You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/src
Victor Julien c4a9580fce detect file: improve multi file handling
When multiple files were in a tx, the first one(s) closed/complete
and a new open one as well, a match in the former could lead to not
inspecting the latter.

This patch adds a workaround for this case, by allowing the file
inspection code to return a special code for 'match, but more files
available in tx'.

The stateful detection engine will then not make this match final for
the tx. It relies on the file pruning to kick in to make sure the
already complete files are removed from the tx before the next time
the detection engine is called on the tx.
10 years ago
..
Makefile.am profiling: output post-prefilter matches 10 years ago
action-globals.h
alert-debuglog.c Corrected and unified debugmessages for init data errors in *ThreadInit. 10 years ago
alert-debuglog.h
alert-fastlog.c Removed duplicate include statements. 10 years ago
alert-fastlog.h
alert-prelude.c prelude: clean up memory on setup failure 11 years ago
alert-prelude.h
alert-syslog.c
alert-syslog.h
alert-unified2-alert.c Removed duplicate include statements. 10 years ago
alert-unified2-alert.h
app-layer-dcerpc-common.h dcerpc: cleanup list handling 11 years ago
app-layer-dcerpc-udp.c tests: no longer necessary to provide successful return code 10 years ago
app-layer-dcerpc-udp.h
app-layer-dcerpc.c tests: no longer necessary to provide successful return code 10 years ago
app-layer-dcerpc.h dcerpc: fix memory leak when called from smb 11 years ago
app-layer-detect-proto.c tests: no longer necessary to provide successful return code 10 years ago
app-layer-detect-proto.h
app-layer-dns-common.c dns: don't read uninitialized memory in name parsing 10 years ago
app-layer-dns-common.h counters: make DNS counters globals 11 years ago
app-layer-dns-tcp.c dns: reject bad response data 11 years ago
app-layer-dns-tcp.h
app-layer-dns-udp.c dns: improve handling of tx pick up on response 10 years ago
app-layer-dns-udp.h
app-layer-events.c
app-layer-events.h
app-layer-ftp.c tests: no longer necessary to provide successful return code 10 years ago
app-layer-ftp.h
app-layer-htp-body.c Removed duplicate include statements. 10 years ago
app-layer-htp-body.h http: remove unused param from HtpBodyAppendChunk 11 years ago
app-layer-htp-file.c Removed duplicate include statements. 10 years ago
app-layer-htp-file.h htp file: constify name/data args 11 years ago
app-layer-htp-libhtp.c
app-layer-htp-libhtp.h
app-layer-htp-mem.c htp: add HTPCalloc wrapper 11 years ago
app-layer-htp-mem.h htp: add HTPCalloc wrapper 11 years ago
app-layer-htp-xff.c tests: no longer necessary to provide successful return code 10 years ago
app-layer-htp-xff.h xff: support ports and more ipv6 notations 11 years ago
app-layer-htp.c http: flag destate about new files 10 years ago
app-layer-htp.h app-layer-htp: add http_body_inline setting 11 years ago
app-layer-modbus.c QA: direct access from commandline to AppLayer API 10 years ago
app-layer-modbus.h
app-layer-nbss.h
app-layer-parser.c afl: add support for AFL PERSISTANT_MODE 10 years ago
app-layer-parser.h QA: direct access from commandline to AppLayer API 10 years ago
app-layer-protos.c app-layer: template for application layer parser 11 years ago
app-layer-protos.h app-layer: template for application layer parser 11 years ago
app-layer-smb.c tests: no longer necessary to provide successful return code 10 years ago
app-layer-smb.h
app-layer-smb2.c tests: no longer necessary to provide successful return code 10 years ago
app-layer-smb2.h
app-layer-smtp.c detect file: improve multi file handling 10 years ago
app-layer-smtp.h app-layer-smtp: fix memory leak 11 years ago
app-layer-ssh.c tests: no longer necessary to provide successful return code 10 years ago
app-layer-ssh.h lua: SSH output support 11 years ago
app-layer-ssl.c app-layer-ssl: code cleanup 10 years ago
app-layer-ssl.h app-layer-ssl: fix memleak 10 years ago
app-layer-template.c template app-layer: disable if not in config file (default) 11 years ago
app-layer-template.h app-layer: template for application layer parser 11 years ago
app-layer-tls-handshake.c app-layer-tls-handshake: code cleanup 10 years ago
app-layer-tls-handshake.h
app-layer.c Removed duplicate include statements. 10 years ago
app-layer.h counters: work around unix-socket init issues 11 years ago
conf-yaml-loader.c tests: no longer necessary to provide successful return code 10 years ago
conf-yaml-loader.h
conf.c conf: use new testing macros 10 years ago
conf.h --set - handle spaces on either side of '=' 11 years ago
counters.c afl: add define to disable mgt threads 10 years ago
counters.h jansson: include in suricata-common.h 11 years ago
data-queue.c
data-queue.h
debug.h
decode-erspan.c erspan: respect vlan.use-for-tracking setting 11 years ago
decode-erspan.h decode: add ERSPANv1 decoder 11 years ago
decode-ethernet.c tests: no longer necessary to provide successful return code 10 years ago
decode-ethernet.h gre: support transparent ethernet bridge decoding 11 years ago
decode-events.c decode-events: counters for decode events errors 10 years ago
decode-events.h decode-events: counters for decode events errors 10 years ago
decode-gre.c tests: no longer necessary to provide successful return code 10 years ago
