aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
9,258 Commits
7 Branches
161 Tags
170 MiB
main-7.0.x
master
master-6.0.x
master-5.0.x
master-4.1.x
master-4.0.x
master-3.2.x
suricata-8.0.0
suricata-7.0.11
suricata-8.0.0-rc1
suricata-8.0.0-beta1
suricata-7.0.10
suricata-7.0.9
suricata-7.0.8
suricata-7.0.7
suricata-7.0.6
suricata-6.0.20
suricata-7.0.5
suricata-6.0.19
suricata-6.0.18
suricata-7.0.4
suricata-6.0.17
suricata-7.0.3
suricata-6.0.16
suricata-7.0.2
suricata-6.0.15
suricata-7.0.1
suricata-6.0.14
suricata-7.0.0
suricata-7.0.0-rc2
suricata-6.0.13
suricata-6.0.12
suricata-6.0.11
suricata-7.0.0-rc1
suricata-6.0.10
suricata-6.0.9
suricata-7.0.0-beta1
suricata-6.0.8
suricata-6.0.7
suricata-6.0.6
suricata-5.0.10
suricata-6.0.5
suricata-5.0.9
suricata-6.0.4
suricata-5.0.8
suricata-6.0.3
suricata-5.0.7
suricata-6.0.2
suricata-5.0.6
suricata-6.0.1
suricata-5.0.5
suricata-4.1.10
suricata-4.1.9
suricata-5.0.4
suricata-6.0.0
suricata-6.0.0-rc1
suricata-6.0.0-beta1
suricata-5.0.3
suricata-4.1.8
suricata-4.1.7
suricata-5.0.2
suricata-4.1.6
suricata-5.0.1
suricata-5.0.0
suricata-5.0.0-rc1
suricata-4.1.5
suricata-5.0.0-beta1
suricata-4.1.4
suricata-4.1.3
suricata-4.0.7
suricata-4.1.2
suricata-4.1.1
suricata-4.1.0
suricata-4.0.6
suricata-4.1.0-rc2
suricata-4.1.0-rc1
suricata-4.0.5
suricata-4.1.0-beta1
suricata-4.0.4
suricata-4.0.3
suricata-4.0.2
suricata-3.2.5
suricata-4.0.1
suricata-3.2.4
suricata-4.0.0
suricata-4.0.0-rc2
suricata-3.2.3
suricata-4.0.0-rc1
suricata-4.0.0-beta1
suricata-3.2.2
suricata-3.1.4
suricata-3.2.1
suricata-3.2
suricata-3.2RC1
suricata-3.1.3
suricata-3.2beta1
suricata-3.1.2
suricata-3.1.1
suricata-3.1
suricata-3.0.2
suricata-3.1RC1
suricata-3.0.1
suricata-3.0.1RC1
suricata-3.0
suricata-2.0.11
suricata-3.0RC3
suricata-3.0RC2
suricata-3.0RC1
suricata-2.0.10
suricata-2.0.9
suricata-2.1beta4
suricata-2.0.8
suricata-2.0.7
suricata-2.1beta3
suricata-2.0.6
suricata-2.0.5
suricata-2.1beta2
suricata-2.0.4
suricata-2.1beta1
suricata-2.0.3
suricata-2.0.2
suricata-2.0.1
suricata-2.0.1rc1
suricata-2.0
suricata-2.0rc3
suricata-2.0rc2
suricata-2.0rc1
suricata-2.0beta2
suricata-1.4.7
suricata-1.4.6
suricata-1.4.5
suricata-2.0beta1
suricata-1.4.4
suricata-1.4.3
suricata-1.4.2
suricata-1.4.1
suricata-1.3.6
suricata-1.4
suricata-1.3.5
suricata-1.4rc1
suricata-1.3.4
suricata-1.4beta3
suricata-1.3.3
suricata-1.4beta2
suricata-1.3.2
suricata-1.4beta1
suricata-1.3.1
suricata-1.3
suricata-1.3rc1
suricata-1.3beta2
suricata-1.3beta1
suricata-1.2.1
suricata-1.2
suricata-1.2rc1
suricata-1.2beta1
suricata-1.1.1
suricata-0.8.2
suricata-1.0.0
suricata-1.0.1
suricata-1.0.2
suricata-1.0.3
suricata-1.0.4
suricata-1.0.5
suricata-1.1
suricata-1.1beta1
suricata-1.1beta2
suricata-1.1beta3
suricata-1.1rc1
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'suricata-4.1.0-rc2'
${ noResults }
Commit Graph

