330 Commits (1a2ad059a12910120cd997e76ea75e688747ff7d)

Author	SHA1	Message	Date
Pablo Rincon	c7350a8ac6	Fixing some naming convention issues and incorrect error messages	17 years ago
Pablo Rincon	b708d7f65d	Adding Uricontent inspection with spm. Modifiers for uricontent are now supported	17 years ago
Victor Julien	c1a19bcd6b	Fix compilation of new detect-filter code, fix ip-only compatibility of detect-filter code.	17 years ago
Victor Julien	80dc4f1dbe	Further simplify content api: merge flags that indicate a next relative match, remove chunks as they are unnecessary now, make negated a bitflag.	17 years ago
Victor Julien	f298fec872	Make sure nocase applies to the last pattern, content or uricontent.	17 years ago
Victor Julien	0e7cb90212	Fix broken pmatch list handling.	17 years ago
Victor Julien	8b30226914	Detection keyword cleanup	17 years ago
Victor Julien	6637873348	Update prev ptrs in SigMatchReplaceContent	17 years ago
Victor Julien	b259e362cd	Convert uricontent to use new scanning methods as well. Move http_method and http_cookie keywords out of pmatch list for now.	17 years ago
Victor Julien	bef70a04ce	First stage of detect engine redesign: equal patterns share id's, search phase no longer used, new match verification phase.	17 years ago
Pablo Rincon	25a3a5c6d8	Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.	17 years ago
Gerardo Iglesias Galvan	ba6d807a6e	Improve information about errors on signature failure	17 years ago
Pablo Rincon	ad2c136e8f	Renaming errors (naming conventions)	17 years ago
Victor Julien	2481f2102b	Add missing return value evaluation in port parsing and fix broken unittest.	17 years ago
Victor Julien	4284276b11	Merge applayer detect function into normal match function. Should speed up detection.	17 years ago
Gurvinder Singh	5c8d90afc8	memory leak fixes	17 years ago
Pablo Rincon	0c9f51498a	Small fixes at unittest helper functions and TestBidirec03	17 years ago
Pablo Rincon	c80160b96d	More examples of unittest helper functions usage reference	17 years ago
Pablo Rincon	b6a3395c08	Adding unittest helper functions for building generic packets, checking arrays of expected match results, perform generic tests, etc. Look at util-unittest-helper.c and detect-ipproto.c for references	17 years ago
Gerardo Iglesias Galvan	40c514f295	Fix bug in logging msg when using --init-errors-fatal	17 years ago
Brian Rectanus	c22d42693a	Added http_method rule keyword.	17 years ago
Victor Julien	ecab1fae36	Remove contents of VRT classification.config.	17 years ago
Anoop Saldanha	011b74df63	Modify the classification config tests to use the buffer than a temp file and also fix an invalid free	17 years ago
Anoop Saldanha	bc4df59414	Support for Classtype keyword and Classification Config file	17 years ago
Victor Julien	ae94b102cb	Improve distance/within/nocase handling, sig parsing error reporting.	17 years ago
Will Metcalf	f2b1e66a6a	fixes for init failure stuff	17 years ago
Victor Julien	778228d1c5	Flags keyword fix. Fatal init fix.	17 years ago
Victor Julien	310a182217	Fix signatures not being initialized properly	17 years ago
Victor Julien	9fd46e9425	Support for sigs with both pkt and applayer detect ... Sets a flowbit with the sig id if the packet matches match. Checks on that if the app layer matches match. Currently misuses the flowbits api for this in a way that needs fixing.	17 years ago
Victor Julien	ecf86f9c23	Rename to Suricata.	17 years ago
Gurvinder Singh	a0f184866c	http_cookie keywork support	17 years ago
Gerardo Iglesias Galvan	b254719ffc	Add fatal failures on unittest and siginit failure (using Conf API)	17 years ago
Pablo Rincon	658eac2825	Adding max pattern length for bidirectional operator. Please, use DetectEngineAppendSig() at the unittests. Look at the bidirectional operator unittests for a usage reference.	17 years ago
Pablo Rincon	6206ffb530	Adding bidirectional operator support and unittests	17 years ago
Victor Julien	2cfa284999	Fix app layer detect to actually work.	17 years ago
Victor Julien	a1d33e2d0b	Compilation fixes after merge.	17 years ago
Victor Julien	f1f7df0766	First iteration of doing app layer detection.	17 years ago
Anoop Saldanha	bb5bd91045	Support to get the last sigmatch of a particular type. To be used for content and its modifiers	17 years ago