decode-gre.h
decode-icmpv4.c tests: no longer necessary to provide successful return code 10 years ago
decode-icmpv4.h icmpv4: remove unused header fields 11 years ago
decode-icmpv6.c tests: no longer necessary to provide successful return code 10 years ago
decode-icmpv6.h
decode-ipv4.c tests: no longer necessary to provide successful return code 10 years ago
decode-ipv4.h
decode-ipv6.c tests: no longer necessary to provide successful return code 10 years ago
decode-ipv6.h
decode-mpls.c tests: no longer necessary to provide successful return code 10 years ago
decode-mpls.h
decode-null.c counters: s/SCPerfCounterIncr/StatsIncr/g 11 years ago
decode-null.h pcap: implement LINKTYPE_NULL 11 years ago
decode-ppp.c tests: no longer necessary to provide successful return code 10 years ago
decode-ppp.h
decode-pppoe.c tests: no longer necessary to provide successful return code 10 years ago
decode-pppoe.h
decode-raw.c tests: no longer necessary to provide successful return code 10 years ago
decode-raw.h
decode-sctp.c counters: s/SCPerfCounterIncr/StatsIncr/g 11 years ago
decode-sctp.h
decode-sll.c counters: s/SCPerfCounterIncr/StatsIncr/g 11 years ago
decode-sll.h
decode-tcp.c tests: no longer necessary to provide successful return code 10 years ago
decode-tcp.h tcp: reduce TCP options storage in packets 10 years ago
decode-template.c decoder: add template/example 11 years ago
decode-template.h decoder: add template/example 11 years ago
decode-teredo.c decode: clean up tunnel decode logic 11 years ago
decode-teredo.h
decode-udp.c tests: no longer necessary to provide successful return code 10 years ago
decode-udp.h
decode-vlan.c tests: no longer necessary to provide successful return code 10 years ago
decode-vlan.h
decode.c afl: add support for AFL PERSISTANT_MODE 10 years ago
decode.h QA: add --afl-decoder-ppp=<file> 10 years ago
defrag-config.c defrag: free defrag tree at exit 10 years ago
defrag-config.h defrag: free defrag tree at exit 10 years ago
defrag-hash.c afl: add define to disable rand_r use 10 years ago
defrag-hash.h
defrag-queue.c
defrag-queue.h
defrag-timeout.c
defrag-timeout.h
defrag.c tests: no longer necessary to provide successful return code 10 years ago
defrag.h defrag: tracker initialization cleanup 11 years ago
detect-ack.c tests: no longer necessary to provide successful return code 10 years ago
detect-ack.h
detect-app-layer-event.c Removed duplicate include statements. 10 years ago
detect-app-layer-event.h
detect-app-layer-protocol.c tests: no longer necessary to provide successful return code 10 years ago
detect-app-layer-protocol.h
detect-asn1.c tests: no longer necessary to provide successful return code 10 years ago
detect-asn1.h
detect-base64-data.c tests: no longer necessary to provide successful return code 10 years ago
detect-base64-data.h base64_decode, base64_data: decode and match base64 11 years ago
detect-base64-decode.c Removed duplicate include statements. 10 years ago
detect-base64-decode.h base64_decode, base64_data: decode and match base64 11 years ago
detect-byte-extract.c detect keywords: use parse regex util func 10 years ago
detect-byte-extract.h
detect-bytejump.c detect keywords: use parse regex util func 10 years ago
detect-bytejump.h
detect-bytetest.c detect keywords: use parse regex util func 10 years ago
detect-bytetest.h
detect-classtype.c detect keywords: use parse regex util func 10 years ago
detect-classtype.h
detect-content.c tests: no longer necessary to provide successful return code 10 years ago
detect-content.h mpm: improve negated mpm 10 years ago
detect-csum.c tests: no longer necessary to provide successful return code 10 years ago
detect-csum.h
detect-dce-iface.c detect keywords: use parse regex util func 10 years ago
detect-dce-iface.h
detect-dce-opnum.c detect keywords: use parse regex util func 10 years ago
detect-dce-opnum.h
detect-dce-stub-data.c tests: no longer necessary to provide successful return code 10 years ago
detect-dce-stub-data.h
detect-depth.c Removed duplicate include statements. 10 years ago
detect-depth.h
detect-detection-filter.c Removed duplicate include statements. 10 years ago
detect-detection-filter.h
detect-distance.c Removed duplicate include statements. 10 years ago
detect-distance.h
detect-dns-query.c Removed duplicate include statements. 10 years ago
detect-dns-query.h
detect-dsize.c Removed duplicate include statements. 10 years ago
detect-dsize.h
detect-engine-address-ipv4.c Removed duplicate include statements. 10 years ago
detect-engine-address-ipv4.h
detect-engine-address-ipv6.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-address-ipv6.h
detect-engine-address.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-address.h detect-address: remove debug mem counters 10 years ago
detect-engine-alert.c detect: set flow noinspect on pass in applayer/stream 11 years ago
detect-engine-alert.h
detect-engine-analyzer.c rule analyzer: add no/both direction warning 10 years ago
detect-engine-analyzer.h detect: constify mpm/detect funcs 10 years ago
detect-engine-apt-event.c
detect-engine-apt-event.h
detect-engine-content-inspection.c Fix two more potential issues like bug 1550 11 years ago
detect-engine-content-inspection.h base64_decode, base64_data: decode and match base64 11 years ago
