| .. |
|
Makefile.am
|
Implement SACK in the stream engine.
|
15 years ago |
|
action-globals.h
|
Set DROP flag on a packet in addition to the REJECT flags. This makes sure we not only send a reject, but also drop the offending packet. Closes #248.
|
15 years ago |
|
alert-debuglog.c
|
Shrink PacketAlerts structure so that Packet structure is a lot smaller. Reduce max events per packet from 256 to 15.
|
15 years ago |
|
alert-debuglog.h
|
…
|
|
|
alert-fastlog.c
|
Shrink PacketAlerts structure so that Packet structure is a lot smaller. Reduce max events per packet from 256 to 15.
|
15 years ago |
|
alert-fastlog.h
|
…
|
|
|
alert-prelude.c
|
Shrink PacketAlerts structure so that Packet structure is a lot smaller. Reduce max events per packet from 256 to 15.
|
15 years ago |
|
alert-prelude.h
|
…
|
|
|
alert-syslog.c
|
Shrink PacketAlerts structure so that Packet structure is a lot smaller. Reduce max events per packet from 256 to 15.
|
15 years ago |
|
alert-syslog.h
|
Add option to set the syslog level for the alerts. Minor cleanups.
|
15 years ago |
|
alert-unified-alert.c
|
Shrink PacketAlerts structure so that Packet structure is a lot smaller. Reduce max events per packet from 256 to 15.
|
15 years ago |
|
alert-unified-alert.h
|
…
|
|
|
alert-unified-log.c
|
Shrink PacketAlerts structure so that Packet structure is a lot smaller. Reduce max events per packet from 256 to 15.
|
15 years ago |
|
alert-unified-log.h
|
…
|
|
|
alert-unified2-alert.c
|
Shrink PacketAlerts structure so that Packet structure is a lot smaller. Reduce max events per packet from 256 to 15.
|
15 years ago |
|
alert-unified2-alert.h
|
…
|
|
|
app-layer-dcerpc-common.h
|
Store the first frag flag in the uuid as the pfc_flags field is overwritten. Part of fixing #206.
|
15 years ago |
|
app-layer-dcerpc-udp.c
|
push all proto detection code into their respective app parser register functions for every alproto
|
15 years ago |
|
app-layer-dcerpc-udp.h
|
…
|
|
|
app-layer-dcerpc.c
|
push all proto detection code into their respective app parser register functions for every alproto
|
15 years ago |
|
app-layer-dcerpc.h
|
…
|
|
|
app-layer-detect-proto.c
|
fix valgrind issue for SMB test. Small restructuring. probing_parsers global variable now part of AlpProtoDetectCtx
|
15 years ago |
|
app-layer-detect-proto.h
|
fix valgrind issue for SMB test. Small restructuring. probing_parsers global variable now part of AlpProtoDetectCtx
|
15 years ago |
|
app-layer-ftp.c
|
push all proto detection code into their respective app parser register functions for every alproto
|
15 years ago |
|
app-layer-ftp.h
|
Many small performance updates.
|
15 years ago |
|
app-layer-htp.c
|
Fix not using new htp callback when using the bundled htp. Add indication to --build-info. Fix valgrind warning in test and further improve test.
|
15 years ago |
|
app-layer-htp.h
|
Add some debug output to app-layer-htp.
|
15 years ago |
|
app-layer-nbss.h
|
…
|
|
|
app-layer-parser.c
|
fix valgrind issue for SMB test. Small restructuring. probing_parsers global variable now part of AlpProtoDetectCtx
|
15 years ago |
|
app-layer-parser.h
|
fix valgrind issue for SMB test. Small restructuring. probing_parsers global variable now part of AlpProtoDetectCtx
|
15 years ago |
|
app-layer-protos.h
|
support for ssl_version keyword
|
15 years ago |
|
app-layer-smb.c
|
fix valgrind issue for SMB test. Small restructuring. probing_parsers global variable now part of AlpProtoDetectCtx
|
15 years ago |
|
app-layer-smb.h
|
Many small performance updates.
|
15 years ago |
|
app-layer-smb2.c
|
Add memcmp api with a plain memcmp function and a SSE3 accelerated memcmp.
|
15 years ago |
|
app-layer-smb2.h
|
…
|
|
|
app-layer-ssh.c
|
push all proto detection code into their respective app parser register functions for every alproto
|
15 years ago |
|
app-layer-ssh.h
|
Many small performance updates.
|
15 years ago |
|
app-layer-ssl.c
|
push all proto detection code into their respective app parser register functions for every alproto
|
15 years ago |
|
app-layer-ssl.h
|
Add a few extra safety checks in new SSL code.
|
15 years ago |
|
app-layer.c
|
Add support for port based probing parsers for alproto detection
|
15 years ago |
|
app-layer.h
|
Disable unused code, fix compiler warning.
|
15 years ago |
|
conf-yaml-loader.c
|
…
|
|
|
conf-yaml-loader.h
|
define a new conf paramter detect-engine:inspection-recursion-limit; Defines a recursion limit for content inspection code
|
15 years ago |
|
conf.c
|
…
|
|
|
conf.h
|
…
|
|
|
counters.c
|
Various fixes for issues reported by clang.
|
15 years ago |
|
counters.h
|
…
|
|
|
cuda-packet-batcher.c
|
Supress usage of Packet declaration in tests.
|
15 years ago |
|
cuda-packet-batcher.h
|
make cuda mpm parameters configurable
|
15 years ago |
|
data-queue.c
|
…
|
|
|
data-queue.h
|
Many small performance updates.
|
15 years ago |
|
debug.h
|
…
|
|
|
decode-ethernet.c
|
Supress usage of Packet declaration in tests.
|
15 years ago |
|
decode-ethernet.h
|
…
|
|
|
decode-events.h
|
Use separate frag decoder events for IPv4 and IPv6.
|
15 years ago |
|
decode-gre.c
|
Fix header_len in GRE decoder getting out of control in some cases.
