detect/http_stat_msg: minor code cleanups 6 years ago
Victor Julien e9d43254c8 detect: add http.host.raw sticky buffer 6 years ago
Victor Julien b469938998 detect/http_raw_host: move raw into regular host logic 6 years ago
Victor Julien dc43f35427 detect/http_host: move tests into tests/ 6 years ago
Victor Julien 2c57037611 detect/http_raw_host: use inspect v2 api 6 years ago
Victor Julien 8c8a3473c9 detect/http_raw_host: minor cleanups 6 years ago
Victor Julien e9fcb9d5ef detect/http_method: add http.method sticky buffer 6 years ago
Victor Julien cb332b4cda detect/http_method: move all tests into tests/ 6 years ago
Victor Julien d00732175a detect/http_method: use inspect v2 api 6 years ago
Victor Julien 5fbee04306 detect/http_method: minor cleanups 6 years ago
Victor Julien 4e50df0f55 detect/http: add http.uri.raw sticky buffer keyword 6 years ago
Victor Julien 0a405e27a0 detect/http_raw_uri: code reorganization 
Move registration into http_uri logic, move tests into the other uri
tests. Switch to v2 mpm/inspect APIs.
 6 years ago
Victor Julien e29f13502b detect/http_raw_uri: small cleanups 6 years ago
Victor Julien 10e2731f18 detect/http-uri: move tests into tests/ 6 years ago
Victor Julien 0c879d5041 detect: add http.uri sticky buffer keyword 6 years ago
Victor Julien 789f302d1a detect: add http.host sticky buffer 6 years ago
Victor Julien a0e4c5e79b detect/http-hh: code cleanups 6 years ago
Victor Julien 3111910fc6 detect/http_user_agent: move tests into tests/ 6 years ago
Victor Julien 123ebb2c41 detect: add http.user_agent sticky buffer 6 years ago
Victor Julien fe738014e4 detect/http-ua: remove dead code 6 years ago
Victor Julien e62c75335e detect/http-ua: test cleanups 6 years ago
Victor Julien 33b81f7439 detect: add verbosity of --list-keywords 
Add indicators of content modifier or sticky buffer, and also
allow registering an alternative to a keyword.
 6 years ago
Victor Julien d3e953e5f2 detect: switch keyword flags u16 6 years ago
Victor Julien eb73008ccf detect/transform: add to_sha1 keyword 6 years ago
Victor Julien 75f9c1ae9f detect/transform: add to_md5 keyword 6 years ago
Victor Julien 42d22ddb2a unittests: add signature parse test helper 6 years ago
Victor Julien 705d3b6130 Open 5.0.0-dev branch 6 years ago
Victor Julien 7f38ffc8bc log/stats: fix formatting of long decoder events 6 years ago
Victor Julien b3c021f8d0 userguide: improve stats logging documentation 6 years ago
Jingyu Yang bb26e6216e source-pcap:set PktAcqBreakLoop as pcap_breakloop 6 years ago
Victor Julien d8634daf74 stream: fix false negative on bad RST 
If a bad RST was received the stream inspection would not happen
for that packet, but it would still move the 'raw progress' tracker
forward. Following good packets would then fail to detect anything
before the 'raw progress' position.

Bug #2770

Reported-by: Alexey Vishnyakov
 6 years ago
Victor Julien fb18a1655c eve.stats: warn that output might miss decoder-events 6 years ago
Victor Julien 0d86263efd eve.stats: make decoder event prefix configurable 6 years ago
Victor Julien 932c2a7ec5 eve: fix missing decoder-events in stats 
In the eve log the decoder events are added as optional counters. This
behaviour is enabled by default. However, lots of the counters are
missing, as the names colide with other counters.

E.g.

decoder.ipv6 counts ipv6 packets
decoder.ipv6.unknown_next_header counts how often an unknown next
    header is encountered.

In this example 'ipv6' would be both a json integer and a json object.
It appears that jansson favours the first that is generated, so the
event counters are mostly missing.

This patch registers them as 'decoder.events.<event>' instead. As
these names are generated on the fly, a hash table to contain the
allocated strings was added as well.
 6 years ago