Jason Ish
5076452707
Potential fix for issue 60.
...
- Increase the packet buffer so it can hold the link header when we
have maximum size IP datagrams.
- Fix ip header length and pkt length calculation for re-assembled
packets.
15 years ago
Victor Julien
9d3a9273dd
Rename fmem_t to SCFmem and make sure it's not exported.
15 years ago
Pablo Rincon
673afeb4d3
fmemopen wrapper added (fix compilation problems on macosx and freebsd)
15 years ago
Victor Julien
42e8a01221
Make sure pcre PCRE_EXTRA_MATCH_LIMIT_RECURSION check works with strict compiler settings.
15 years ago
William Metcalf
5bde121754
--enable-gccprofile sets -pg flag detect presence of pcre recursion
15 years ago
Eric Leblond
db2d483d11
convert action_type to enum
...
This patch converts packet action type to an enum. This will
provide some facilities and ease bad value detection by gcc.
15 years ago
Gerardo Iglesias Galvan
f5743afed5
Fix logging messages related to icmp_id parsing
15 years ago
Gerardo Iglesias Galvan
4b39ddaf95
Fix logging messages related to icmp_id parsing
15 years ago
Breno Silva
1d055b0e09
ICMP Seq Rule Keyword
15 years ago
Victor Julien
34e11e4784
Fixup unused variable compiler warning in the dce code.
15 years ago
root
ddf5995049
endianness handling update
15 years ago
Kirby Kuehl
3d59f40640
style patch
15 years ago
root
706bb95209
fix bug 61
15 years ago
Jason Ish
7aac64f262
unit test for issue 59.
15 years ago
Jason Ish
a7b37afc4e
Fix issue 59. Drop a fragment that extends past the maximum IP packet size.
15 years ago
Gurvinder Singh
fea277b2aa
memory leak fixes
15 years ago
Gurvinder Singh
5c8d90afc8
memory leak fixes
15 years ago
Gurvinder Singh
66cc392177
init b46
15 years ago
Kirby Kuehl
90b42232fa
dcerpc request smb transact and fix for dcerpc bindack
15 years ago
Gurvinder Singh
8f00718b0d
bug 57
15 years ago
Eric Leblond
51be576a30
nfq: modify queue length computation logic
...
This patch modifies max queue length computation logic. The max queue
length was set to MAX_PENDING which is the total number of packet
processed simultaneously in suricata.
This value is correct but this will not permit to take all burst
effects into account (read sudden quantity of packet that arrives
faster than suricata is enable to parse). Furthermore there is a
delaying system when suricata gets overloaded which make necessary
to have packet storable into kernel for some time.
To improve this situation the patch increases the maximum queue
length to NFQ_BURST_FACTOR (4) time the MAX_PENDING packet and
it also increase the nfnetlink buffer size to be able to store
all packets waiting for suricata in the netlink receive buffer.
15 years ago
Eric Leblond
775ac9ad9d
fix code file permission
...
detect-http-method.c was executable.
15 years ago
Eric Leblond
84dfc0172a
gcc warning fixes.
...
This patch fixes gcc warning:
warning: suggest braces around empty body in an ‘if’ statement
This was the case in when the macro SCLogDebug was used:
if (ssn != NULL)
SCLogDebug("ssn->alproto %"PRIu16"", ssn->alproto);
It also fixes a signed-unsigned comparison.
15 years ago
Eric Leblond
bda8702474
configure: compile with -Wextra
...
This patch modify CFLAGS to use -Wextra flag. To avoid problem
with "unused param" it disable this warning.
15 years ago
Eric Leblond
72d48f6658
nfq: add sanity checking
...
This patch adds sanity checking to payload handling. It set length
of packet to zero if an error occurs.
15 years ago
Eric Leblond
56cccdfa62
nfq: use switch instead of 'else if'
...
This patch convert a 'else if' serie to a switch to increase
the readability of the decision related code.
Please enter the commit message for your changes. Lines starting
15 years ago
Eric Leblond
c96586446b
ethernet: use switch instead of 'else if'
...
This patch uses a switch instead of a 'else if' series. It also
adds a debug message for unsupported ethernet type.
15 years ago
Eric Leblond
6cf00d6204
Fix typo in Makefile.am
...
This patch fixes a typo in Makefile.am which was preventing
'make tags' from working.
15 years ago
Victor Julien
9295193968
Fixup unittest error output for RAW decoder.
15 years ago
William Metcalf
c5d0b492d3
small unittest fixes to decode-raw.c
15 years ago
William Metcalf
8a64321340
raw pcap support additionl ipv4/6 validation
15 years ago
Pablo Rincon
0c9f51498a
Small fixes at unittest helper functions and TestBidirec03
15 years ago
Pablo Rincon
c80160b96d
More examples of unittest helper functions usage reference
15 years ago
Pablo Rincon
b6a3395c08
Adding unittest helper functions for building generic packets, checking arrays of expected match results, perform generic tests, etc. Look at util-unittest-helper.c and detect-ipproto.c for references
15 years ago
Jason Ish
095f2cf6ef
Consistency fix.. Xxxlog -> XxxLog.
15 years ago
Jason Ish
e204d07717
Have output modules register themselves so run mode configurator becomes aware of them for purposes of being configured from the config file.
15 years ago
Victor Julien
9b90c553b5
Clean ip fields from packet as well when the packet is reused. Prevents issues with malformed packets that are rejected by the decoders before ipaddresses are set.
15 years ago
Victor Julien
27a138d862
Suppress some flow messages.
15 years ago
Gurvinder Singh
b0dcd02c1b
bug 56 patch
15 years ago
Victor Julien
eb67bb442e
Fixup unittests that use buffers that simulate configuration files. They now include the YAML header.
15 years ago
Jason Ish
4e1acf5fd2
Require that the configuration file begins with a valid YAML version. At this time this means the configuration file must begin with
...
%YAML 1.1
15 years ago
Jason Ish
5e318aa342
Fix issue 55.
...
Don't process any key/value pairs until we've hitting a mapping.
15 years ago
Jason Ish
c4f178f3d7
Do not seen_last unless the packet with more_frags=0 was actually inserted into the frag tracker. Fixes issue 53.
...
Add unit test for this failure case.
15 years ago
Jason Ish
fc5df7d064
don't create a new tracker when frags are received in reverse order.
15 years ago
Gerardo Iglesias Galvan
40c514f295
Fix bug in logging msg when using --init-errors-fatal
15 years ago
Gerardo Iglesias Galvan
5eb819b0f4
Add signature line no. to error message when parsing fails
15 years ago
Gerardo Iglesias Galvan
fae92f8d7b
Fix bug#30. Fix logging call from prev patch
15 years ago
Gerardo Iglesias Galvan
988dc5520b
Improve output when loading rules
15 years ago
Victor Julien
56556eb550
Set payload no inspect flag for packets with encapsulated packets as these are inspected separately
15 years ago
Victor Julien
9ececacda3
Fix packet timestamp handling for encapsulated packets.
15 years ago