|
15 years ago |
|
decode-gre.h
|
…
|
|
|
decode-icmpv4.c
|
Fix icmpv4 unittest on big endian, extract embedded sport and dport even if a full tcph doesn't fit.
|
15 years ago |
|
decode-icmpv4.h
|
SCTP support: add parsing of sctp
|
15 years ago |
|
decode-icmpv6.c
|
Fix broken ICMPv4 unittests on big endian, fix broken ID macro on ICMPv6.
|
15 years ago |
|
decode-icmpv6.h
|
Fix broken ICMPv4 unittests on big endian, fix broken ID macro on ICMPv6.
|
15 years ago |
|
decode-ipv4.c
|
Small optimizations to IPV4 and TCP header parsing.
|
15 years ago |
|
decode-ipv4.h
|
Small optimizations to IPV4 and TCP header parsing.
|
15 years ago |
|
decode-ipv6.c
|
SCTP support: add parsing of sctp
|
15 years ago |
|
decode-ipv6.h
|
Properly reset IPv6 extension headers structure.
|
15 years ago |
|
decode-ppp.c
|
Supress usage of Packet declaration in tests.
|
15 years ago |
|
decode-ppp.h
|
…
|
|
|
decode-pppoe.c
|
Supress usage of Packet declaration in tests.
|
15 years ago |
|
decode-pppoe.h
|
…
|
|
|
decode-raw.c
|
Fix Packet usage.
|
15 years ago |
|
decode-raw.h
|
…
|
|
|
decode-sctp.c
|
decode sctp: basic SCTP decoding.
|
15 years ago |
|
decode-sctp.h
|
Reduce SCTP_HEADER_LEN to reflect actual pkt header size.
|
15 years ago |
|
decode-sll.c
|
…
|
|
|
decode-sll.h
|
…
|
|
|
decode-tcp.c
|
Small optimizations to IPV4 and TCP header parsing.
|
15 years ago |
|
decode-tcp.h
|
Small optimizations to IPV4 and TCP header parsing.
|
15 years ago |
|
decode-udp.c
|
…
|
|
|
decode-udp.h
|
fix csum handling for tcp/dup
|
15 years ago |
|
decode-vlan.c
|
Supress usage of Packet declaration in tests.
|
15 years ago |
|
decode-vlan.h
|
…
|
|
|
decode.c
|
Fix a copy issue in PacketCopyDataOffset.
|
15 years ago |
|
decode.h
|
Convert Packet tunnel variables to bit flag checks.
|
15 years ago |
|
defrag.c
|
move pseudo packet creation outside defragreassemble loop
|
15 years ago |
|
defrag.h
|
Cleanup defrag engine on shutdown.
|
15 years ago |
|
detect-ack.c
|
Don't test the several packet detection checks against pseudo packets as the matches would not be meaningful anyway. Prevents a segv in the csum detection.
|
15 years ago |
|
detect-ack.h
|
…
|
|
|
detect-asn1.c
|
Don't print message after SCMalloc failure.
|
15 years ago |
|
detect-asn1.h
|
…
|
|
|
detect-bytejump.c
|
Various fixes for issues reported by clang.
|
15 years ago |
|
detect-bytejump.h
|
…
|
|
|
detect-bytetest.c
|
Modify files to avoid direct pckt payload access
|
15 years ago |
|
detect-bytetest.h
|
add the support for >= and <= operator for byte_test
|
15 years ago |
|
detect-classtype.c
|
…
|
|
|
detect-classtype.h
|
…
|
|
|
detect-content.c
|
Don't print message after SCMalloc failure.
|
15 years ago |
|
detect-content.h
|
support for http_raw_uri keyword + mpm engine
|
15 years ago |
|
detect-csum.c
|
Small optimizations to IPV4 and TCP header parsing.
|
15 years ago |
|
detect-csum.h
|
…
|
|
|
detect-dce-iface.c
|
Update all unittests
|
15 years ago |
|
detect-dce-iface.h
|
…
|
|
|
detect-dce-opnum.c
|
Update all unittests
|
15 years ago |
|
detect-dce-opnum.h
|
…
|
|
|
detect-dce-stub-data.c
|
Update all unittests
|
15 years ago |
|
detect-dce-stub-data.h
|
…
|
|
|
detect-decode-event.c
|
Fix decode-event keyword parsing. Fix code that indicates a signature is decode-event only. Add 'pkthdr' protocol as an alias for any/ip to be used by decode-event signatures.
|
15 years ago |
|
detect-decode-event.h
|
Minor fixes in defrag engine, shrink DefragTracker_ structure.
|
15 years ago |
|
detect-depth.c
|
support for http_raw_uri keyword + mpm engine
|
15 years ago |
|
detect-depth.h
|
…
|
|
|
detect-detection-filter.c
|
Various fixes for issues reported by clang.
|
15 years ago |
|
detect-detection-filter.h
|
…
|
|
|
detect-distance.c
|
support for http_raw_uri keyword + mpm engine
|
15 years ago |
|
detect-distance.h
|
…
|
|
|
detect-dsize.c
|
Don't test the several packet detection checks against pseudo packets as the matches would not be meaningful anyway. Prevents a segv in the csum detection.
|
15 years ago |
|
detect-dsize.h
|
…
|
|
|
detect-engine-address-ipv4.c
|
…
|
|
|
detect-engine-address-ipv4.h
|
…
|
|
|
detect-engine-address-ipv6.c
|
Fix compiler warnings about unused IPv6 Address code.
|
15 years ago |
|
detect-engine-address-ipv6.h
|
…
|
|
|
detect-engine-address.c
|
Fix address test on big-endian.
|
15 years ago |
|
detect-engine-address.h
|
…
|
|
|
detect-engine-alert.c
|
Shrink PacketAlerts structure so that Packet structure is a lot smaller. Reduce max events per packet from 256 to 15.
|
15 years ago |
|
detect-engine-alert.h
|
Shrink PacketAlerts structure so that Packet structure is a lot smaller. Reduce max events per packet from 256 to 15.
|
15 years ago |
|
detect-engine-dcepayload.c
|
Wrap a number of BUG_ON's in the detection engine in DEBUG ifdefs as the conditions they check for are not serious enough to abort the engine.