detect-engine-dcepayload.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-dcepayload.h
detect-engine-dns.c mpm: optimize calls 10 years ago
detect-engine-dns.h dns: generic inspect engines for DNS 11 years ago
detect-engine-event.c detect keywords: use parse regex util func 10 years ago
detect-engine-event.h decode-events: counters for decode events errors 10 years ago
detect-engine-file.c detect file: improve multi file handling 10 years ago
detect-engine-file.h
detect-engine-filedata-smtp.c Removed duplicate include statements. 10 years ago
detect-engine-filedata-smtp.h UT: implement tests for inspection code 11 years ago
detect-engine-hcbd.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-hcbd.h
detect-engine-hcd.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-hcd.h
detect-engine-hhd.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-hhd.h
detect-engine-hhhd.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-hhhd.h
detect-engine-hmd.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-hmd.h
detect-engine-hrhd.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-hrhd.h
detect-engine-hrhhd.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-hrhhd.h
detect-engine-hrl.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-hrl.h
detect-engine-hrud.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-hrud.h
detect-engine-hsbd.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-hsbd.h
detect-engine-hscd.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-hscd.h
detect-engine-hsmd.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-hsmd.h
detect-engine-hua.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-hua.h
detect-engine-iponly.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-iponly.h
detect-engine-loader.c cppcheck: work around snprintf warning 10 years ago
detect-engine-loader.h detect loader: move to own file 11 years ago
detect-engine-modbus.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-modbus.h
detect-engine-mpm.c Removed duplicate include statements. 10 years ago
detect-engine-mpm.h mpm: clean up builtin mpm setup, enable single/full 10 years ago
detect-engine-payload.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-payload.h
detect-engine-port.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-port.h detect-port: remove debug mem counters 10 years ago
detect-engine-profile.c profiling: output post-prefilter matches 10 years ago
detect-engine-profile.h profiling: output post-prefilter matches 10 years ago
detect-engine-proto.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-proto.h detect: constify mpm/detect funcs 10 years ago
detect-engine-siggroup.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-siggroup.h detect grouping: remove debug mem counters 10 years ago
detect-engine-sigorder.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-sigorder.h vars: redo var name <-> idx handling 11 years ago
detect-engine-state.c detect file: improve multi file handling 10 years ago
detect-engine-state.h detect file: improve multi file handling 10 years ago
detect-engine-tag.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-tag.h
detect-engine-template.c app-layer: template for application layer content inspection 11 years ago
detect-engine-template.h app-layer: template for application layer content inspection 11 years ago
detect-engine-threshold.c threshold: remove debug message from info loglevel 11 years ago
detect-engine-threshold.h
detect-engine-uri.c tests: no longer necessary to provide successful return code 10 years ago
detect-engine-uri.h
detect-engine.c Removed duplicate include statements. 10 years ago
detect-engine.h multi-detect: improve error handling 11 years ago
detect-fast-pattern.c detect keywords: use parse regex util func 10 years ago
detect-fast-pattern.h
detect-file-data.c tests: no longer necessary to provide successful return code 10 years ago
detect-file-data.h
detect-fileext.c tests: no longer necessary to provide successful return code 10 years ago
detect-fileext.h
detect-filemagic.c Removed duplicate include statements. 10 years ago
detect-filemagic.h
detect-filemd5.c tests: no longer necessary to provide successful return code 10 years ago
detect-filemd5.h
detect-filename.c tests: no longer necessary to provide successful return code 10 years ago
detect-filename.h
detect-filesize.c Removed duplicate include statements. 10 years ago
detect-filesize.h
detect-filestore.c detect keywords: use parse regex util func 10 years ago
detect-filestore.h
detect-flags.c detect keywords: use parse regex util func 10 years ago
detect-flags.h detect: SYN flags 10 years ago
detect-flow.c detect keywords: use parse regex util func 10 years ago
detect-flow.h
detect-flowbits.c Removed duplicate include statements. 10 years ago
detect-flowbits.h
detect-flowint.c detect keywords: use parse regex util func 10 years ago
detect-flowint.h
detect-flowvar.c detect keywords: use parse regex util func 10 years ago
detect-flowvar.h
detect-fragbits.c detect keywords: use parse regex util func 10 years ago
detect-fragbits.h
detect-fragoffset.c Removed duplicate include statements. 10 years ago
detect-fragoffset.h
detect-ftpbounce.c tests: no longer necessary to provide successful return code 10 years ago
detect-ftpbounce.h
