2395 Commits (f998fda4ddb1d7af65afc627c54328a9c25239f0)

 

All Branches   

Search

Author	SHA1	Message	Date
Eric Leblond	f998fda4dd	pfring: factorize iface and parser initialisation.	14 years ago
Eric Leblond	cc7b80437a	pfring: should not call free	14 years ago
Eric Leblond	93cf2b1690	pfring: add single mode.	14 years ago
Eric Leblond	77869a2df8	single runmode: add support for multiple capture threads	14 years ago
Eric Leblond	c75fffe92d	Improve help message ... Usage of command line has evolved with the introduction of long option. This patch updates the description of the related options.	14 years ago
Eric Leblond	dc075a74a2	pcap: add --pcap option ... This patch adds a --pcap option which can be used to select or an interface if an argument is provided or the interfaces defined in the configuration file.	14 years ago
Eric Leblond	b2c281920f	af-packet: should not call free	14 years ago
Eric Leblond	1aab2470db	af-packet: factorise single mode.	14 years ago
Eric Leblond	63d614162c	pcap: should not call free	14 years ago
Eric Leblond	491686c33e	pcap: factorise single mode.	14 years ago
Eric Leblond	abe99ee5f6	runmode: add factorisation function for single mode.	14 years ago
Eric Leblond	c3ba992652	pfring: restore precedence of command line options.	14 years ago
Eric Leblond	b2598f97e7	pcap: restore backward compatibility	14 years ago
Eric Leblond	21663acd3b	pcap: use good var name for live-interface	14 years ago
Eric Leblond	d3d8beb337	pcap: factorize runmode ... This patch factorizes auto and autofp runmodes for pcap.	14 years ago
Eric Leblond	c3c20dd041	pcap: add new config style	14 years ago
Eric Leblond	78467f1846	Update configuration file to new pfring format.	14 years ago
Eric Leblond	d9d8286671	pfring: restore compatibility with v1.0 config ... Compatibility of pfring module with previous version was broken. This patch restores backward compatibility.	14 years ago
Eric Leblond	a64dcfeba2	pfring: use factorisation function ... This patch convert pfring to pktacqloop and use the new factorisation function. This also fixes commmand line parsing of pfring which is now able to work like af-packet: - 'suricata -c s.yaml --pfring' start suricata with all interfaces in conf - 'suricata -c s.yaml --pfring=eth2' start suricata on eth2	14 years ago
Eric Leblond	cbb36b5182	af-packet: remove unused function	14 years ago
Eric Leblond	75c875b1ac	af-packet: use factorisation function for Auto mode.	14 years ago
Eric Leblond	8bf0897b3c	Add factorisation function for runmode. ... This patch adds a function which will be used to factorise the Auto runmode between the different IDS mode.	14 years ago
Anoop Saldanha	de635b5866	remove trailing whitespace from conf file	14 years ago
Eric Leblond	2fc58a48a5	Doxygen: Include documentation of define dependant code. ... Generated documentation for unittests and other module was not generated because doxygen was not assuming the define to be set. This patch adds the necessary define for unittests and does the same for NFQ, PFRING, IPFW, AF_PACKET and Prelude. This also adds a variable that permit parallelisation of dot file generation.	14 years ago
Eric Leblond	d4d62f3099	http-uri: Remove useless function declaration.	14 years ago
Victor Julien	3401defbbb	tag: fixes and cleanups ... Major fixes for the tag subsystem: - Removed TimeGet call from tag packet runtime to safe a gettimeofday - Removed unused lock from data type - Fixed broken first packet skip logic - Fix broken reference counter logic - Fix memory leak on tag expiration - Cleaned up code	14 years ago
Anoop Saldanha	b7b58074de	fix ac unittest	14 years ago
Anoop Saldanha	d6f9e06bbb	update ac to behave the same way irrespective of the state count. Should improve performance. Also fix unittests to accomodate these changes	14 years ago
Anoop Saldanha	dcaef183e8	fix compiler warning for printf format	14 years ago
Victor Julien	bc5c9f4a52	Fix too many SMTP commands causing an integer overflow in the cmds_cnt variable, in turn causing an out of bounds memory write.	14 years ago
Victor Julien	9baa16af63	Convert flow memcap to u64. Bug #332.	14 years ago
Victor Julien	8208eacd79	Convert stream memcaps to u64. Bug #332.	14 years ago
Victor Julien	4c641f0deb	Fix compilation with profiling enabled.	14 years ago
Anoop Saldanha	3ec7b75194	fix timestamps for pseudo packets created during FFR - bug 337	14 years ago
Anoop Saldanha	9d94bb38d5	refactor flow timeout code. fix ipv6 address assignment for pseudo pkt.	14 years ago
Anoop Saldanha	246a4e9fff	for shutdown reassembly properly init the reassembly packet using PACKET_RECYCLE	14 years ago
Victor Julien	1a5931e878	pcap-log: fall back to sguil_base_dir option if 'dir' isn't set. Minor cleanups.	14 years ago
William Metcalf	3b3f5816bf	You spin me right round baby, right round like a rotating packet capture right round. Oh, also log file size counters are now uint64_t	14 years ago
Victor Julien	6bad2dbd79	Don't match on IP only rules that use ports if packet is not (proper) TCP, UDP or SCTP. Rules out frags matching as well.	14 years ago
Anoop Saldanha	63ed36a892	Replace all reallocs with SCReallocs	14 years ago
Anoop Saldanha	4307ea2348	Replace all frees with SCFrees	14 years ago
Anoop Saldanha	797b1a44c7	Replace all strdup with SCStrdup	14 years ago
Anoop Saldanha	13ea299ee0	Replace all mallocs with SCMallocs	14 years ago
Eric Leblond	de59c9f4b1	Add and use utility functions for checksum computing.	14 years ago
Eric Leblond	a85dc9b0e2	Add support for replace keyword. ... This patch adds support for the replace keyword. It is used with content to change selected part of the payload. The major point with this patch is that having a replace keyword made necessary to avoid all stream level check because we need to access to the could-be-modified packet payload. One of the main difficulty is to handle complex signature. If there is other content check, we must do the substitution when we're sure all match are valid. The patch adds an attribute to the thread context variable to be able to deal with recursivity of the match function. Replace is only activated in IPS mode and apply only to raw match.	14 years ago
Eric Leblond	0c34a1c5e7	rewrite constants and add flag for replace ... This patch make use of bit shift to rewrite some of the mask constants. It also delete an unused flag value and suppress the associated dead code. The numeric value of the flag is now used by the flag needed for replace code.	14 years ago
Victor Julien	77b7089f79	Fix stream-events not working. Stream events won't fit our 'detection only' schema. Fixes #321.	14 years ago
pilcrow	f5017e0d1a	Always try PCRE_NO_AUTO_CAPTURE first for signature regexes. ... Many, many pcre: signatures specify (...) when the more efficient (?:...) is all that is needed. This change attempts to force PCRE_NO_AUTO_CAPTURE on all unnamed capture groups, reverting to capturing when necessary, e.g., when \1 is referenced.	14 years ago
Victor Julien	60887131be	Fix minor address parsing compiler warning.	14 years ago
Anoop Saldanha	8028392e9a	fix mpm segv. Use sgh flags to check if the sgh has packet or stream mpm set or not	14 years ago