|
15 years ago |
|
detect-engine-dcepayload.h
|
…
|
|
|
detect-engine-hcbd.c
|
disable mpm pattern's retest skipping in detection engine for uri, hcbd, hmd, hrhd, hhd, hmd, hcd
|
15 years ago |
|
detect-engine-hcbd.h
|
Change locking of http_header, http_raw_header and http_client_body so that flow isn't accessed without lock anywhere.
|
15 years ago |
|
detect-engine-hcd.c
|
disable mpm pattern's retest skipping in detection engine for uri, hcbd, hmd, hrhd, hhd, hmd, hcd
|
15 years ago |
|
detect-engine-hcd.h
|
fast pattern support for http_cookie. Also support relative modifiers
|
15 years ago |
|
detect-engine-hhd.c
|
disable mpm pattern's retest skipping in detection engine for uri, hcbd, hmd, hrhd, hhd, hmd, hcd
|
15 years ago |
|
detect-engine-hhd.h
|
Change locking of http_header, http_raw_header and http_client_body so that flow isn't accessed without lock anywhere.
|
15 years ago |
|
detect-engine-hmd.c
|
disable mpm pattern's retest skipping in detection engine for uri, hcbd, hmd, hrhd, hhd, hmd, hcd
|
15 years ago |
|
detect-engine-hmd.h
|
fast pattern support for http_method. Also support relative modifiers
|
15 years ago |
|
detect-engine-hrhd.c
|
disable mpm pattern's retest skipping in detection engine for uri, hcbd, hmd, hrhd, hhd, hmd, hcd
|
15 years ago |
|
detect-engine-hrhd.h
|
don't buffer raw headers. Retrieve them individually from htp_state during mpm stage and content valiadation stage
|
15 years ago |
|
detect-engine-hrud.c
|
support for http_raw_uri keyword + mpm engine
|
15 years ago |
|
detect-engine-hrud.h
|
support for http_raw_uri keyword + mpm engine
|
15 years ago |
|
detect-engine-iponly.c
|
Store matching stream msg (ptr) in packets alert structure so it's available to the output plugins.
|
15 years ago |
|
detect-engine-iponly.h
|
…
|
|
|
detect-engine-mpm.c
|
support for http_raw_uri keyword + mpm engine
|
15 years ago |
|
detect-engine-mpm.h
|
support for http_raw_uri keyword + mpm engine
|
15 years ago |
|
detect-engine-payload.c
|
Wrap a number of BUG_ON's in the detection engine in DEBUG ifdefs as the conditions they check for are not serious enough to abort the engine.
|
15 years ago |
|
detect-engine-payload.h
|
…
|
|
|
detect-engine-port.c
|
…
|
|
|
detect-engine-port.h
|
…
|
|
|
detect-engine-proto.c
|
Fix decode-event keyword parsing. Fix code that indicates a signature is decode-event only. Add 'pkthdr' protocol as an alias for any/ip to be used by decode-event signatures.
|
15 years ago |
|
detect-engine-proto.h
|
…
|
|
|
detect-engine-siggroup.c
|
Clean up signature flags creating room for merging flags and mpm_flags. Merge flags and mpm_flags. Move new mpm id's into signature header. Get rid of full signature access in signature prefiltering.
|
15 years ago |
|
detect-engine-siggroup.h
|
…
|
|
|
detect-engine-sigorder.c
|
Various fixes for issues reported by clang.
|
15 years ago |
|
detect-engine-sigorder.h
|
…
|
|
|
detect-engine-state.c
|
support for http_raw_uri keyword + mpm engine
|
15 years ago |
|
detect-engine-state.h
|
support for http_raw_uri keyword + mpm engine
|
15 years ago |
|
detect-engine-tag.c
|
Various fixes for issues reported by clang.
|
15 years ago |
|
detect-engine-tag.h
|
…
|
|
|
detect-engine-threshold.c
|
Set DROP flag on a packet in addition to the REJECT flags. This makes sure we not only send a reject, but also drop the offending packet. Closes #248.
|
15 years ago |
|
detect-engine-threshold.h
|
Store matching stream msg (ptr) in packets alert structure so it's available to the output plugins.
|
15 years ago |
|
detect-engine-uri.c
|
disable mpm pattern's retest skipping in detection engine for uri, hcbd, hmd, hrhd, hhd, hmd, hcd
|
15 years ago |
|
detect-engine-uri.h
|
…
|
|
|
detect-engine.c
|
Don't print message after SCMalloc failure.
|
15 years ago |
|
detect-engine.h
|
define a new conf paramter detect-engine:inspection-recursion-limit; Defines a recursion limit for content inspection code
|
15 years ago |
|
detect-fast-pattern.c
|
support for http_raw_uri keyword + mpm engine
|
15 years ago |
|
detect-fast-pattern.h
|
make some name changes. break PopulateMpm(). Set the avoid mpm double check flags
|
15 years ago |
|
detect-flags.c
|
Add C and E flags to flags keyword. We still support 1 and 2 for backward compatibility
|
15 years ago |
|
detect-flags.h
|
…
|
|
|
detect-flow.c
|
fast pattern support for http_method. Also support relative modifiers
|
15 years ago |
|
detect-flow.h
|
…
|
|
|
detect-flowbits.c
|
Supress usage of Packet declaration in tests.
|
15 years ago |
|
detect-flowbits.h
|
Fix for bug 204 (signature ordering with flowbit priority)
|
16 years ago |
|
detect-flowint.c
|
Supress usage of Packet declaration in tests.
|
15 years ago |
|
detect-flowint.h
|
…
|
|
|
detect-flowvar.c
|
Various fixes for issues reported by clang.
|
15 years ago |
|
detect-flowvar.h
|
…
|
|
|
detect-fragbits.c
|
Various fixes for issues reported by clang.
|
15 years ago |
|
detect-fragbits.h
|
…
|
|
|
detect-fragoffset.c
|
Supress usage of Packet declaration in tests.