Pablo Rincon	9a3c21fbf3	Updating real unittests. Small fix on TestWithinDistanceOffsetDepth to skip to the next DETECT_CONTENT SigMatch. Adding some checks on within/distance setups.	17 years ago
Pablo Rincon	7e4377224a	Small fix at detect-parse.c, need to continue with MatchTest05	17 years ago
Anoop Saldanha	dc44700ce5	Support vars lookup from conf file. Current patch support address and port group vars lookup	17 years ago
Victor Julien	d6be6ceb19	Fixup artifact from automatic renames: rename DetectAddresssHead to DetectAddressHead.	17 years ago
Victor Julien	de8caa7964	Rename DetectAddressGroup* to DetectAddress*	17 years ago
Victor Julien	2d0e9658f8	Speed up per sgh content maxlen calc. Remove mpm ptrs from mpm ctx. Add unittests testing the detection engine internals.	17 years ago
Victor Julien	7a7bb7a390	Get rid of global mpm_ctx.	17 years ago
Victor Julien	fbe87a3ad5	Bunch of mostly unittest related memleak fixes.	17 years ago
Anoop Saldanha	0815ed7c9e	Some refactoring of the code, error handling done	17 years ago
Anoop Saldanha	fbc4d11ed4	Some code refactoring	17 years ago
Victor Julien	5ffb7a7bd7	Add a few more tests for portrange validation.	17 years ago
Breno Silva	c43319c337	Regular expression for UnitTests ... Signed-off-by: Brian Rectanus <brectanu@gmail.com>	17 years ago
William Metcalf	69e57e5e23	remove invalid dir from pcre + unit test	17 years ago
Victor Julien	968d8df12b	More logging API usage. Changed logging macro's slightly so the vars inside them won't conflict with vars used by the calling function.	17 years ago
Victor Julien	91bc83e5c6	More logging API usage changes.	17 years ago
Victor Julien	4cc24fe463	Improve the handling of addresses and ports. Properly detect !any, other full negation. Fix [80:!80] syntax errors being undetected.	17 years ago
Victor Julien	0d0ffb9963	Reorganize header inclusions.	17 years ago
Victor Julien	733c3bcb8c	Fix "ip" rules not ending up in the tcp and udp sig group heads correctly.	17 years ago
Victor Julien	0242fad770	Fix error in freeing the ctx of a SigMatch.	17 years ago
Brian Rectanus	fa5939ca91	64 bit cleanup part2	17 years ago
William Metcalf	413efe8668	fix regression in detect-parse.c	17 years ago
Breno Silva	c90b4e6fcd	Decode event rule	17 years ago
William Metcalf	d79b85d251	Small regex fix for portlists in detect-parse.c	17 years ago
Victor Julien	51a9e36e10	Remove vips references. Rename to eidps.	17 years ago
Victor Julien	657be002d1	Big detection engine update: scan improvements, b2g/b3g updates, bloom fixes, iponly detection implementation, dsize/flow grouping.	17 years ago
Victor Julien	5df5b35e90	Put all globals in the detection engine ctx. Add HashList type, a hash that also stores the items ina list to it can be traversed. Many cleanups.	17 years ago
Victor Julien	efb10fc0d6	big update	17 years ago
Victor Julien	0250642cc0	Fix negated variables, add tests.	17 years ago
Victor Julien	3f7195454b	Big detection engine update.	17 years ago
Victor Julien	54ffe2053e	Large detection engine update.	17 years ago
Victor Julien	f3a94413db	Properly support 'alert ip' rules. Add support for handling ip only rules differently.	17 years ago
Victor Julien	171c8c777d	Group signatures by protocol.	17 years ago
William Metcalf	0ffa1c2465	updates for configure.in, added reject code, some decode stuff for tcp	17 years ago
Victor Julien	a603577132	Small update to the pcre used for signature parsing.	17 years ago
Victor Julien	84087e7077	Fix a memory error in the addresslist parsing code. Add a functions aimed at speeding up the signature initialization code.	17 years ago
Victor Julien	0726efead9	Support address lists.	17 years ago
Victor Julien	eaaeb30cd6	Add noalert keyword for use with sigs that are used for capturing only.	17 years ago
Victor Julien	63bb777100	Use a default prio of 3.	17 years ago
Victor Julien	dc224cb2d2	Large update containing the first step to making the detection engine use rule groups. Address based rule groups are now implemented.	17 years ago
Victor Julien	b7bc35e8b2	support for 'negation' in addresses and the 'any' special case.	17 years ago
Victor Julien	876f0c95c7	Signature rule keywords are case insensitive. Support that.	17 years ago
Victor Julien	d036264f80	Cleanup signature parsing and other detect.c parts.	17 years ago