detect-geoip.c tests: no longer necessary to provide successful return code 10 years ago
detect-geoip.h
detect-gid.c detect keywords: use parse regex util func 10 years ago
detect-gid.h
detect-hostbits.c detect keywords: use parse regex util func 10 years ago
detect-hostbits.h xbits: implement ip_src/ip_dst support 11 years ago
detect-http-client-body.c tests: no longer necessary to provide successful return code 10 years ago
detect-http-client-body.h
detect-http-cookie.c tests: no longer necessary to provide successful return code 10 years ago
detect-http-cookie.h
detect-http-header.c tests: no longer necessary to provide successful return code 10 years ago
detect-http-header.h
detect-http-hh.c tests: no longer necessary to provide successful return code 10 years ago
detect-http-hh.h
detect-http-hrh.c tests: no longer necessary to provide successful return code 10 years ago
detect-http-hrh.h
detect-http-method.c tests: no longer necessary to provide successful return code 10 years ago
detect-http-method.h detect: validate http_method pattern 10 years ago
detect-http-raw-header.c tests: no longer necessary to provide successful return code 10 years ago
detect-http-raw-header.h
detect-http-raw-uri.c tests: no longer necessary to provide successful return code 10 years ago
detect-http-raw-uri.h
detect-http-server-body.c tests: no longer necessary to provide successful return code 10 years ago
detect-http-server-body.h
detect-http-stat-code.c tests: no longer necessary to provide successful return code 10 years ago
detect-http-stat-code.h
detect-http-stat-msg.c tests: no longer necessary to provide successful return code 10 years ago
detect-http-stat-msg.h
detect-http-ua.c tests: no longer necessary to provide successful return code 10 years ago
detect-http-ua.h
detect-http-uri.c tests: no longer necessary to provide successful return code 10 years ago
detect-http-uri.h
detect-icmp-id.c Removed duplicate include statements. 10 years ago
detect-icmp-id.h
detect-icmp-seq.c Removed duplicate include statements. 10 years ago
detect-icmp-seq.h
detect-icode.c Removed duplicate include statements. 10 years ago
detect-icode.h
detect-id.c detect keywords: use parse regex util func 10 years ago
detect-id.h
detect-ipopts.c detect keywords: use parse regex util func 10 years ago
detect-ipopts.h
detect-ipproto.c Removed duplicate include statements. 10 years ago
detect-ipproto.h
detect-iprep.c detect keywords: use parse regex util func 10 years ago
detect-iprep.h
detect-isdataat.c detect keywords: use parse regex util func 10 years ago
detect-isdataat.h
detect-itype.c Removed duplicate include statements. 10 years ago
detect-itype.h
detect-l3proto.c Removed duplicate include statements. 10 years ago
detect-l3proto.h
detect-lua-extensions.c lua: SSH support 11 years ago
detect-lua-extensions.h detect-lua: set direction 11 years ago
detect-lua.c tests: no longer necessary to provide successful return code 10 years ago
detect-lua.h
detect-mark.c detect keywords: use parse regex util func 10 years ago
detect-mark.h
detect-metadata.c
detect-metadata.h
detect-modbus.c detect keywords: use parse regex util func 10 years ago
detect-modbus.h
detect-msg.c tests: no longer necessary to provide successful return code 10 years ago
detect-msg.h
detect-noalert.c
detect-noalert.h
detect-nocase.c find and replace HSBDMATCH by FILEDATA 11 years ago
detect-nocase.h
detect-offset.c rule-parsing: quick fix for rules with wrong double quotes 11 years ago
detect-offset.h
detect-parse.c Removed duplicate include statements. 10 years ago
detect-parse.h QA: --afl-rules for faster rule fuzzing 10 years ago
detect-pcre.c Removed duplicate include statements. 10 years ago
detect-pcre.h
detect-pkt-data.c tests: no longer necessary to provide successful return code 10 years ago
detect-pkt-data.h
detect-pktvar.c detect keywords: use parse regex util func 10 years ago
detect-pktvar.h
detect-priority.c detect keywords: use parse regex util func 10 years ago
detect-priority.h
detect-rawbytes.c
detect-rawbytes.h
detect-reference.c detect keywords: use parse regex util func 10 years ago
detect-reference.h
detect-replace.c tests: no longer necessary to provide successful return code 10 years ago
detect-replace.h
detect-rev.c rule-parsing: quick fix for rules with wrong double quotes 11 years ago
detect-rev.h
detect-rpc.c detect keywords: use parse regex util func 10 years ago
detect-rpc.h
detect-sameip.c tests: no longer necessary to provide successful return code 10 years ago
detect-sameip.h
detect-seq.c tests: no longer necessary to provide successful return code 10 years ago
detect-seq.h
detect-sid.c tests: no longer necessary to provide successful return code 10 years ago
detect-sid.h
detect-ssh-proto-version.c detect keywords: use parse regex util func 10 years ago
detect-ssh-proto-version.h
detect-ssh-software-version.c detect keywords: use parse regex util func 10 years ago
detect-ssh-software-version.h
detect-ssl-state.c detect keywords: use parse regex util func 10 years ago
detect-ssl-state.h
detect-ssl-version.c detect keywords: use parse regex util func 10 years ago
detect-ssl-version.h
detect-stream_size.c detect keywords: use parse regex util func 10 years ago
detect-stream_size.h
detect-tag.c detect keywords: use parse regex util func 10 years ago
