Anoop Saldanha
34f0897163
check if all packets are processed before disabling detect threads + kill all threads <= detect after FFR + other minor fixes
13 years ago
Victor Julien
9f3e079bcf
Make live reloads optional and disabled by default.
13 years ago
Victor Julien
728c4f9ea0
Clean up packet pool at shut down.
13 years ago
Eric Leblond
0227a87fcb
cleaning: fix warning when building with clang.
...
clang was issuing some warnings related to unused return in function.
This patch adds some needed error treatment and ignore the rest of the
warnings by adding a cast to void.
13 years ago
Anoop Saldanha
2bc7d0792d
update clean up of old detection engine contexts for live rule swap
13 years ago
Anoop Saldanha
eee33866df
DetectEngineCtxFree() cleanup, also in main
13 years ago
Anoop Saldanha
8fb2040eee
disable live rule swap when -s or -S option's used at startup
13 years ago
Anoop Saldanha
31eb5fa2f6
Introduce util-signal.[ch]. Move our signal setup functions here
13 years ago
Anoop Saldanha
e5edcfaca8
add unittest for atomic operation with void *
13 years ago
Anoop Saldanha
ecad4a24fa
live rule support added
...
To reload ruleset during engine runtime, send the USR2 signal to the engine, and the ruleset would be reloaded from the same yaml file supplied at engine startup
13 years ago
Anoop Saldanha
f4ce9011d2
make mpm ctx container de_ctx specific. Also introduce global variable in mpm_ctx. this is a workaround for cleaning non global mpm_ctx's since we now don't supply the de_ctx around the detection engine API
13 years ago
Anoop Saldanha
f5af4c9ceb
util action api returns error code if it encounters wrong values parsing wrong action conf
13 years ago
Anoop Saldanha
988c92f71c
http user agent keyword + mpm + inspection + fast pattern support added
13 years ago
Victor Julien
b210bf1290
Fix commandline supplied yaml path being ignored.
13 years ago
Eric Leblond
2d22f667c2
config: use config file in sysconfdir by default.
13 years ago
marcos
8dfddd0a0f
Added -T switch to suricata output.
...
Simply added the -T to be printed out when suricata is run without any
arguments. The capability to test a configuration file has been in
suricata for some time, just doesn't show up as an option right now.
13 years ago
Victor Julien
5e95524122
Improve error reporting in case of syntax errors in the address and port vars.
13 years ago
Victor Julien
086a934ca9
#449 : fix md5 calculation in daemon mode.
13 years ago
Anoop Saldanha
678763c3f4
bug #454 - global check to see if address and port vars are properly configured
13 years ago
Jason Ish
105173939b
Implement single, autofp and workers run modes for DAG interfaces. Includes multiple interface support.
...
Remove auto mode due to bad performance.
14 years ago
Xavier Lange
fea5e68a7b
Include conf_test in special cases for unset RUNMODE
14 years ago
Xavier Lange
1d774dae61
Make conf_test local. Simplify if/else to if.
14 years ago
Xavier Lange
1ae10b9a42
Do not spawn threads for conf test
14 years ago
Xavier Lange
eaacc5d0fe
Added conf_test flag and behavior
14 years ago
Anoop Saldanha
4d192a6881
update all spm algos to use 16 bit pattern lengths. Should compress a lot of tables
14 years ago
Victor Julien
8d1fe9f2fa
Make 'autofp' the default runmode. Increase default max-pending-packets to 1024. Move some advanced and uncommonly changed settings down in the stock suricata.yaml. Closes #433 .
14 years ago
Anoop Saldanha
5ffb050ada
Adapt flow tmqh counters to be atomic vars. Remove support for active flows q handler. Introduce SC_ATOMIC_SET
14 years ago
Anoop Saldanha
4e417b72b5
support flow q handler schedulers active_flows and active_packets. Support new yaml option autofp_scheduler. Support for printing q handler stats as well
14 years ago
Victor Julien
0b3f6c464a
Make list-app-layer-protos option name match the help explanation. Make sure it works w/o passing a config.
14 years ago
Anoop Saldanha
109662450d
Add new command line option --list-app-layer-protocols to list supported app layer protocols in sigs
14 years ago
Victor Julien
feff6f7705
Clean up error message.
14 years ago
Eileen Donlon
85c364da09
disallow-use-of-configuration-file-with-unittests
14 years ago
Victor Julien
d908e707d7
profiling: add per lock location profiling
...
Add profiling per lock location in the code. Accounts how often a
lock is requested, how often it was contended, the max number of
ticks spent waiting for it, avg number of ticks waiting for it and
the total ticks for that location.
Added a new configure flag --enable-profiling-locks to enable this
feature.
14 years ago
Victor Julien
a05df345de
Introduce host table, make tag use it
...
Add a host table similar to the flow table. A hash using fine grained
locking. Flow manager for now takes care of book keeping / garbage
collecting.
Tag subsystem now uses this for host based tagging instead of the
global tag hash table. Because the latter used a global lock and the
new code uses very fine grained locking this patch should improve
scalability.
14 years ago
Victor Julien
0150e66ede
flow engine: improve scalability
...
Major redesign of the flow engine. Remove the flow queues that turned
out to be major choke points when using many threads. Flow manager now
walks the hash table directly. Simplify the way we get a new flow in
case of emergency.
14 years ago
Victor Julien
cdba2f50d1
Various fixes and improvements based on feedback by Coverity analyzer.
14 years ago
Nikolay Denev
139768dd58
Do not use underscored config vars internally.
14 years ago
Victor Julien
2197f1a625
file-inspection: split 'file' output module into file-store and file-log. Store stores files. Log logs json records.
14 years ago
Victor Julien
860971eca0
Misc afpacket changes.
14 years ago
Victor Julien
337f7861a4
Make sure that if not built against libnss, we still compile. Only no md5 for you then\!
14 years ago
Victor Julien
69b3df96fb
Initial on the fly MD5 calculation for extracted files using libnss.
14 years ago
Anoop Saldanha
e682796d03
feature #414 - support listing supported keywords. Remove support for dummy keywords __address__, __proto__, __port__. Remove support for recursive keyword and all references to it
14 years ago
Anoop Saldanha
09313cf9bd
Support http stat code detection engine, fast pattern(mpm engine included). Fix http stat code setup function. Fix pcre option for stat msg keyword. With this the pcre options for server_body is Q, for stat_msg is Y and for stat_code is S
14 years ago
Anoop Saldanha
2007c2711c
Support http stat msg detection engine, fast pattern(mpm engine included). Fix http stat msg setup function. Fix pcre option for stat msg keyword
14 years ago
Victor Julien
489b8b8bcc
Allow other yaml files to be included in the main yaml.
14 years ago
Victor Julien
1d9f6ff8f2
Initial Napatech support by Randy Caldejon / nPulse.
14 years ago
Victor Julien
87e6be610a
Issue warning if libhtp version used is not up to date.
14 years ago
Victor Julien
39ef24ccc4
Fix pcap -i mode.
14 years ago
Victor Julien
e526525f83
Fix pcap -i <ip>.
14 years ago
Victor Julien
35467db151
Indicate that the Suricata version used is a release or a git checkout.
14 years ago