|
15 years ago |
|
detect-fragoffset.h
|
…
|
|
|
detect-ftpbounce.c
|
Update all unittests
|
15 years ago |
|
detect-ftpbounce.h
|
…
|
|
|
detect-gid.c
|
…
|
|
|
detect-gid.h
|
detect-gid: suppress unused type
|
15 years ago |
|
detect-http-client-body.c
|
Update all unittests
|
15 years ago |
|
detect-http-client-body.h
|
unifying content structure - http_client_body now uses DetectContentData
|
15 years ago |
|
detect-http-cookie.c
|
Update all unittests
|
15 years ago |
|
detect-http-cookie.h
|
unifying content structure - http_cookie now uses DetectContentData
|
15 years ago |
|
detect-http-header.c
|
Update all unittests
|
15 years ago |
|
detect-http-header.h
|
unifying content structure - http_header now uses DetectContentData
|
15 years ago |
|
detect-http-method.c
|
Update all unittests
|
15 years ago |
|
detect-http-method.h
|
unifying content structure - http_method now uses DetectContentData
|
15 years ago |
|
detect-http-raw-header.c
|
Fix new unittests introduced by rebase with next branch.
|
15 years ago |
|
detect-http-raw-header.h
|
support fast pattern for http raw header. Also support relative modifiers for http raw header
|
15 years ago |
|
detect-http-raw-uri.c
|
support for http_raw_uri keyword + mpm engine
|
15 years ago |
|
detect-http-raw-uri.h
|
support for http_raw_uri keyword + mpm engine
|
15 years ago |
|
detect-http-stat-code.c
|
Update all unittests
|
15 years ago |
|
detect-http-stat-code.h
|
Cleanup http_stat_code unittests, shrink data structure.
|
15 years ago |
|
detect-http-stat-msg.c
|
Update all unittests
|
15 years ago |
|
detect-http-stat-msg.h
|
unifying content structure - http_stat_msg now uses DetectContentData
|
15 years ago |
|
detect-http-uri.c
|
allow sigs for http uri of the form content:one; content:two; distance:0; http_uri;
|
15 years ago |
|
detect-http-uri.h
|
…
|
|
|
detect-icmp-id.c
|
Supress usage of Packet declaration in tests.
|
15 years ago |
|
detect-icmp-id.h
|
…
|
|
|
detect-icmp-seq.c
|
Fix -Wall -Werror compilation after unittests update.
|
16 years ago |
|
detect-icmp-seq.h
|
…
|
|
|
detect-icode.c
|
Another batch of clang fixes. Nothing really serious. Includes a couple of fixes for broken fixes from yesterday.
|
15 years ago |
|
detect-icode.h
|
…
|
|
|
detect-id.c
|
Don't test the several packet detection checks against pseudo packets as the matches would not be meaningful anyway. Prevents a segv in the csum detection.
|
15 years ago |
|
detect-id.h
|
…
|
|
|
detect-ipopts.c
|
Don't test the several packet detection checks against pseudo packets as the matches would not be meaningful anyway. Prevents a segv in the csum detection.
|
15 years ago |
|
detect-ipopts.h
|
…
|
|
|
detect-ipproto.c
|
Another batch of clang fixes. Nothing really serious. Includes a couple of fixes for broken fixes from yesterday.
|
15 years ago |
|
detect-ipproto.h
|
…
|
|
|
detect-isdataat.c
|
support for http_raw_uri keyword + mpm engine
|
15 years ago |
|
detect-isdataat.h
|
support isdataat negation. Also fix addiing isdataat to appropriate lists
|
15 years ago |
|
detect-itype.c
|
Another batch of clang fixes. Nothing really serious. Includes a couple of fixes for broken fixes from yesterday.
|
15 years ago |
|
detect-itype.h
|
…
|
|
|
detect-mark.c
|
Fix compilation for nfq_set_mark code when NFQ is not enabled.
|
15 years ago |
|
detect-mark.h
|
Add support for 'nfq_set_mark' keyword
|
15 years ago |
|
detect-metadata.c
|
…
|
|
|
detect-metadata.h
|
…
|
|
|
detect-msg.c
|
Another batch of clang fixes. Nothing really serious. Includes a couple of fixes for broken fixes from yesterday.
|
15 years ago |
|
detect-msg.h
|
…
|
|
|
detect-noalert.c
|
…
|
|
|
detect-noalert.h
|
…
|
|
|
detect-nocase.c
|
support for http_raw_uri keyword + mpm engine
|
15 years ago |
|
detect-nocase.h
|
…
|
|
|
detect-offset.c
|
support for http_raw_uri keyword + mpm engine
|
15 years ago |
|
detect-offset.h
|
…
|
|
|
detect-parse.c
|
Make error on <- direction operation use more explicit.
|
15 years ago |
|
detect-parse.h
|
support isdataat negation. Also fix addiing isdataat to appropriate lists
|
15 years ago |
|
detect-pcre.c
|
Experimental support for PCRE-sljit enable via --enable-pcre-sljit
|
15 years ago |
|
detect-pcre.h
|
support for http_raw_uri keyword + mpm engine
|
15 years ago |
|
detect-pktvar.c
|
Various fixes for issues reported by clang.
|
15 years ago |
|
detect-pktvar.h
|
…
|
|
|
detect-priority.c
|
…
|
|
|
detect-priority.h
|
…
|
|
|
detect-rawbytes.c
|
replace all Signature->pmatch instances in the engine with Signature->sm_lists[DETECT_SM_LIST_PMATCH]
|
15 years ago |
|
detect-rawbytes.h
|
…
|
|
|
detect-recursive.c
|
…
|
|
|
detect-recursive.h
|
…
|
|
|
detect-reference.c
|
Don't print message after SCMalloc failure.
|
15 years ago |
|
detect-reference.h
|
Support for reference.config file
|
15 years ago |
|
detect-rev.c
|
Fix a number of small clang issues. Clang doesn't know we exit on malloc errors during init.
