suricata

Commit Graph

Author	SHA1	Message	Date
Victor Julien	ab1200fbd7	compiler: more strict compiler warnings Set flags by default: -Wmissing-prototypes -Wmissing-declarations -Wstrict-prototypes -Wwrite-strings -Wcast-align -Wbad-function-cast -Wformat-security -Wno-format-nonliteral -Wmissing-format-attribute -funsigned-char Fix minor compiler warnings for these new flags on gcc and clang.	8 years ago
Victor Julien	b6e4276792	hostbits: add list API	9 years ago
Victor Julien	22f3205664	var-names: expose outside of detect engine Until now variable names, such as flowbit names, were local to a detect engine. This made sense as they were only ever used in that context. For the purpose of logging these names, this needs a different approach. The loggers live outside of the detect engine. Also, in the case of reloads and multi-tenancy, there are even multiple detect engines, so it would be even more tricky to access them from the outside. This patch brings a new approach. A any time, there is a single active hash table mapping the variable names and their id's. For multiple tenants the table is shared between tenants. The table is set up in a 'staging' area, where locking makes sure that multiple loading threads don't mess things up. Then when the preparing of a detection engine is ready, but before the detect threads are made aware of the new detect engine, the active varname hash is swapped with the staging instance. For this to work, all the mappings from the 'current' or active mapping are added to the staging table. After the threads have reloaded and the new detection engine is active, the old table can be freed. For multi tenancy things are similar. The staging area is used for setting up until the new detection engines / tenants are applied to the system. This patch also changes the variable 'id'/'idx' field to uint32_t. Due to data structure padding and alignment, this should have no practical drawback while allowing for a lot more vars.	9 years ago
Victor Julien	a44b612a41	hostbits/xbits: free hostbit Fix memory leak. Hostbits were not actually freed. Bug #1975.	9 years ago
Jason Ish	796dd5223b	tests: no longer necessary to provide successful return code 1 pass, 0 is fail.	10 years ago
Victor Julien	e583de0582	Minor unittest cleanups	10 years ago
Victor Julien	f2349e10ad	hosts: consider hostbits/xbits status in timeout Consider the host's xbits expiry status when checking the host for timeout. If a single active non-expired bit is found, the host won't be timeout just yet.	10 years ago
Victor Julien	67dd5c0430	host: implement hostbits/xbits expire	10 years ago
Victor Julien	f77c3d9a2c	xbits: hostbits use xbits type Make hostbits use xbits type.	10 years ago
Victor Julien	5c880377ae	detect: hostbits keyword Per host bit similar to 'flowbits'. Initial code that uses just the 'src' ip for the operations.	10 years ago

10 Commits (suricata-4.1.2)