Commit Graph

3205 Commits (02e19502c7ecd46ae43b1aa7f168f1f80a02a486)
 

Author SHA1 Message Date
Victor Julien 90422c9f5e Do not assume the include dir for nspr to be nspr. On F16 it's nspr4. 13 years ago
Victor Julien 705417434b Fix json output typo. 13 years ago
Victor Julien fe9258f0fb Fix issue discovered by Anoop. Passing u32 ptr to a size_t can caused badness. 13 years ago
Victor Julien 6019ae3dcb Fix minor memleak in case af-packet init fails. 13 years ago
Victor Julien 385f1dcd25 Fix UTHBuildFlow setup using wrong address. 13 years ago
Victor Julien e3935a2af2 Improve http filename parsing. 13 years ago
Victor Julien e237841a8e Fix compilation with profiling enabled. Minor unittest fixes. 13 years ago
Victor Julien de5c1d1491 Fix minor fgetc issue. 13 years ago
Victor Julien 0d6f33a15b Move PACKET_RECYCLE outside of flow lock in FlowForceReassemblyForQ as it confuses static code checkers. 13 years ago
Victor Julien e21d8cdf01 file extract: improve multipart parsing and set events on some error conditions. 13 years ago
Victor Julien bfb3f1b7cf flow: Refactor how FlowPrune deals with forced timeouts, improving locking logic. 13 years ago
Victor Julien 372ab9c433 Another batch of minor fixed for issues found by Coverity. 13 years ago
Victor Julien 11bdf4838f Various improvements to error handling found by Coverity. 13 years ago
Anoop Saldanha d6af843860 code cleanup 13 years ago
Victor Julien cdba2f50d1 Various fixes and improvements based on feedback by Coverity analyzer. 13 years ago
Victor Julien 4b2d94a841 Add line number to warning about mangled yaml parameters. Limit number of warnings to 10. 13 years ago
Nikolay Denev 0fc878b391 Consistently use dashes instead of underscores in the sample config file. 13 years ago
Nikolay Denev a67d78eda6 Consistently use dashes instead of underscores in the sample config file. 13 years ago
Nikolay Denev fb05edeeee Convert underscores to dashes in thread affinity type names. 13 years ago
Nikolay Denev 7fce226bb8 Fix some warning message still using underscored config vars. 13 years ago
Nikolay Denev 139768dd58 Do not use underscored config vars internally. 13 years ago
Nikolay Denev 6819ec8b54 Remove the underscored "sguil_base_dir" compatibility option. 13 years ago
Nikolay Denev 32e898f2e3 Convert config entries using underscores to dashes and emit deprecation warnings. 13 years ago
Martin Holste 33d8453581 Added Shadowserver plugin. 13 years ago
Victor Julien 2197f1a625 file-inspection: split 'file' output module into file-store and file-log. Store stores files. Log logs json records. 13 years ago
Victor Julien 8b1333a277 Add more flow lock assertions to the debug validation code. 13 years ago
Victor Julien 5ba41c7890 Fix locking error in filestore handling. Add debug validate check for asserting a flow is locked. 13 years ago
Martin Holste 25123b2044 Added license. 13 years ago
Martin Holste c63017b2cc Added some installation instructions to file_processor REAMDE. 13 years ago
Martin Holste 4030840212 Added contrib folder with file_processor utility which is a plugin framework for reading the files-json.log and processing and taking action based on the files observed. 13 years ago
Victor Julien 28d88746e4 Fix compiler warning and silence complaining unittests. 13 years ago
Victor Julien 860971eca0 Misc afpacket changes. 13 years ago
Victor Julien 8e48a2edfd Fix NULL dereference in PacketPatternSearchWithStreamCtx code. 13 years ago
Eric Leblond 34b3f19465 af-packet: Implement zero copy
This patch adds support for zero copy to AF_PACKET running mode.
This requires to use the 'worker' mode which is the only one where
the threading architecture is simple enough to permit this without
heavy modification.
13 years ago
Eric Leblond 3593cb051e decode: add PacketSetData funtion
This patch adds a function which can be used to set the payload
of a packet when a zero copy mode is used.
13 years ago
Eric Leblond 49b7b00fcf af-packet: mmap support
This patch adds mmap support for af-packet. Suricata now makes
use of the ring buffer feature of AF_PACKET if 'use-mmap' variable
is set to yes on an interface.
13 years ago
Victor Julien 697e9e660f Config should be set up in sysconfdir/suricata. Add reference to oinkmaster guide. 13 years ago
Victor Julien 73a1b97267 Improve config details overview at the end of configure. 13 years ago
Eric Leblond b2ebd4a138 build: enable af-packet by default 13 years ago
Eric Leblond ef46345792 Add sexy information messages to configure output. 13 years ago
Eric Leblond 5ea1b1d15e Fix PCRE-JIT message 13 years ago
Eric Leblond 65b26e6ae5 Remove autogen.sh generated files. 13 years ago
Eric Leblond 338608842e Improve output 13 years ago
Eric Leblond 4c3f0b258e del rules file deleted 13 years ago
Eric Leblond 25804f5aa8 Add install-conf command to build system.
This patch adds support for customisation of suricata.yaml and
automatic download of emerging threat GPL rules. By running
'make install-full' after 'make install', files necessary to run
suricata are copied in the configuration directory and the latest
ruleset is downloaded and installed. Suricata can then be run
without files edition.
This patch has a special treatment for the windows build which
requires some different paths.
suricata.yaml is also updated to load all rules files provided by
emergingthreat ruleset.
13 years ago
Victor Julien 3702a33ae9 file-inspection: support POST requests that do not use multipart. 13 years ago
Victor Julien 64827e3864 file-inspection: use filename= value from Content-Disposition where available to determine the filename in GET requests. 13 years ago
Victor Julien 6585cb89d3 Fix UtilMiscParseSizeStringTest01 unittest on 32 bit. 13 years ago
Anoop Saldanha 35435f3284 All http_http_stat_code modified patterns now are DETECT_CONTENT and not DETECT_AL_HTTP_STAT_CODE. Also remove dummy match/free functions for stat code and stat msg 13 years ago
Anoop Saldanha 507e1b66e0 All http_http_stat_msg modified patterns now are DETECT_CONTENT and not DETECT_AL_HTTP_STAT_MSG 13 years ago