|
15 years ago |
|
detect-rev.h
|
…
|
|
|
detect-rpc.c
|
Another batch of clang fixes. Nothing really serious. Includes a couple of fixes for broken fixes from yesterday.
|
15 years ago |
|
detect-rpc.h
|
…
|
|
|
detect-sameip.c
|
…
|
|
|
detect-sameip.h
|
…
|
|
|
detect-seq.c
|
Don't test the several packet detection checks against pseudo packets as the matches would not be meaningful anyway. Prevents a segv in the csum detection.
|
15 years ago |
|
detect-seq.h
|
…
|
|
|
detect-sid.c
|
Fix a number of small clang issues. Clang doesn't know we exit on malloc errors during init.
|
15 years ago |
|
detect-sid.h
|
…
|
|
|
detect-ssh-proto-version.c
|
Update all unittests
|
15 years ago |
|
detect-ssh-proto-version.h
|
Adding ssh app layer module with two new keywords: ssh.protoversion and ssh.softwareversion
|
15 years ago |
|
detect-ssh-software-version.c
|
Update all unittests
|
15 years ago |
|
detect-ssh-software-version.h
|
Adding ssh app layer module with two new keywords: ssh.protoversion and ssh.softwareversion
|
15 years ago |
|
detect-ssl-state.c
|
support for ssl_state keyword added
|
15 years ago |
|
detect-ssl-state.h
|
support for ssl_state keyword added
|
15 years ago |
|
detect-ssl-version.c
|
some naming changes in ssl parser and ssl related keywords
|
15 years ago |
|
detect-ssl-version.h
|
support for ssl_version keyword
|
15 years ago |
|
detect-stream_size.c
|
Supress usage of Packet declaration in tests.
|
15 years ago |
|
detect-stream_size.h
|
…
|
|
|
detect-tag.c
|
Various fixes for issues reported by clang.
|
15 years ago |
|
detect-tag.h
|
…
|
|
|
detect-threshold.c
|
Various fixes for issues reported by clang.
|
15 years ago |
|
detect-threshold.h
|
…
|
|
|
detect-tls-version.c
|
some naming changes in ssl parser and ssl related keywords
|
15 years ago |
|
detect-tls-version.h
|
…
|
|
|
detect-ttl.c
|
Don't test the several packet detection checks against pseudo packets as the matches would not be meaningful anyway. Prevents a segv in the csum detection.
|
15 years ago |
|
detect-ttl.h
|
…
|
|
|
detect-uricontent.c
|
Update all unittests
|
15 years ago |
|
detect-uricontent.h
|
unifying content structure - uricontent now uses DetectContentData
|
15 years ago |
|
detect-urilen.c
|
Update all unittests
|
15 years ago |
|
detect-urilen.h
|
…
|
|
|
detect-window.c
|
Don't test the several packet detection checks against pseudo packets as the matches would not be meaningful anyway. Prevents a segv in the csum detection.
|
15 years ago |
|
detect-window.h
|
…
|
|
|
detect-within.c
|
support for http_raw_uri keyword + mpm engine
|
15 years ago |
|
detect-within.h
|
…
|
|
|
detect.c
|
Shrink PacketAlerts structure so that Packet structure is a lot smaller. Reduce max events per packet from 256 to 15.
|
15 years ago |
|
detect.h
|
Shrink PacketAlerts structure so that Packet structure is a lot smaller. Reduce max events per packet from 256 to 15.
|
15 years ago |
|
flow-alert-sid.c
|
…
|
|
|
flow-alert-sid.h
|
…
|
|
|
flow-bit.c
|
…
|
|
|
flow-bit.h
|
…
|
|
|
flow-hash.c
|
…
|
|
|
flow-hash.h
|
…
|
|
|
flow-private.h
|
flow: Add basic SCTP support
|
15 years ago |
|
flow-queue.c
|
Handle a clang warning that says dstq can be null referenced. In no call of FlowRequeue dstq can be null so not a real issue. Added a BUG_ON just in case, but only in DEBUG mode to prevent the extra overhead. If the code changes we will run it in DEBUG mode and catch the error.
|
15 years ago |
|
flow-queue.h
|
Many small performance updates.
|
15 years ago |
|
flow-util.c
|
Removed FLOW_AL_PROTO_UNKNOWN. We don't need this flag
|
15 years ago |
|
flow-util.h
|
Shrink Flow structure with 20 bytes (on 32 bit) and reorder it. Clean up init, recycle, destroy macro's.
|
15 years ago |
|
flow-var.c
|
…
|
|
|
flow-var.h
|
…
|
|
|
flow.c
|
Shrink Flow structure with 20 bytes (on 32 bit) and reorder it. Clean up init, recycle, destroy macro's.
|
15 years ago |
|
flow.h
|
Shrink Flow structure with 20 bytes (on 32 bit) and reorder it. Clean up init, recycle, destroy macro's.
|
15 years ago |
|
host.c
|
…
|
|
|
host.h
|
…
|
|
|
log-droplog.c
|
Shrink PacketAlerts structure so that Packet structure is a lot smaller. Reduce max events per packet from 256 to 15.
|
15 years ago |
|
log-droplog.h
|
added support to log dropped packet as netfilter logs while in inline mode
|
15 years ago |
|
log-httplog.c
|
Extend 'append' option to stats.log as well. Small cleanups.
|
15 years ago |
|
log-httplog.h
|
…
|
|
|
log-pcap.c
|
Ignore tunnel/defrag packets in log-pcap module.
|
15 years ago |
|
log-pcap.h
|
first stab at pcap logging no rotating buff etc
|
15 years ago |
|
output.c
|
Clean up output.
|
15 years ago |
|
output.h
|
added support for appending the log files
|
15 years ago |
|
packet-queue.c
|
…
|
|
|
packet-queue.h
|
…
|
|
|
pkt-var.c
|
…
|
|
|
pkt-var.h
|
…
|
|
|
queue.h
|
…
|
|
|
reputation.c
|
…
|
|
|
reputation.h
|
…
|
|
|
respond-reject-libnet11.c
|
SCTP support: add parsing of sctp
|
15 years ago |
|
respond-reject-libnet11.h
|
…
|
|
|
respond-reject.c
|
…
|
|
|
respond-reject.h
|
…
|
|
|
runmode-erf-dag.c
|
Fix pfring commandline handling.
