Victor Julien
2eb2926cd2
decode: register decoder.erspan and decoder.nsh counters correctly
...
These are regular counters, not 'max' counters.
11 months ago
Philippe Antoine
2349f19977
nfs: use nfsv2 procedure names with nfs_procedure keyword
...
Ticket: 5140
11 months ago
Jhonny Sousa
257ed82dbd
nfs: Fix NFSv2 STATFS procedure parsing
...
Ticket: #5140
11 months ago
Philippe Antoine
15b1bf4865
rust: bindgen SCHTPFileCloseHandleRange
...
Ticket: 7762
11 months ago
Philippe Antoine
cddbd0b906
rust: bindgen more file functions
...
Ticket: 7762
11 months ago
Philippe Antoine
327b8b04a9
rust: bindgen with default derive
...
Ticket: 7762
11 months ago
Victor Julien
80d5afe91b
pop3: AUTH command handling improvements
...
Better track the state so it's known when to expect a base64 request
message. Also better validate the base64.
Ticket: #7994 .
11 months ago
Victor Julien
2973eded56
pop3: convert to nom 8
...
Ticket: #8127 .
11 months ago
Victor Julien
da2db65f62
pop3: rustfmt
11 months ago
Jason Ish
83d8b1d2f8
quic: update to nom 8.0
...
Ticket: #8140
11 months ago
Philippe Antoine
3cb873e3bc
ci: check script eve-parity is working
11 months ago
Philippe Antoine
1df568300c
doc/jsonschema: use dnp3_func instead of its alias
11 months ago
Philippe Antoine
273e9f55eb
scripts: eve-parity hard fail on unknown keyword
11 months ago
Philippe Antoine
f581b8f1ae
scripts: complete eve-parity type check
11 months ago
Pierre Chifflier
459e2599c7
configure: fix binary crate name in hint message if bindgen is not found
11 months ago
Philippe Antoine
62fcdf9bff
detect: add debug validation check about flags consistency
...
If a flag is not a uint with a size, it should not have a specific
flag like multi_uint, nor enum nor bitflags
11 months ago
Philippe Antoine
32ce3d29be
detect/krb: use flag u32 for krb5_msg_type
11 months ago
Philippe Antoine
8b9a779a16
file: fix hash computation for small multipart files
...
Ticket: 8119
Fixes: f68e2f5537 ("files: append data on closing even with
FILE_NOSTORE")
11 months ago
Jason Ish
7417cf07f6
github-ci: add schema tests to docs workflow
...
This will run the schema tests when no code has been modified.
11 months ago
Juliana Fajardini
331bc8aeac
schema: add descriptions to global memcaps/memuses
...
For FTP, Host, IP Pair and HTTP.
Related to
Task #6434
11 months ago
Juliana Fajardini
2855574a2c
schema: add additional properties to stats.capture
...
The `stats.capture` object may have different properties based on the
capture method used.
This adds the ones pertaining to AF_PACKET capture.
Related to
Task #6434
11 months ago
Juliana Fajardini
12e0e51864
schema: add desc for each main stats module
...
Part of the schema documentation effort.
Related to
Task #6434
11 months ago
Juliana Fajardini
025ffa6135
schema: allow stats.stream event counters
...
While the counters exist, they're not present in the schema, causing
validation to fail if stats.stream-events is enabled.
Task #7858
11 months ago
Juliana Fajardini
173fec81f8
schema/stats: flow_mgr is actually flow.mgr
...
The schema accounts for a stats counters group that is a subgroup of the
flows stats counters. Remove `flow_mgr`, thus.
11 months ago
Juliana Fajardini
1647081b29
doc: remove remaining references to pruned flows
...
These were removed with a5587fec2e but these mentions went under the
radar.
11 months ago
Jhonny Sousa
05a4aaf2c0
util/misc: Change shortening format and add unittests
...
Ticket: #5583
11 months ago
Jhonny Sousa
626027a456
util/pool: Convert unittests to new FAIL/PASS api
...
Ticket: #6322
12 months ago
Philippe Antoine
8ca589b5fb
detect/tls: get rid of stack allocation
...
By making the pcre trim the trailing spaces
Ticket: 8001
12 months ago
Philippe Antoine
ddb228e839
detect/msg: avoid temporary stack buffer
...
Just allocate the heap buffer asap and work on it.
Ticket: 8001
12 months ago
Philippe Antoine
e3b79c4077
detect/content: avoid temporary stack buffer
...
Just allocate the heap buffer asap and work on it.
Ticket: 8001
12 months ago
Philippe Antoine
190ae4c6f9
detect/mpm: use fixed constant for stack allocation
...
instead of smaller run-time value.
Allows easier reading of the code for unbounded stack allocations
Ticket: 8001
12 months ago
Philippe Antoine
71c95fe670
output/frame: remove ifdefed out code
...
With bad pattern : stack allocation instead of using built-in
jsonbuilder hex printer
Ticket: 8001
12 months ago
Philippe Antoine
ca16b4ebf7
detect/parse: debug validation about stack allocation
...
Ticket: 8001
12 months ago
Philippe Antoine
3337617a5e
output: debug validation about stack allocations
...
Ticket: 8001
For flow variables names
12 months ago
Philippe Antoine
42d6c85757
util/debug: debug validation about stack allocation
...
Ticket: 8001
12 months ago
Philippe Antoine
6b7c78393c
util/classification: check stack allocation size
...
Ticket: 8001
12 months ago
Philippe Antoine
753ab723b0
datasets: debug validation for stack allocation size
...
We iterate C substrings of a string whose max size is
SIG_JSON_CONTENT_KEY_LEN
Ticket: 8001
12 months ago
Jason Ish
a9eee5dfd9
rust/htp: convert to nom 8
...
Ticket: #8090
12 months ago
Jason Ish
ef9cd7beff
rust/smb: convert to nom 8
...
Ticket: #8089
12 months ago
Jason Ish
02045e1d62
rust/dcerpc: convert to nom 8
...
Ticket: #8093
12 months ago
Jason Ish
25c98af0e8
rust/detect: convert remaining detection rule parsers to nom 8
...
Ticket: #8051
12 months ago
Jason Ish
dea3f9e260
rust/detect: convert error.rs and dependent parsers to nom 8
...
Ticket: #8051
12 months ago
Jason Ish
efc32dea41
rust/detect: convert uint nom 8
...
And users of uint directly impacted by this change.
Ticket: #8051
12 months ago
Jason Ish
cf604751de
rust/util: convert to nom 8
...
Ticket: #8088
12 months ago
Jason Ish
1e01d5adca
rust/conf: convert to nom 8
...
Ticket: #8087
12 months ago
Jason Ish
c6e8932740
rust/asn1: convert to nom 8
...
Ticket: #8086
12 months ago
Jason Ish
59f8fb30a8
rust/ftp: fix clippy warning
...
error: implicitly casting the result of `from_raw_parts_mut` to `*mut [u8]`
--> src/ftp/response.rs:107:31
12 months ago
Jason Ish
745e972348
github-ci: update Rust 1.91 for clippy and "known" stable
12 months ago
Philippe Antoine
9d164d8794
fuzz/conf: bail out on long sequence of scalars
...
Ticket: 8105
12 months ago
Olusegun Fajobi
785389aa00
detect/analyzer: add more details for flowint keyword
...
Ticket: 6311
12 months ago