detect-tag.h
detect-template-buffer.c tests: no longer necessary to provide successful return code 10 years ago
detect-template-buffer.h app-layer: template for application layer content inspection 11 years ago
detect-template.c detect keywords: use parse regex util func 10 years ago
detect-template.h detect plugin: add template 11 years ago
detect-threshold.c Removed duplicate include statements. 10 years ago
detect-threshold.h suppress: add track by_either mode 11 years ago
detect-tls-version.c detect keywords: use parse regex util func 10 years ago
detect-tls-version.h
detect-tls.c detect keywords: use parse regex util func 10 years ago
detect-tls.h
detect-tos.c detect keywords: use parse regex util func 10 years ago
detect-tos.h
detect-ttl.c Removed duplicate include statements. 10 years ago
detect-ttl.h
detect-uricontent.c tests: no longer necessary to provide successful return code 10 years ago
detect-uricontent.h
detect-urilen.c Removed duplicate include statements. 10 years ago
detect-urilen.h
detect-window.c detect keywords: use parse regex util func 10 years ago
detect-window.h
detect-within.c Removed duplicate include statements. 10 years ago
detect-within.h
detect-xbits.c detect keywords: use parse regex util func 10 years ago
detect-xbits.h xbits: expire (first steps) 11 years ago
detect.c Removed duplicate include statements. 10 years ago
detect.h detect-flowvar: shrink mem structure by 8 bytes 10 years ago
flow-bit.c tests: no longer necessary to provide successful return code 10 years ago
flow-bit.h
flow-hash.c flow: record the flow hash for use as the output flow id 10 years ago
flow-hash.h
flow-manager.c afl: add define to disable mgt threads 10 years ago
flow-manager.h packet pool: fix memleaks 11 years ago
flow-private.h flowbits: remove unused debugging code 11 years ago
flow-queue.c
flow-queue.h
flow-storage.c tests: no longer necessary to provide successful return code 10 years ago
flow-storage.h
flow-timeout.c multi-detect: set tenant id on pseudo packets 11 years ago
flow-timeout.h
flow-util.c
flow-util.h multi-detect: set tenant id on pseudo packets 11 years ago
flow-var.c
flow-var.h
flow.c Removed duplicate include statements. 10 years ago
flow.h flow: record the flow hash for use as the output flow id 10 years ago
host-bit.c tests: no longer necessary to provide successful return code 10 years ago
host-bit.h hosts: consider hostbits/xbits status in timeout 11 years ago
host-queue.c
host-queue.h
host-storage.c tests: no longer necessary to provide successful return code 10 years ago
host-storage.h
host-timeout.c hosts: consider hostbits/xbits status in timeout 11 years ago
host-timeout.h
host.c afl: add define to disable rand_r use 10 years ago
host.h
ippair-bit.c tests: no longer necessary to provide successful return code 10 years ago
ippair-bit.h ippair: implement basic timeout check 11 years ago
ippair-queue.c
ippair-queue.h
ippair-storage.c tests: no longer necessary to provide successful return code 10 years ago
ippair-storage.h
ippair-timeout.c ippair: implement basic timeout check 11 years ago
ippair-timeout.h
ippair.c afl: add define to disable rand_r use 10 years ago
ippair.h
log-dnslog.c Corrected and unified debugmessages for init data errors in *ThreadInit. 10 years ago
log-dnslog.h
log-droplog.c Removed duplicate include statements. 10 years ago
log-droplog.h
log-file.c file-store: add force-filestore configuration option to enable writing all 11 years ago
log-file.h
log-filestore.c Corrected and unified debugmessages for init data errors in *ThreadInit. 10 years ago
log-filestore.h
log-httplog.c Corrected and unified debugmessages for init data errors in *ThreadInit. 10 years ago
log-httplog.h
log-pcap.c Corrected and unified debugmessages for init data errors in *ThreadInit. 10 years ago
log-pcap.h
log-stats.c Module specific error code for init ctx error. 10 years ago
log-stats.h
log-tcp-data.c Module specific error code for init ctx error. 10 years ago
log-tcp-data.h
log-tlslog.c log-tls: added SNI field to extended output 11 years ago
log-tlslog.h tls-store: now a separate module 11 years ago
log-tlsstore.c Corrected and unified debugmessages for init data errors in *ThreadInit. 10 years ago
log-tlsstore.h tls-store: now a separate module 11 years ago
output-file.c output-file: fix memleak 10 years ago
output-file.h
output-filedata.c file logging: fix bad end of file check 10 years ago
output-filedata.h
output-flow.c
output-flow.h
output-json-alert.c Removed duplicate include statements. 10 years ago
output-json-alert.h jansson: include in suricata-common.h 11 years ago
output-json-dns.c Corrected and unified debugmessages for init data errors in *ThreadInit. 10 years ago
output-json-dns.h
output-json-drop.c Removed duplicate include statements. 10 years ago
output-json-drop.h
output-json-email-common.c output-json-email: fix memleak 10 years ago
output-json-email-common.h json-email: JsonEmailAddMetadata update 11 years ago
output-json-file.c Corrected and unified debugmessages for init data errors in *ThreadInit. 10 years ago
output-json-file.h
output-json-flow.c Module specific error code for init ctx error. 10 years ago
output-json-flow.h
output-json-http.c Corrected and unified debugmessages for init data errors in *ThreadInit. 10 years ago