|
15 years ago |
|
runmode-erf-dag.h
|
modify runmode api to accept conf runmode paramter as a char string, instead of an interger id
|
15 years ago |
|
runmode-erf-file.c
|
Fix pfring commandline handling.
|
15 years ago |
|
runmode-erf-file.h
|
modify runmode api to accept conf runmode paramter as a char string, instead of an interger id
|
15 years ago |
|
runmode-ipfw.c
|
modify runmode api to accept conf runmode paramter as a char string, instead of an interger id
|
15 years ago |
|
runmode-ipfw.h
|
modify runmode api to accept conf runmode paramter as a char string, instead of an interger id
|
15 years ago |
|
runmode-nfq.c
|
modify runmode api to accept conf runmode paramter as a char string, instead of an interger id
|
15 years ago |
|
runmode-nfq.h
|
modify runmode api to accept conf runmode paramter as a char string, instead of an interger id
|
15 years ago |
|
runmode-pcap-file.c
|
Fix pfring commandline handling.
|
15 years ago |
|
runmode-pcap-file.h
|
modify runmode api to accept conf runmode paramter as a char string, instead of an interger id
|
15 years ago |
|
runmode-pcap.c
|
Fix pfring commandline handling.
|
15 years ago |
|
runmode-pcap.h
|
modify runmode api to accept conf runmode paramter as a char string, instead of an interger id
|
15 years ago |
|
runmode-pfring.c
|
Properly initialize pfring runmode before using it. Fix malformed conf api calls.
|
15 years ago |
|
runmode-pfring.h
|
modify runmode api to accept conf runmode paramter as a char string, instead of an interger id
|
15 years ago |
|
runmodes.c
|
Slightly clean up --list-runmodes output.
|
15 years ago |
|
runmodes.h
|
modify runmode api to accept conf runmode paramter as a char string, instead of an interger id
|
15 years ago |
|
source-erf-dag.c
|
RFC: modify error treatment in PacketCopyData
|
15 years ago |
|
source-erf-dag.h
|
…
|
|
|
source-erf-file.c
|
Modify files to avoid direct pckt payload access
|
15 years ago |
|
source-erf-file.h
|
…
|
|
|
source-ipfw.c
|
Fix pfring commandline handling.
|
15 years ago |
|
source-ipfw.h
|
…
|
|
|
source-nfq-prototypes.h
|
…
|
|
|
source-nfq.c
|
nfq_set_mark: handle feature in NFQ.
|
15 years ago |
|
source-nfq.h
|
source-nfq: Factorize buffer usage
|
15 years ago |
|
source-pcap-file.c
|
Modify files to avoid direct pckt payload access
|
15 years ago |
|
source-pcap-file.h
|
…
|
|
|
source-pcap.c
|
Fixing libpcap 0.x.x specific code, take 2.
|
15 years ago |
|
source-pcap.h
|
Add (experimental) support for using multiple pcap devices to acquire packets from. Just passing multiple -i <dev> options on the commandline will activate this. Windows not yet supported.
|
15 years ago |
|
source-pfring.c
|
Properly initialize pfring runmode before using it. Fix malformed conf api calls.
|
15 years ago |
|
source-pfring.h
|
Add option to PF_RING to have multiple reader threads. Improve general performance of the PF_RING module.
|
15 years ago |
|
stream-tcp-inline.c
|
Small optimizations to IPV4 and TCP header parsing.
|
15 years ago |
|
stream-tcp-inline.h
|
Do the actual checksum recalculation and packet replacement on modifing a packet in the stream engine.
|
15 years ago |
|
stream-tcp-private.h
|
Implement SACK in the stream engine.
|
15 years ago |
|
stream-tcp-reassemble.c
|
push all proto detection code into their respective app parser register functions for every alproto
|
15 years ago |
|
stream-tcp-reassemble.h
|
Fix broken setup of end of stream pseudo packet.
|
15 years ago |
|
stream-tcp-sack.c
|
Fix a logic error in the SACK list cleanup causing a memleak and invalid memory access at the same time.
|
15 years ago |
|
stream-tcp-sack.h
|
Implement SACK in the stream engine.
|
15 years ago |
|
stream-tcp-util.c
|
Expand and fix stream unittest helpers.
|
15 years ago |
|
stream-tcp-util.h
|
Initial version of a inline raw reassembly function that reassembles in a sliding window. Introduce new unittest helpers for stream reassembly.
|
15 years ago |
|
stream-tcp.c
|
Add proper RST handling to all TCP states.
|
15 years ago |
|
stream-tcp.h
|
Enforce configurable minimum chunk size in raw stream reassembly. Minor stream cleanups, unittest updates.
|
15 years ago |
|
stream.c
|
Enforce configurable minimum chunk size in raw stream reassembly. Minor stream cleanups, unittest updates.
|
15 years ago |
|
stream.h
|
Removed FLOW_AL_STREAM_START, EOF and GAP flags. We don't need these. Just use STREAM_* flags
|
15 years ago |
|
suricata-common.h
|
Compilation fix for OpenBSD and win32.
|
15 years ago |
|
suricata.c
|
Experimental support for PCRE-sljit enable via --enable-pcre-sljit
|
15 years ago |
|
suricata.h
|
Bump version to 1.1beta2
|
15 years ago |
|
threads.c
|
Adding atomic bitwise operations api and rwlocks support
|
15 years ago |
|
threads.h
|
Compilation fix for OpenBSD and win32.
|
15 years ago |
|
threadvars.h
|
Implement function needed for affinity in tm-threads
|
15 years ago |
|
tm-modules.c
|
…
|
|
|
tm-modules.h
|
first stab at pcap logging no rotating buff etc
|
15 years ago |
|
tm-queuehandlers.c
|
…
|
|
|
tm-queuehandlers.h
|
…
|
|
|
tm-queues.c
|
…
|
|
|
tm-queues.h
|
…
|
|
|
tm-threads.c
|
Exit on thread restart limit reached.
