6435 Commits (11099cfa42db2d122cee47e0131ffa558048ec14)

 

All Branches   

Search

Author	SHA1	Message	Date
Victor Julien	083f22f6d6	icmpv4: remove unused header fields	11 years ago
Victor Julien	375092da85	icmpv4: remove unused declarations	11 years ago
Victor Julien	ed1cc1ee2a	icmpv4: harden embedded packet handling	11 years ago
Victor Julien	fe445367bd	icmpv4: improve dest unreachable logic ... When a ICMPv4 destination unreachable packet contains an embedded packet this packet is parsed. When it's found to be invalid, the whole ICMP packet is tagged as invalid. In some cases the unreachable packet would still be used. This patch fixes this by checking the packet is invalid flag as well in the ICMPV4_DEST_UNREACH_IS_VALID macro.	11 years ago
Victor Julien	2fbfd6efcc	DER decoder: don't use strlcpy on non-strings	11 years ago
Victor Julien	fae2836039	http: more sane body inspection/tracking defaults	11 years ago
Victor Julien	efdd9e08f2	http: improve body pruning ... In case the body wasn't inspected the body_inspected variable wouldn't get updated leading to the body not getting pruned at all. This patch adds support for this case.	11 years ago
Victor Julien	64017cd29b	ips/drop-log: fix crash on logging drops ... When logging drops for fragmented UDP packets, triggered by detection in the reassembled packet, a missing check could lead to access of the packets UDP header pointer when it was NULL.	11 years ago
Victor Julien	136c6440c8	http file: fix txid type	11 years ago
Victor Julien	006cd5ae36	file: sync file and tx id types	11 years ago
Victor Julien	a74a8c874f	smtp: reset inspection buffers	11 years ago
Victor Julien	2582e61af7	http: fix body prune check	11 years ago
Victor Julien	e94bf9726d	Update Changelog for 3.0RC2	11 years ago
Victor Julien	b333e5feae	dns: reject bad response data	11 years ago
Victor Julien	260841827f	smtp: improve handling of bad traffic ... No longer fail tracking the SMTP stream when a unexpected reply is encountered. Do not store the unexpected reply.	11 years ago
Victor Julien	4b69e1aec1	stream-tcp: bail early on segments before base_seq ... In cases where base_seq has moved beyond last_ack, bail early.	11 years ago
Victor Julien	8cdd96d7a4	tls: suppress warnings on alloc failure	11 years ago
Victor Julien	b4dad91e26	unified2: disable by default	11 years ago
Victor Julien	36fde7df42	stats log: suppress 0 counters by default	11 years ago
Victor Julien	86a3f06410	afpacket: suppress output	11 years ago
Victor Julien	bed1867830	afpacket: move zero copy setup to config parsing ... This way it's run and logged per device, instead of per thread.	11 years ago
Victor Julien	9d882116e2	afpacket: indent fixup	11 years ago
Victor Julien	cf2588acc4	offloading: compress printing of iface offloading	11 years ago
Victor Julien	f89a421990	afpacket: on missing cluster settings, set defaults	11 years ago
Victor Julien	49dbb455b5	afpacket: add null decoder, put ethernet first	11 years ago
Victor Julien	7b45a8a2a9	device: constify string args	11 years ago
Jason Ish	d87a60f3cc	modbus: disable by default	11 years ago
Eric Leblond	538f37bd38	output-json: add app_proto key in root ... By adding the key in the root of *flow and fileinfo events it will be possible to get all events for one application layer by using a 'event_type:proto OR app_proto:proto' filter. This will permit to the analyst to get a good view of events related to one protocol. This patch also fixes a regression in file logging where app_proto was available before 94dbd303e4 create the regression.	11 years ago
Alexander Gozman	8ac48872a5	Feature 1605: more descriptive error messages when checking MTU, etc	11 years ago
Victor Julien	019f856442	profiling: fix lock profile compilation	11 years ago
Victor Julien	ac476de5ed	json: small improvement to log message wording	11 years ago
Eric Leblond	9930f447d2	output-json: fix regression on log prefix handling ... The log prefix option was not anymore honored due to a regression caused by some recent code.	11 years ago
Maurizio Abba	1291250c0f	app-layer-smtp: support for multiline response ... Multiline response support is provided but not enforced. This patch allow parsing multiline response when a reply is processed	11 years ago
Victor Julien	737c99dd30	Update changelog for 3.0RC1	11 years ago
Victor Julien	84c4566a14	Update dev version to reflect we're doing 3.0 now	11 years ago
Victor Julien	d77e403024	rule vars: fix compiler warning	11 years ago
Victor Julien	a7f54d63b7	tls: fix compiler warnings	11 years ago
Victor Julien	a1075ee2f2	http: add test for plain http over connect	11 years ago
Victor Julien	cd81af0bc9	http: don't run unittests twice	11 years ago
Victor Julien	e86e27bab7	http: test cleanups	11 years ago
Aaron Campbell	50f4fb2a72	Fix out-of-bounds memory access in DNS TXT record parser. ... The datalen variable is declared unsigned. If txtlen and datalen are equal, datalen will first be reduced to 0, and then the datalen-- line will cause its value to wrap to 65535. This will cause the loop to continue much longer than intended, and eventually may crash on an out-of-bounds *tdata dereference. Signed-off-by: Aaron Campbell <aaron@monkey.org>	11 years ago
Victor Julien	4dfbc0effa	multi-detect: fix and simplify config ... instead mappings: - vlan: vlan-id: 1 tenant-id: 2 we'll now use: mappings: - vlan-id: 1 tenant-id: 2 For YAML it pretty much means the same thing. Ticket: 1517	11 years ago
Victor Julien	07d8617b3e	multi-detect: improve error handling	11 years ago
Victor Julien	906b95eed3	multi-detect: handle missing mappings ... Notify/warn user about missing mappings depending on other settings like unix socket and init errors fatal.	11 years ago
Victor Julien	27783f4c66	multi-detect: consider vlan tracking ... Refuse to use vlan selector if vlan tracking is disabled.	11 years ago
Victor Julien	04889f154d	multi-detect: validate vlan_id	11 years ago
Victor Julien	d7d76e7b27	multi-detect: use default tenant ... The default detect engine can be used as 'default tenant'.	11 years ago
Victor Julien	dc3c1ef01e	multi-detect: clean up output	11 years ago
Victor Julien	adecf41720	base64: code style fixups	11 years ago
Jason Ish	6b15686fd1	base64_decode, base64_data: decode and match base64	11 years ago