output-json-http.h jansson: include in suricata-common.h 11 years ago
output-json-netflow.c Module specific error code for init ctx error. 10 years ago
output-json-netflow.h
output-json-smtp.c Module specific error code for init ctx error. 10 years ago
output-json-smtp.h jansson: include in suricata-common.h 11 years ago
output-json-ssh.c Module specific error code for init ctx error. 10 years ago
output-json-ssh.h jansson: include in suricata-common.h 11 years ago
output-json-stats.c Module specific error code for init ctx error. 10 years ago
output-json-stats.h stats: export StatsToJSON 11 years ago
output-json-template.c Corrected and unified debugmessages for init data errors in *ThreadInit. 10 years ago
output-json-template.h app-layer: template for application layer tx logger 11 years ago
output-json-tls.c Module specific error code for init ctx error. 10 years ago
output-json-tls.h jansson: include in suricata-common.h 11 years ago
output-json.c Removed duplicate include statements. 10 years ago
output-json.h output-json: constify API 11 years ago
output-lua.c lua_close() segfaults on null pointers 10 years ago
output-lua.h
output-packet.c output-packet: fix memleak 10 years ago
output-packet.h
output-stats.c output-stats: fix memleak 10 years ago
output-stats.h counters: pass per thread stats to output api 11 years ago
output-streaming.c output-tx: use disrupt flags 11 years ago
output-streaming.h
output-tx.c tx logging: fix potential missed logging issue 10 years ago
output-tx.h
output.c
output.h
packet-queue.c packet pool: make sure packet next ptr is always set 10 years ago
packet-queue.h
pkt-var.c
pkt-var.h
ptxdump.py
queue.h
reputation.c Removed duplicate include statements. 10 years ago
reputation.h
respond-reject-libnet11.c
respond-reject-libnet11.h
respond-reject.c Reject ICMP traffic, not only TCP/UDP 11 years ago
respond-reject.h
runmode-af-packet.c af-packet: don't check GRO LRO on non ethernet 10 years ago
runmode-af-packet.h
runmode-erf-dag.c
runmode-erf-dag.h
runmode-erf-file.c tm-threads: unify thread names handling 10 years ago
runmode-erf-file.h
runmode-ipfw.c
runmode-ipfw.h
runmode-napatech.c
runmode-napatech.h
runmode-netmap.c netmap: support SW rings 11 years ago
runmode-netmap.h
runmode-nflog.c
runmode-nflog.h
runmode-nfq.c
runmode-nfq.h
runmode-pcap-file.c afl: optionally exit right after afl single runmode 10 years ago
runmode-pcap-file.h
runmode-pcap.c
runmode-pcap.h
runmode-pfring.c pfring pkt acq: keep running on 'pfring_set_cluster' failure when cluster is not required 11 years ago
runmode-pfring.h
runmode-tile.c tm-threads: unify thread names handling 10 years ago
runmode-tile.h
runmode-unittests.c Removed duplicate include statements. 10 years ago
runmode-unittests.h
runmode-unix-socket.c Removed duplicate include statements. 10 years ago
runmode-unix-socket.h multi-detect: add reload-tenant command 11 years ago
runmodes.c startup: move more into PostConfLoadedSetup 10 years ago
runmodes.h
source-af-packet.c detect reload: generic packet injection for capture 10 years ago
source-af-packet.h af-packet: don't check GRO LRO on non ethernet 10 years ago
source-erf-dag.c pkt acq: introduce break loop API 11 years ago
source-erf-dag.h
source-erf-file.c pkt acq: introduce break loop API 11 years ago
source-erf-file.h
source-ipfw.c pkt acq: introduce break loop API 11 years ago
source-ipfw.h
source-mpipe.c Removed duplicate include statements. 10 years ago
source-mpipe.h
source-napatech.c pkt acq: introduce break loop API 11 years ago
source-napatech.h
source-netmap.c netmap: implement capture inject packet flag 10 years ago
source-netmap.h netmap: support SW rings 11 years ago
source-nflog.c pkt acq: introduce break loop API 11 years ago
source-nflog.h
source-nfq-prototypes.h
source-nfq.c pkt acq: introduce break loop API 11 years ago
source-nfq.h
source-pcap-file.c pcap: small cleanups 10 years ago
source-pcap-file.h
source-pcap.c detect reload: generic packet injection for capture 10 years ago
source-pcap.h pcap-file: set tenant-id if available 11 years ago
source-pfring.c detect reload: generic packet injection for capture 10 years ago
source-pfring.h pfring pkt acq: keep running on 'pfring_set_cluster' failure when cluster is not required 11 years ago
stream-tcp-inline.c tests: no longer necessary to provide successful return code 10 years ago
stream-tcp-inline.h
stream-tcp-private.h stream: remove STREAMTCP_STREAM_FLAG_CLOSE_INITIATED logic 11 years ago
stream-tcp-reassemble.c tests: no longer necessary to provide successful return code 10 years ago
stream-tcp-reassemble.h http: make http.memuse a global counter 11 years ago
stream-tcp-sack.c tests: no longer necessary to provide successful return code 10 years ago
stream-tcp-sack.h
stream-tcp-util.c stream-tcp: improve test function cleanup 10 years ago
stream-tcp-util.h
stream-tcp.c stream-tcp: introduce stream cleanup function 10 years ago
stream-tcp.h stream-tcp: introduce stream cleanup function 10 years ago
stream.c stream: update StreamMsg to don't have fixed size 11 years ago
stream.h stream: update StreamMsg to don't have fixed size 11 years ago
suricata-common.h afl: add --enable-afl configure option 10 years ago
suricata.c QA: --afl-rules for faster rule fuzzing 10 years ago