|
15 years ago |
|
tm-threads.h
|
affinity: Use configured 'threads' value if set
|
15 years ago |
|
tmqh-flow.c
|
Various fixes for issues reported by clang.
|
15 years ago |
|
tmqh-flow.h
|
…
|
|
|
tmqh-nfq.c
|
…
|
|
|
tmqh-nfq.h
|
…
|
|
|
tmqh-packetpool.c
|
Convert Packet tunnel variables to bit flag checks.
|
15 years ago |
|
tmqh-packetpool.h
|
Clean up packet pool handler on shutdown.
|
15 years ago |
|
tmqh-ringbuffer.c
|
Make malloc errors on initialization stage a fatal error, resulting on a exit() call
|
15 years ago |
|
tmqh-ringbuffer.h
|
…
|
|
|
tmqh-simple.c
|
…
|
|
|
tmqh-simple.h
|
…
|
|
|
util-action.c
|
…
|
|
|
util-action.h
|
…
|
|
|
util-affinity.c
|
Compilation fix for OpenBSD and win32.
|
15 years ago |
|
util-affinity.h
|
Compilation fix for OpenBSD and win32.
|
15 years ago |
|
util-atomic.h
|
Adding atomic bitwise operations api and rwlocks support
|
15 years ago |
|
util-binsearch.c
|
…
|
|
|
util-binsearch.h
|
…
|
|
|
util-bloomfilter-counting.c
|
Fix bloomfilter issue on big endian.
|
15 years ago |
|
util-bloomfilter-counting.h
|
…
|
|
|
util-bloomfilter.c
|
…
|
|
|
util-bloomfilter.h
|
Change BloomFilter structure layout to reflect order of access.
|
15 years ago |
|
util-byte.c
|
fix possible typo in strtoul error handling.
|
15 years ago |
|
util-byte.h
|
Compilation fix for OpenBSD and win32.
|
15 years ago |
|
util-cidr.c
|
…
|
|
|
util-cidr.h
|
…
|
|
|
util-classification-config.c
|
…
|
|
|
util-classification-config.h
|
…
|
|
|
util-clock.h
|
…
|
|
|
util-cpu.c
|
util-cpu: fix trivial typo in documentation
|
15 years ago |
|
util-cpu.h
|
…
|
|
|
util-cuda-handlers.c
|
Don't print message after SCMalloc failure.
|
15 years ago |
|
util-cuda-handlers.h
|
cuda handlers support multiple CUmodules per context
|
15 years ago |
|
util-cuda.c
|
Fixed optional args in SCCudaModuleGetGlobal
|
15 years ago |
|
util-cuda.h
|
added texture reference api to util-cuda
|
15 years ago |
|
util-daemon.c
|
naming changes for runmodes
|
15 years ago |
|
util-daemon.h
|
…
|
|
|
util-debug-filters.c
|
Work around a suspected fp in clang.
|
15 years ago |
|
util-debug-filters.h
|
…
|
|
|
util-debug.c
|
Add option to set the syslog level for the alerts. Minor cleanups.
|
15 years ago |
|
util-debug.h
|
Increase logline max length.
|
15 years ago |
|
util-decode-asn1.c
|
Various fixes for issues reported by clang.
|
15 years ago |
|
util-decode-asn1.h
|
Fix asn1 decoder frame oob mem. Adding max stack frames to suricata.yaml
|
15 years ago |
|
util-enum.c
|
…
|
|
|
util-enum.h
|
…
|
|
|
util-error.c
|
Make error on <- direction operation use more explicit.
|
15 years ago |
|
util-error.h
|
Make error on <- direction operation use more explicit.
|
15 years ago |
|
util-fix_checksum.c
|
…
|
|
|
util-fix_checksum.h
|
…
|
|
|
util-fmemopen.c
|
Compilation fix for OpenBSD and win32.
|
15 years ago |
|
util-fmemopen.h
|
Compilation fix for OpenBSD and win32.
|
15 years ago |
|
util-hash.c
|
Add memcmp api with a plain memcmp function and a SSE3 accelerated memcmp.
|
15 years ago |
|
util-hash.h
|
…
|
|
|
util-hashlist.c
|
Add memcmp api with a plain memcmp function and a SSE3 accelerated memcmp.
|
15 years ago |
|
util-hashlist.h
|
…
|
|
|
util-host-os-info.c
|
Make malloc errors on initialization stage a fatal error, resulting on a exit() call
|
15 years ago |
|
util-host-os-info.h
|
…
|
|
|
util-ioctl.c
|
Add strncpy and strncat to banned function list as we have better replacements: strlcpy and strlcat.
|
15 years ago |
|
util-ioctl.h
|
Add interface setting discovery via ioctl
|
15 years ago |
|
util-mem.h
|
Adapt malloc macro's to only display errors during init, not during runtime. At runtime it could make us crawl if the system runs out of memory.
|
15 years ago |
|
util-memcmp.c
|
Fix SSE memcmp functions reading beyond the buffer. Add tests to bench them.
|
15 years ago |
|
util-memcmp.h
|
Fix memcmp checks that prevent reading past buffer boundary.
|
15 years ago |
|
util-mpm-ac-gfbs.c
|
Don't print message after SCMalloc failure.
|
15 years ago |
|
util-mpm-ac-gfbs.h
|
fix hash bug in ac-gfbs. Should reduce the no of patterns added for single context ac-gfbs from a million to a couple of thousands. Also support no case handling. \todo support insertion of final state presence into goto_table and failure table state transitions
|
15 years ago |
|
util-mpm-ac.c
|
Reenable SSE3 memcmp and switch AC memcmp to use the SCMemcmp wrapper.
|
15 years ago |
|
util-mpm-ac.h
|
support cases for ac, where we have a single pattern in 2 different sigs, but one that is case-senstive and the other not. Also remove duplicate pids from the output_table
|
15 years ago |
|
util-mpm-b2g-cuda-kernel.cu
|
…
|
|
|
util-mpm-b2g-cuda.c
|
Fix some Packet initialisation.
