Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.

cybersecurityidsintrusion-detection-systemintrusion-prevention-systemipsnetwork-monitornetwork-monitoringnsmsecuritysuricatathreat-hunting

You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Eric Leblond 9e03550230 tls: fix problem with tls.store keyword ... Pierre Chifflier pointed out that a rule like: alert tls any any -> any any (msg:"TLS store"; tls.issuerdn:!"C=FR"; tls.store;) was alerting but not storing the certificate. If the filter was removed: alert tls any any -> any any (msg:"TLS store"; tls.store;) then tls.store is working as expected. This was linked with fact that logging is only done once for a SSL state. So without filter, once we have the info we can log and we run the storage. But when there is a filter, we log and then there is a filter analysis and alerting. And as logging as already be done we don't enter in the logging function and there is no storage. This patch forces the entrance in the log function when there is a request for TLS storage. And it adds an exit in the logging function to only do the storage part if the TLS state has already being logged.		12 years ago
benches	Initial add of the files.	16 years ago
contrib	Add option on Tile-Gx for logging for fast.log alerts over PCIe	12 years ago
doc	Update docs from wiki	13 years ago
m4	…
qa	Updated banned function cocci check	12 years ago
rules	classification: add category to some stream rules	12 years ago
scripts	suricatasc: fix make distcheck.	13 years ago
src	tls: fix problem with tls.store keyword	12 years ago
.gitignore	unittest: make check use a qa/log dir for logging	12 years ago
COPYING	…
ChangeLog	Update Changelog for 2.0rc3 release	12 years ago
LICENSE	…
Makefile.am	make install-full: get correct version of ET	12 years ago
Makefile.cvs	…
acsite.m4	…
autogen.sh	OpenBSD 5.2 build fixes, Unit test fix.	13 years ago
classification.config	Import of classification.config	16 years ago
config.rpath	Add file needed for some autotools version.	12 years ago
configure.ac	OpenBSD: set correct magic path	12 years ago
doxygen.cfg	doxygen: document all code	12 years ago
reference.config	Add md5 to reference.config.	14 years ago
suricata.yaml.in	yaml: remove rbn, add tls	12 years ago
threshold.config	threshold: improve comments of shipped threshold.config, add links to wiki.	13 years ago