suricata.h instance: add progname as ptr to argv[0] 10 years ago
threads-arch-tile.h threads: add untimed control cond call 11 years ago
threads-debug.h threads: add untimed control cond call 11 years ago
threads-profile.h threads: add untimed control cond call 11 years ago
threads.c tests: no longer necessary to provide successful return code 10 years ago
threads.h threads: add untimed control cond call 11 years ago
threadvars.h detect reload: generic packet injection for capture 10 years ago
tm-modules.c app-layer: template for application layer tx logger 11 years ago
tm-modules.h pkt acq: introduce break loop API 11 years ago
tm-queuehandlers.c
tm-queuehandlers.h
tm-queues.c tm-queue: unify queue name handling 10 years ago
tm-queues.h
tm-threads-common.h app-layer: template for application layer tx logger 11 years ago
tm-threads.c afl: special 'single' runmode 10 years ago
tm-threads.h detect reload: generic packet injection for capture 10 years ago
tmqh-flow.c tests: no longer necessary to provide successful return code 10 years ago
tmqh-flow.h autofp: print packet scheduler info only on autofp 10 years ago
tmqh-nfq.c
tmqh-nfq.h
tmqh-packetpool.c packet pool: make sure packet next ptr is always set 10 years ago
tmqh-packetpool.h threading: avoid autofp deadlock 11 years ago
tmqh-ringbuffer.c counters: remaining s/SCPerf/Stats/g 11 years ago
tmqh-ringbuffer.h
tmqh-simple.c counters: remaining s/SCPerf/Stats/g 11 years ago
tmqh-simple.h
unix-manager.c unix-manager: fix memleak at exit 10 years ago
unix-manager.h unix-manager: convert to thread module 11 years ago
util-action.c Removed duplicate include statements. 10 years ago
util-action.h
util-affinity.c Fix typos in an error message 10 years ago
util-affinity.h
util-atomic.c tests: no longer necessary to provide successful return code 10 years ago
util-atomic.h
util-base64.c base64: code style fixups 11 years ago
util-base64.h util-base64: strict mode - all characters must be valid 11 years ago
util-binsearch.c
util-binsearch.h
util-bloomfilter-counting.c tests: no longer necessary to provide successful return code 10 years ago
util-bloomfilter-counting.h
util-bloomfilter.c tests: no longer necessary to provide successful return code 10 years ago
util-bloomfilter.h mpm: constify search func args 10 years ago
util-buffer.c
util-buffer.h eve: fix mishandling of big messages 11 years ago
util-byte.c tests: no longer necessary to provide successful return code 10 years ago
util-byte.h
util-checksum.c
util-checksum.h
util-cidr.c
util-cidr.h
util-classification-config.c tests: no longer necessary to provide successful return code 10 years ago
util-classification-config.h classification: update pcre globals use 11 years ago
util-clock.h
util-conf.c
util-conf.h
util-coredump-config.c
util-coredump-config.h
util-cpu.c Fix compilation on systems with Musl 10 years ago
util-cpu.h
util-crypt.c
util-crypt.h
util-cuda-buffer.c tests: no longer necessary to provide successful return code 10 years ago
util-cuda-buffer.h
util-cuda-handlers.c cuda: fix compilation 11 years ago
util-cuda-handlers.h
util-cuda-vars.c cuda: fix compilation 11 years ago
util-cuda-vars.h
util-cuda.c tests: no longer necessary to provide successful return code 10 years ago
util-cuda.h
util-daemon.c daemon: suppress coverity resource leak warning (CID 400725) 10 years ago
util-daemon.h
util-debug-filters.c
util-debug-filters.h
util-debug.c tests: no longer necessary to provide successful return code 10 years ago
util-debug.h lua: print lua script func/line/file in SCLog* funcs 10 years ago
util-decode-asn1.c tests: no longer necessary to provide successful return code 10 years ago
util-decode-asn1.h
util-decode-der-get.c util-decode-der-get: code cleanup 10 years ago
util-decode-der-get.h
util-decode-der.c afl: add support for AFL PERSISTANT_MODE 10 years ago
util-decode-der.h QA: add --afl-der=<file> 10 years ago
util-decode-mime.c smtp/mime: allow unquoted name/filename fields 10 years ago
util-decode-mime.h QA: expose Mime decoding API to commandline using --afl-mime=<file> 10 years ago
util-device.c util: get rid of json_array_append 10 years ago
util-device.h device: constify string args 11 years ago
util-enum.c
util-enum.h
util-error.c Module specific error code for init ctx error. 10 years ago
util-error.h Module specific error code for init ctx error. 10 years ago
util-file.c detect file: improve multi file handling 10 years ago
util-file.h file: optionally use detect tracking in pruning 10 years ago
util-fix_checksum.c
util-fix_checksum.h
util-fmemopen.c
util-fmemopen.h
util-hash-lookup3.c util-hash-lookup3: Add hashlittle_safe() variant 10 years ago
util-hash-lookup3.h util-hash-lookup3: Add hashlittle_safe() variant 10 years ago
util-hash.c tests: no longer necessary to provide successful return code 10 years ago
util-hash.h
util-hashlist.c tests: no longer necessary to provide successful return code 10 years ago
util-hashlist.h
util-host-info.c util-host-info: fix memleaks 10 years ago
util-host-info.h
util-host-os-info.c tests: no longer necessary to provide successful return code 10 years ago
util-host-os-info.h
util-ioctl.c ioctl: fix NULL check after dereference (CID 1204326) 10 years ago
util-ioctl.h
util-ip.c ip parsing: fix cppcheck negative shift warning 10 years ago
util-ip.h
