Anoop Saldanha
c105a739e9
support for ssl_state keyword added
15 years ago
Anoop Saldanha
4c570777c4
delete files app-layer-tls.[ch]
15 years ago
Eric Leblond
e1d966eaf6
Makefile: add sctp files to build
...
This patch simply adds decode-sctp files to the compilation.
15 years ago
Gurvinder Singh
7d0781b349
added support to log dropped packet as netfilter logs while in inline mode
15 years ago
Gurvinder Singh
8f8b1212af
support for ssl_version keyword
15 years ago
Victor Julien
35b938a8db
Don't pass config to unittests run in make check.
15 years ago
Eric Leblond
0044bb221b
Add suricata unittests to 'make check'
...
This patch adds a run of suricata's unittests to 'make check'
15 years ago
Gurvinder Singh
e5edc6e8e3
add the support to log the fast.log alerts type to syslog
15 years ago
Eric Leblond
37ee483b75
Add affinity util function and related files
...
This patch adds two new files which implement advanced affinity
settings.
Signed-off-by: Eric Leblond <eric@regit.org>
15 years ago
Victor Julien
3a774165fa
Initial version of a inline raw reassembly function that reassembles in a sliding window. Introduce new unittest helpers for stream reassembly.
15 years ago
Victor Julien
2849d2b1d3
Initial code for stream 'inline' mode: packets that are (partly) overlapping with already accepted packets (meaning in the streams seg list) are rewritten to make sure they contain the exact same data.
15 years ago
Anoop Saldanha
c9897a44a4
fast pattern support for http_cookie. Also support relative modifiers
15 years ago
Anoop Saldanha
bbbedaf963
fast pattern support for http_method. Also support relative modifiers
15 years ago
Eric Leblond
3eada85ff8
Add interface setting discovery via ioctl
...
This patch adds support for MTU discovery of link following idea
of go.ph1g. It also adds some function to give a approximation of
link header length.
15 years ago
Anoop Saldanha
eecf2d7e13
Add the makefile.am addition that I forgot to add in the previous commit for http_raw_header
15 years ago
Anoop Saldanha
c61c68fd36
mpm and fast pattern support for http_header. Also support relative modifiers for http_header
15 years ago
Anoop Saldanha
5c6a65dc58
support relative modifiers for http_client_body. Introduce body processing engine in detect-engine-hcbd.[ch]
15 years ago
Gurvinder Singh
b7da115e6d
support for http_stat_code keyword has been added to detection module
15 years ago
Gurvinder Singh
1deae70cf7
added http_stat_msg keyword support for detection module
15 years ago
Anoop Saldanha
88d94b136d
Support for reference.config file
15 years ago
Anoop Saldanha
658ff5753d
aho-corasick for the cpu. We have 2 versions of ac. The first MPM_AC uses the delta table and the secone one MPM_AC_GFBS uses the goto-failure table
15 years ago
Gurvinder Singh
3eab715153
support for printing protocol names for known protocol
15 years ago
Victor Julien
1859ed54c7
Add memcmp api with a plain memcmp function and a SSE3 accelerated memcmp.
15 years ago
Victor Julien
87f88867f4
Further improve B2gc. Add B2gm. Improve memory layout.
15 years ago
Victor Julien
9dfbab42f8
WIP B2gc
15 years ago
Pablo Rincon
9d7baa7a9f
Adding ssh app layer module with two new keywords: ssh.protoversion and ssh.softwareversion
15 years ago
Anoop Saldanha
33f4beb0bc
batching of packets support for cuda b2g mpm. Supported for both 32 and 64 bit platforms
16 years ago
Victor Julien
e685579231
Add optional structure validation code.
16 years ago
Pablo Rincon
eed0ef6e69
Adding tag keyword support
16 years ago
Kirby Kuehl
c3b9305259
dcerpc udp support
16 years ago
Anoop Saldanha
45ea0d914e
dce stub content keywords support using dcepayload.c support for all dce related content keywords
16 years ago
Jason MacLulich
835630efbd
Add initial support for reading packets from a DAG card, we only support reading from a single stream at this time.
...
Use the --dag <dagname> cmd line option to specify from which DAG card to read pkts
from.
Issue at the moment with pkts being ejected during shutdown -- at the moment we
ignore any packets that are not of link type Ethernet.
16 years ago
Ondrej Slanina
6bf7d76005
added possibility to run suricata as WIN32 service
16 years ago
Victor Julien
0140a14a15
Introduce atomic operations API that supports GCC's atomic operations and a fallback using (spin)locks. Convert ringbuffer api to use the new atomic api.
16 years ago
Gerardo Iglesias Galvan
55dfa36963
Add support for http_uri keyword
16 years ago
Victor Julien
a48a767efc
Lockfree ringbuffer wip.
16 years ago
Jason Ish
a93b2e6b84
Support for reading ERF files.
16 years ago
Gurvinder Singh
5fe1dc1d24
support for sslv2/sslv3 their unit tests and better stream no reassembly flag handling
16 years ago
Victor Julien
b8641f300d
Rename asn1 files, fix an invalid free, fix improper init of vars in one unittest.
16 years ago
Pablo Rincon
3fa3229e01
ASN1 decoder and keyword implementation
16 years ago
Victor Julien
70b32f7380
First stab at creating a stateful detection engine.
...
Stateful detection for app layer detection keywords, except uricontent. Stores it's partial results in the flow structure. Other modifications:
- Generalize transaction tracking, logging and inspection.
- Adapt http and dcerpc to use the new transaction handling.
- Stream engine now always notifies app layer of a stream eof.
This commit fixes bug #124 .
16 years ago
Jason Ish
18e5ac8cde
Basic rule profiling even though the results may be skewed by a bad rule in a grouping of rules.
16 years ago
Pablo Rincon
e18e2ec998
Changing threshold logic
16 years ago
Pablo Rincon
1238668961
Adding actions order and suport for rule action "pass"
16 years ago
Victor Julien
070ed778b8
Libcap-ng support by Gurvinder Singh and myself. Basic support for per thread caps is added, but not activated as it doesn't seem to work yet. Work around for incompatibility between libnet 1.1 and libcap-ng added.
16 years ago
Pablo Rincon
ab02ab9ead
adding http_header keyword support
16 years ago
Victor Julien
54aa1790f3
Remove Makefile.am reference to non-existing file.
16 years ago
Pablo Rincon
9803def006
Adding pidfile support (thanks to Steve Grubb for the patch)
16 years ago
Anoop Saldanha
97d49d8f5e
support for http_client_body keyword
16 years ago
Breno Silva
67f2026279
Global Threshold config
16 years ago