9258 Commits (suricata-4.1.0-rc2)
 

Author SHA1 Message Date
Victor Julien fb986abe81 smb: log file FID/GUID as fuid 8 years ago
Victor Julien 67f0e27ca4 smb: add smb records to fileinfo 8 years ago
Victor Julien 816bd022a6 smb1: improve non nt-status handling 
Support SRV error, with a couple of codes.
Rename statux field to status_code.
 8 years ago
Victor Julien 0519807639 smb1: ignore tree_id in session setup 8 years ago
Victor Julien 286c054472 smb: improve nbss/smb record detection 8 years ago
Victor Julien 7ab071a58d rust/smb: implement minimal record parsing in probing 8 years ago
Victor Julien ff398deda9 rust/smb: improve protocol detection 
Register both pattern based detection and probing parsers.
 8 years ago
Victor Julien 251a8e7deb smb: add smb to default eve-log config 8 years ago
Victor Julien 283be3cade smb2: break out ioctl handling 8 years ago
Victor Julien bf08285602 smb2: parse async records 8 years ago
Victor Julien 5c26020714 smb2: add ioctl transactions to log the funcs 8 years ago
Victor Julien 75265ec376 smb2: map ioctl funcs to names 
List is based on Wireshark's list.
 8 years ago
Victor Julien 7cd66516f0 smb: use formal MS names for disposition 8 years ago
Victor Julien f7ed749d4f smb: disable debug output 8 years ago
Victor Julien eed492547c smb1: extract server guid from negotiate 8 years ago
Victor Julien 6d56edc3de smb2: log client and server guid from negotiate 8 years ago
Victor Julien c56f5e11ca smb2: log share type 8 years ago
Victor Julien d75ebdb981 smb: log create empty filename as '<share_root>' like Bro does 8 years ago
Victor Julien fcbeab70a4 smb1: log create 'service' fields 8 years ago
Victor Julien 90e2abaac4 smb1: use generic string parsing for trans 8 years ago
Victor Julien 76917a8732 smb1: generic smb string parse func 8 years ago
Victor Julien 668c747aee smb1: more exact tree connect record parsing 8 years ago
Victor Julien 0ed00cf104 smb: move common parsing funcs into own file 8 years ago
Victor Julien 1c701dc50e smb: make string parsing functions public 8 years ago
Victor Julien 1d4aac1d4d smb1: set event on empty/malformed dialect 8 years ago
Victor Julien c91242e71c smb: rename file to filename in output 8 years ago
Victor Julien caf29e92b3 smb1: parse and log timestamps in CREATE 8 years ago
Victor Julien 0e05ef7369 smb2: parse and log timestamps in CREATE 8 years ago
Victor Julien 28f16e38ac smb1: disable 'generic tx's for common commands 
Don't create a generic TX for each READ, WRITE, TRANS, TRANS2,
except if they cause events to trigger.
 8 years ago
Victor Julien 78cd92a933 smb: generic event per trans/read/write for tx events 8 years ago
Victor Julien 05992f1772 smb: fix event handling when no tx is available 8 years ago
Victor Julien be615c9fbc smb: small cleanups, fixes and optimizations 8 years ago
Victor Julien dab055d8c8 smb: update to der-parser 0.5.1 8 years ago
Victor Julien 0d69e7b8c2 smb: remove unused dialects from state 8 years ago
Victor Julien ad1bc7f473 smb1: minor debug improvment 8 years ago
Victor Julien a44504a1bf smb: redo gap catch up handling 8 years ago
Victor Julien 7114d5d25b smb1: parser cleanups 8 years ago
Victor Julien d9e43d3e63 smb: cleaner server component parsing 8 years ago
Victor Julien ecbf10da70 smb2: improve write error handling 8 years ago
Victor Julien b34392051d smb3: parse transform records 8 years ago
Victor Julien 894a73ee06 smb2: add missing commands and improve ioctl err handling 8 years ago
Victor Julien 170edf7c44 smb1: improve error handling 8 years ago
Victor Julien 7ceb67138f smb: add status 8 years ago
Victor Julien 98b926bf72 smb1: implement WRITE_AND_CLOSE 8 years ago
Victor Julien 595557eb8d smb1: locking andx may have no response 8 years ago
Victor Julien 7dff9b9969 smb/nbss: work around bad traffic 8 years ago
Victor Julien 8bef120898 smb: session setup improvements 
Improve ntlmssp version extraction and logging, make its data structures
optional. Extract native os/lm from smb1 ssn setup.

Move session setup handling into their own files.

Only log auth data for the session setup tx.
 8 years ago
Victor Julien 75d7c9d64a rust/smb: initial support 
Implement SMB app-layer parser for SMB1/2/3. Features:
- file extraction
- eve logging
- existing dce keyword support
- smb_share/smb_named_pipe keyword support (stickybuffers)
- auth meta data extraction (ntlmssp, kerberos5)
 8 years ago
Victor Julien 50a182194a eve: log pcap filename 8 years ago
Victor Julien 19988310d1 detect: fix tx iterator logic in detect 
The 'tx_id' variable was used to be passed into the IterFunc as a
minumum tx to return. The IterFunc could then return either the tx
for that id, or a later one if that turned out to be the first available
tx.

The tx_id however, was still used for some things as if it was the
current tx id. Most importantly for setting the tx id for alert
ammending. So this could lead to alerts with missing or wrong
applayer records.
 8 years ago