suricata

Commit Graph

Author	SHA1	Message	Date
Victor Julien	e96d9c1159	app-layer: add tx iterator API Until now, the transaction space is assumed to be terse. Transactions are handled sequentially so the difference between the lowest and highest active tx id's is small. For this reason the logic of walking every id between the 'minimum' and max id made sense. The space might look like: [..........TTTT] Here the looping starts at the first T and loops 4 times. This assumption isn't a great fit though. A protocol like NFS has 2 types of transactions. Long running file transfer transactions and short lived request/reply pairs are causing the id space to be sparse. This leads to a lot of unnecessary looping in various parts of the engine, but most prominently: detection, tx house keeping and tx logging. [.T..T...TTTT.T] Here the looping starts at the first T and loops for every spot, even those where no tx exists anymore. Cases have been observed where the lowest tx id was 2 and the highest was 50k. This lead to a lot of unnecessary looping. This patch add an alternative approach. It allows a protocol to register an iterator function, that simply returns the next transaction until all transactions are returned. To do this it uses a bit of state the caller must keep. The registration is optional. If no iterator is registered the old behaviour will be used.	8 years ago
Victor Julien	8cda2a4351	rust/nfs: add support for detect_flags API	8 years ago
Victor Julien	bca0cd71ae	app-layer: use logger bits to avoid looping Avoid looping in transaction output. Update app-layer API to store the bits in one step and retrieve the bits in a single step as well. Update users of the API.	8 years ago
Eric Leblond	31a0783865	app-layer: add Flow to probing parser functions	8 years ago
Victor Julien	a306ccfd34	rust/nfs: implement events Remove lots of panic statements in favor of setting non-fatal events. Bug #2175.	8 years ago
Victor Julien	0d79181d78	nfs: rename nfs3 to nfs Since the parser now also does nfs2, the name nfs3 became confusing. As it's still in beta, we can rename so this patch renames all 'nfs3' logic to simply 'nfs'.	8 years ago

6 Commits (1c270cae134f72ed7b5a88edb9695f27cf793dcc)