|
15 years ago |
|
util-mpm-b2g-cuda.h
|
cuda streams support in b2g-cuda MPM
|
15 years ago |
|
util-mpm-b2g.c
|
Don't print message after SCMalloc failure.
|
15 years ago |
|
util-mpm-b2g.h
|
Change mpm hash_size config setting highest to higher as highest wasn't the... highest. Max was higher. Leaving highest as an alias to higher for backwards compatibility.
|
15 years ago |
|
util-mpm-b2gc.c
|
Don't print message after SCMalloc failure.
|
15 years ago |
|
util-mpm-b2gc.h
|
Change mpm hash_size config setting highest to higher as highest wasn't the... highest. Max was higher. Leaving highest as an alias to higher for backwards compatibility.
|
15 years ago |
|
util-mpm-b2gm.c
|
Don't print message after SCMalloc failure.
|
15 years ago |
|
util-mpm-b2gm.h
|
Change mpm hash_size config setting highest to higher as highest wasn't the... highest. Max was higher. Leaving highest as an alias to higher for backwards compatibility.
|
15 years ago |
|
util-mpm-b3g.c
|
Change mpm hash_size config setting highest to higher as highest wasn't the... highest. Max was higher. Leaving highest as an alias to higher for backwards compatibility.
|
15 years ago |
|
util-mpm-b3g.h
|
Change mpm hash_size config setting highest to higher as highest wasn't the... highest. Max was higher. Leaving highest as an alias to higher for backwards compatibility.
|
15 years ago |
|
util-mpm-wumanber.c
|
Further improve B2gc. Add B2gm. Improve memory layout.
|
15 years ago |
|
util-mpm-wumanber.h
|
…
|
|
|
util-mpm.c
|
Replace free and malloc by SC functions.
|
15 years ago |
|
util-mpm.h
|
cuda streams support in b2g-cuda MPM
|
15 years ago |
|
util-optimize.h
|
Further improve B2gc. Add B2gm. Improve memory layout.
|
15 years ago |
|
util-pidfile.c
|
…
|
|
|
util-pidfile.h
|
…
|
|
|
util-pool.c
|
…
|
|
|
util-pool.h
|
…
|
|
|
util-print.c
|
Add option to set the syslog level for the alerts. Minor cleanups.
|
15 years ago |
|
util-print.h
|
Add option to set the syslog level for the alerts. Minor cleanups.
|
15 years ago |
|
util-privs.c
|
fixed runmode name changes that was missed in the previous changes to the runmode api
|
15 years ago |
|
util-privs.h
|
…
|
|
|
util-profiling.c
|
Minor profiling fix: don't close stdout.
|
15 years ago |
|
util-profiling.h
|
Convert to logging perf stats to file by default. Add a few columns to output avg ticks per match, avg ticks non match, allow sorting on based on them.
|
15 years ago |
|
util-proto-name.c
|
Fix a potential invalid memory read in the protocol name code used by alert-fastlog.
|
15 years ago |
|
util-proto-name.h
|
Fix a potential invalid memory read in the protocol name code used by alert-fastlog.
|
15 years ago |
|
util-radix-tree.c
|
Various fixes for issues reported by clang.
|
15 years ago |
|
util-radix-tree.h
|
Many small performance updates.
|
15 years ago |
|
util-random.c
|
…
|
|
|
util-random.h
|
…
|
|
|
util-reference-config.c
|
compilation fix missing UT ifdef wrapper in reference code
|
15 years ago |
|
util-reference-config.h
|
Support for reference.config file
|
15 years ago |
|
util-ringbuffer.c
|
…
|
|
|
util-ringbuffer.h
|
Fix a compiler warning due to a broken prototype declaration.
|
15 years ago |
|
util-rule-vars.c
|
…
|
|
|
util-rule-vars.h
|
…
|
|
|
util-spm-bm.c
|
Don't print message after SCMalloc failure.
|
15 years ago |
|
util-spm-bm.h
|
Make malloc errors on initialization stage a fatal error, resulting on a exit() call
|
15 years ago |
|
util-spm-bs.c
|
…
|
|
|
util-spm-bs.h
|
…
|
|
|
util-spm-bs2bm.c
|
…
|
|
|
util-spm-bs2bm.h
|
…
|
|
|
util-spm.c
|
…
|
|
|
util-spm.h
|
…
|
|
|
util-strlcatu.c
|
…
|
|
|
util-strlcpyu.c
|
…
|
|
|
util-syslog.c
|
Add option to set the syslog level for the alerts. Minor cleanups.
|
15 years ago |
|
util-syslog.h
|
Add option to set the syslog level for the alerts. Minor cleanups.
|
15 years ago |
|
util-threshold-config.c
|
Use already defined macro instead of integer
|
15 years ago |
|
util-threshold-config.h
|
…
|
|
|
util-time.c
|
…
|
|
|
util-time.h
|
…
|
|
|
util-unittest-helper.c
|
Fix IP-Only unittests failing on Big Endian.
|
15 years ago |
|
util-unittest-helper.h
|
Fix IP-Only unittests failing on Big Endian.
|
15 years ago |
|
util-unittest.c
|
list runmodes. Allow specification of runmode id from cof file. Also allow for command line override
|
15 years ago |
|
util-unittest.h
|
list runmodes. Allow specification of runmode id from cof file. Also allow for command line override
|
15 years ago |
|
util-validate.h
|
Add SCTP to packet validation
|
15 years ago |
|
util-var-name.c
|
…
|
|
|
util-var-name.h
|
…
|
|
|
util-var.c
|
…
|
|
|
util-var.h
|
…
|
|
|
win32-misc.c
|
Use snprintf instead of sprintf.
|
15 years ago |
|
win32-misc.h
|
…
|
|
|
win32-service.c
|
Add strncpy and strncat to banned function list as we have better replacements: strlcpy and strlcat.
|
15 years ago |
|
win32-service.h
|
…
|
|
|
win32-syslog.h
|
…
|
|
