Eric Leblond
85e8d8e200
Add sanity check to DetectAdressParse.
...
The function is only used at parsing time, this is not costly to add
a simple sanity check.
14 years ago
Eric Leblond
7168e0aafc
threshold: fix trivial typo in parsing.
14 years ago
Eric Leblond
a56f8dd6b2
doc: introduce doxygen group "threshold"
...
This patch introduces a doxygen group to put together the documentation
relative to threshold. Group appear in a separate page and they can have
their own documentation. This is useful when a feature is splitted into
different files.
14 years ago
Victor Julien
dc218388e5
Fix flowint keyword pcre_get_substring issue.
14 years ago
Victor Julien
1740c3a7c7
Fix urilen keyword pcre_get_substring issue.
14 years ago
Victor Julien
f52b54f63e
Fix ssl keyword pcre_get_substring issue.
14 years ago
Eric Leblond
6b9d1012ff
Transform inet_ntop call into PrintInet one.
14 years ago
Eric Leblond
2fa07780c2
Introduce PrintInet function
...
This function has the same signature than inet_ntop() and it
will be used as substitution in the code. For IPv4 this is a simple
wrapper. For IPv6, it display addresses with fixed length.
14 years ago
Victor Julien
7e1d911215
Small optimizations to pkt acq loop code.
14 years ago
Victor Julien
b753ecce50
Implement a pkt acq loop infra with support for pcap-file.
14 years ago
Anoop Saldanha
975ebf2e4f
Minor changes to move function calls that kills threads + frees resources to the clean up phase right to the end of main thread
14 years ago
Anoop Saldanha
ff7284e7b7
Fix code that allows the engine to restart threads that have exited on failure
14 years ago
Anoop Saldanha
524af82b1a
code cleanup in tm-threads.c
14 years ago
Anoop Saldanha
4f7df1029d
Unify the use of slots to a single struct for threading API. Remove separate slot append functions for 1slot and varslot
14 years ago
William
6730c3ace1
Actually limit recursion and backtracking and stack usage by PCRE. Logic was broken, no example was provided in suricata.yaml even though it could be set from there.
14 years ago
William
61fe05b220
Fix for silly pcap counters mistake made by me. ps_recv includes dropped packets.
14 years ago
William
6408febaec
Only check for PF_RING if we enable PF_RING.
14 years ago
William
b3f7e6a2fc
Only set PF_RING cluster if we have more than one receive thread. Gives us accurate drop stats.
14 years ago
Anoop Saldanha
d3bc3f0fe5
coverity fix for counters api
14 years ago
Anoop Saldanha
be3996ac02
coverity fix - 1.1beta branch - add some comments to indicate false positives by coverity for future reference - mainly comments for switch statement fall through
14 years ago
Victor Julien
df3ca322a4
Fixes for out of bounds pcre_get_substring calls no longer silently accepted by modern pcre.
14 years ago
William
1099093e0f
Support for PF_RING versions where packet passed as a reference and version 4.7.1 where pfring_enable_ring now seems to be required.
14 years ago
Eric Leblond
a0b4068041
autotools: fix duplicate check command in Makefile.
...
It seems that check target can not be used in Makefile.am. Using
check-am fix a make failure.
14 years ago
Eric Leblond
586aae0ff3
Indentation fix on source-pcap.
14 years ago
Anoop Saldanha
c8701cf8d1
fix var name parsing in byte_extract
14 years ago
Anoop Saldanha
7e5c52c80b
add flowbits:set; only sigs to be treated as ip only
14 years ago
William
bca8fbc79e
Add Num, Rev, and Gid columns to rule perf output
14 years ago
Victor Julien
0625d54267
Improve HTPParserTest07 test to be more helpful if it fails.
14 years ago
Victor Julien
862b708a70
Fix stream unittest.
14 years ago
Anoop Saldanha
88115902b0
Have separate parser vars in smtp to hold dynamic buffers for parsing fragmented lines
14 years ago
Anoop Saldanha
576ec7da66
smtp parser support
14 years ago
Victor Julien
add02a4ef3
Fix handling of FIN/ACK packet on TCP state TCP_FIN_WAIT2.
14 years ago
Victor Julien
16b41a5eff
Use p->proto in detect to determine TCP/UDP/SCTP.
14 years ago
Victor Julien
ebe99a2597
Fix unified2 packet length not being set properly for reassembled stream packets.
14 years ago
Victor Julien
047b19d271
Fix a reassembly bug that in some cases could lead to a crash.
14 years ago
Victor Julien
22a97af226
Only compile byte_extract unittests if --enable-unittests is enabled.
14 years ago
Eric Leblond
5727fac988
cpu affinity: detect a missed invalid case
...
This patch improves the error handling in the definition of cpu
set. It detect when the max value is too big and display the name
of the invalid cpu set in error message.
14 years ago
Eric Leblond
d34e85c203
Fix #290 : avoid looping when affinity is invalid
...
This patch adds a loop counter to detect when the cpu_set does
not intersect the set of available CPUs.
14 years ago
Victor Julien
e5cc68a91f
Attempt to work around missing __WORDSIZE define on FreeBSD.
14 years ago
Victor Julien
4025567a5a
Fix a number of unittests not properly initializing a packet causing issues on some archs.
14 years ago
Victor Julien
43b2e63c1e
Fix minor compiler comments in CUDA code.
14 years ago
Martin Beyer
2f1262b446
fixed cuda build: portability issues and nvcc version check
14 years ago
Martin Beyer
736f09c4bc
fixed ptxdump for python3
14 years ago
Martin Beyer
49d66430bc
build cuda modules with make
14 years ago
Victor Julien
f7f037c1d1
Make sure stateful detection engine inspecting HTTP streams works well for to_client rules as well.
14 years ago
Anoop Saldanha
b4427e81ec
minor fixes in endianness handling in dcerpc and dce detection engine
14 years ago
Kirby Kuehl
acfc9a8ab0
Improve DCERPC big endian support when parsing BIND CTX Items (UUID). Make default byte packing order for the slow path little endian. Byte swapping on slow path will occur if big endian. This is a readability change, not a functional change.
14 years ago
Anoop Saldanha
5ccd9a8347
byte_extract support for isdataat added
14 years ago
Anoop Saldanha
35f3eafa5e
byte extract added to the engine. Detection support added for packet payload, uri and dce detection engines
14 years ago
Eric Leblond
64b069369e
Unified2: Use local variable for header copy
...
Due to the chaining of function call, the per-thread buffer was overwritten.
This was causing invalid data to be output.
This patch restores a local variable usage for the writing of the header
which are rather small and thus should not be a performance and security
issue.
14 years ago