util-logopenfile-tile.c
util-logopenfile-tile.h
util-logopenfile.c redis: fix compiler warning 11 years ago
util-logopenfile.h output-json: fix regression on log prefix handling 11 years ago
util-lua-common.c lua: print lua script func/line/file in SCLog* funcs 10 years ago
util-lua-common.h
util-lua-dns.c lua: dns extensions 11 years ago
util-lua-dns.h
util-lua-http.c
util-lua-http.h
util-lua-ssh.c lua: SSH support 11 years ago
util-lua-ssh.h lua: SSH support 11 years ago
util-lua-tls.c lua: expose TLS certificate chain to lua 11 years ago
util-lua-tls.h lua: TLS support 11 years ago
util-lua.c lua: add direction support 11 years ago
util-lua.h lua: add direction support 11 years ago
util-magic.c tests: no longer necessary to provide successful return code 10 years ago
util-magic.h magic: make data arg const 11 years ago
util-mem.h
util-memcmp.c tests: no longer necessary to provide successful return code 10 years ago
util-memcmp.h
util-memcpy.h spm: constify search args 11 years ago
util-memrchr.c tests: no longer necessary to provide successful return code 10 years ago
util-memrchr.h
util-misc.c tests: no longer necessary to provide successful return code 10 years ago
util-misc.h
util-mpm-ac-bs.c tests: no longer necessary to provide successful return code 10 years ago
util-mpm-ac-bs.h mpm: unify & localize mpm pattern (id) handling 10 years ago
util-mpm-ac-cuda-kernel.cu
util-mpm-ac-tile-small.c mpm: constify search func args 10 years ago
util-mpm-ac-tile.c tests: no longer necessary to provide successful return code 10 years ago
util-mpm-ac-tile.h mpm: unify & localize mpm pattern (id) handling 10 years ago
util-mpm-ac.c tests: no longer necessary to provide successful return code 10 years ago
util-mpm-ac.h mpm: unify & localize mpm pattern (id) handling 10 years ago
util-mpm-hs.c tests: no longer necessary to provide successful return code 10 years ago
util-mpm-hs.h mpm: add Hyperscan integration 10 years ago
util-mpm.c mpm: remove useless flag from factory 10 years ago
util-mpm.h mpm: remove unused max pattern len field 10 years ago
util-optimize.h
util-path.c
util-path.h
util-pidfile.c
util-pidfile.h
util-pool-thread.c tests: no longer necessary to provide successful return code 10 years ago
util-pool-thread.h
util-pool.c tests: no longer necessary to provide successful return code 10 years ago
util-pool.h
util-print.c print: make PrintRawDataFp take a const arg 11 years ago
util-print.h print: make PrintRawDataFp take a const arg 11 years ago
util-privs.c Fix compilation on systems with Musl 10 years ago
util-privs.h
util-profiling-keywords.c profiling: initial rulegroup tracking 10 years ago
util-profiling-locks.c profiling: fix lock profile compilation 11 years ago
util-profiling-locks.h
util-profiling-rulegroups.c profiling: initial rulegroup tracking 10 years ago
util-profiling-rules.c util: get rid of json_array_append 10 years ago
util-profiling.c tests: no longer necessary to provide successful return code 10 years ago
util-profiling.h profiling: initial rulegroup tracking 10 years ago
util-proto-name.c parsing: s/strtok/strtok_r/g 11 years ago
util-proto-name.h
util-radix-tree.c tests: no longer necessary to provide successful return code 10 years ago
util-radix-tree.h
util-random.c
util-random.h
util-reference-config.c tests: no longer necessary to provide successful return code 10 years ago
util-reference-config.h reference: update pcre globals use 11 years ago
util-ringbuffer.c tests: no longer necessary to provide successful return code 10 years ago
util-ringbuffer.h
util-rohash.c
util-rohash.h
util-rule-vars.c tests: no longer necessary to provide successful return code 10 years ago
util-rule-vars.h
util-runmodes.c tm-threads: unify thread names handling 10 years ago
util-runmodes.h
util-running-modes.c util-running-mode: setup config file 11 years ago
util-running-modes.h
util-signal.c
util-signal.h
util-spm-bm.c spm: constify search args 11 years ago
util-spm-bm.h spm: constify search args 11 years ago
util-spm-bs.c
util-spm-bs.h
util-spm-bs2bm.c
util-spm-bs2bm.h
util-spm.c tests: no longer necessary to provide successful return code 10 years ago
util-spm.h spm: constify search args 11 years ago
util-storage.c tests: no longer necessary to provide successful return code 10 years ago
util-storage.h
util-strlcatu.c
util-strlcpyu.c
util-syslog.c
util-syslog.h
util-threshold-config.c tests: no longer necessary to provide successful return code 10 years ago
util-threshold-config.h
util-time.c Add timezone to timestamp in JSON logs 11 years ago
util-time.h
util-unittest-helper.c tests: no longer necessary to provide successful return code 10 years ago
util-unittest-helper.h
util-unittest.c testing: new test macros, new testing documentation group. 10 years ago
util-unittest.h testing: new test macros, new testing documentation group. 10 years ago
util-validate.h debug validation: introduce DEBUG_VALIDATE_BUG_ON 11 years ago
util-var-name.c vars: redo var name <-> idx handling 11 years ago
util-var-name.h vars: redo var name <-> idx handling 11 years ago
util-var.c BUG #1689: fix stack overflow when parsing variables 11 years ago
util-var.h BUG #1689: fix stack overflow when parsing variables 11 years ago
util-vector.h
win32-misc.c
win32-misc.h
win32-service.c
win32-service.h
win32-syslog.h