1646 Commits (001f91056e6a10cfdac0e30c716ba3f76ba6cc09)

 

All Branches   

Search

Author	SHA1	Message	Date
Victor Julien	001f91056e	Add http_raw_header as an alias to the http_header keyword as that actually inspects the raw headers (see issue #243). Closes issue #242.	15 years ago
Victor Julien	4598274d07	Fix depth error messages referring to distance instead of depth, fix their layout.	15 years ago
Victor Julien	afdb39e5f6	Print an error if the protocol field of a signature contains a unknown/invalid value.	15 years ago
Victor Julien	8d0bc27fc4	Fix a case where alerting in inline mode would lead dropping on alert sigs.	15 years ago
Victor Julien	5a10eac5bd	Cleanup http_stat_code unittests, shrink data structure.	15 years ago
Victor Julien	1636152e32	Fix negated http_method not working properly, causing false positives.	15 years ago
Gurvinder Singh	b7da115e6d	support for http_stat_code keyword has been added to detection module	15 years ago
Gurvinder Singh	1deae70cf7	added http_stat_msg keyword support for detection module	15 years ago
Jason Ish	a4d19e4130	Add new profiling sort option, maxticks.	15 years ago
Anoop Saldanha	59923316bc	change the default recursion limit in the code to 3000, the value which we currently have in the conf file. Also change print modifier for printing timeval	15 years ago
Anoop Saldanha	5d9a453e0d	find an optimal value for detect-engine:inspection-recursion_limit + unittest	15 years ago
Anoop Saldanha	bc99328ec8	define a new conf paramter detect-engine:inspection-recursion-limit; Defines a recursion limit for content inspection code	15 years ago
William Metcalf	efeab331ea	compilation fix missing UT ifdef wrapper in reference code	15 years ago
Victor Julien	746ef0d2f8	Remove stray newline char from profiling output.	15 years ago
Victor Julien	3062b19068	Clean up output of signature ordering module.	15 years ago
Victor Julien	001dcaae84	Minor reference.config support changes: improve error handling, reduce hash table size.	15 years ago
Anoop Saldanha	88d94b136d	Support for reference.config file	15 years ago
Anoop Saldanha	f5a02833dd	code cleanup in detect-reference.c	15 years ago
Victor Julien	5f4d681a42	Apply revision 233 and 234 from libhtp to improve memory handling when Suricata runs out of memory.	15 years ago
Victor Julien	344ea14695	Change mpm hash_size config setting highest to higher as highest wasn't the... highest. Max was higher. Leaving highest as an alias to higher for backwards compatibility.	15 years ago
Victor Julien	41fd7e51c6	Really add secunia reference support.	15 years ago
Victor Julien	33170fd181	Add secunia reference pending our reference.config support.	15 years ago
Anoop Saldanha	067e53403c	add missing sig_app_layer flags for dce sigs	15 years ago
Victor Julien	26fd2a0afd	Add telus and bid references for etpro.	15 years ago
Victor Julien	2b187a2721	Remove a BUG_ON statement from the payload inspection code.	15 years ago
Victor Julien	f2e6ec7374	Fix http_method not inspecting all http transactions all the time. Fix proper nocase setting. Switch to pattern scanning only, no more numeric compares as it turned to be incompatible with how the keyword is used (nocase, etc).	15 years ago
Anoop Saldanha	2cdb5be391	Print out file name for fast_pattern engine_analysis. Also add some info logs	15 years ago
Anoop Saldanha	0c5b82d891	provide separate ids for content, uricontent, http_(client_body_data|cookie|header|method|uri), when they share the same pattern	15 years ago
Victor Julien	3bd7441ea5	Default to 'single' ctx for ac-gfbs as well.	15 years ago
Anoop Saldanha	e072841e93	hash fix in staging to differentiate nocase duplicate patterns from case-senstive ones	15 years ago
Anoop Saldanha	de5db1a730	support cases for ac, where we have a single pattern in 2 different sigs, but one that is case-senstive and the other not. Also remove duplicate pids from the output_table	15 years ago
Anoop Saldanha	62f814a4c3	change default value for detect-engine.sgh_mpm_context to auto	15 years ago
Anoop Saldanha	8628c572df	update todos for ac. Cleanup some memory as well.	15 years ago
Anoop Saldanha	a2d04a94b5	selecting auto for detect-engine.sgh_mpm_context now uses single if the mpm is ac, full otherwise	15 years ago
Anoop Saldanha	5cc7f90f45	fix hash bug in ac-gfbs. Should reduce the no of patterns added for single context ac-gfbs from a million to a couple of thousands. Also support no case handling. \todo support insertion of final state presence into goto_table and failure table state transitions	15 years ago
Anoop Saldanha	ded1f63323	fix ac nocase handling	15 years ago
Anoop Saldanha	174048544d	fix hash generation in b2g and ac addpattern. Brings down the no of patterns added from close to a million to a couple of thousands	15 years ago
Anoop Saldanha	29b5cb9abd	respect content flags in hash compare function during staging. For example, we would end up ignoring a nocase version of a duplicate content from another sig in the same sgh	15 years ago
Anoop Saldanha	0ef684705c	support single mpm context distribution across sghs in staging. Also see to it that ac works fine with this setup	15 years ago
Anoop Saldanha	b367c37ae6	suricata.yaml conf update to support single mpm context distribution over multiple sghs + code to parse this conf	15 years ago
Anoop Saldanha	4b2cf7e125	fix ac, ac-gfbs to support new changes to util-mpm.h + remove some junk code	15 years ago
Anoop Saldanha	b9a770740a	add comments and todos for ac and ac-gfbs	15 years ago
Anoop Saldanha	658ff5753d	aho-corasick for the cpu. We have 2 versions of ac. The first MPM_AC uses the delta table and the secone one MPM_AC_GFBS uses the goto-failure table	15 years ago
Victor Julien	bfb6aac495	Sleep after checking for a thread flag in TmThreadWaitOnThreadInit now that the check is so much cheaper.	15 years ago
Victor Julien	9634389b9e	Fix TmThreadsUnsetFlag not unsetting flag if __sync_fetch_and_nand was used.	15 years ago
Pablo Rincon	fcff1ce7f4	Converting threadvar flags to atomic vars to avoid using the old spinlock	15 years ago
Anoop Saldanha	b8f5a6a4fc	throw out contents/uricnotents with invalid hex assembly	15 years ago
Anoop Saldanha	850f44022f	invalidate sigs with content/uricontent strings ", "boo, boo" + fix parsing content strings of the format content: !\"boom\";"	15 years ago
Victor Julien	5a7efe5f97	Add comment and layout update to new fast_pattern code.	15 years ago
Anoop Saldanha	a85fa6b792	support for fast_pattern only and fast_pattern:offset,length. Also support the new option for engine-analysis	15 years ago