Commit Graph

18272 Commits (2eb2926cd23a7f49eeb7bef3cf971bb82663258a)
 

Author SHA1 Message Date
Victor Julien 2eb2926cd2 decode: register decoder.erspan and decoder.nsh counters correctly
These are regular counters, not 'max' counters.
11 months ago
Philippe Antoine 2349f19977 nfs: use nfsv2 procedure names with nfs_procedure keyword
Ticket: 5140
11 months ago
Jhonny Sousa 257ed82dbd nfs: Fix NFSv2 STATFS procedure parsing
Ticket: #5140
11 months ago
Philippe Antoine 15b1bf4865 rust: bindgen SCHTPFileCloseHandleRange
Ticket: 7762
11 months ago
Philippe Antoine cddbd0b906 rust: bindgen more file functions
Ticket: 7762
11 months ago
Philippe Antoine 327b8b04a9 rust: bindgen with default derive
Ticket: 7762
11 months ago
Victor Julien 80d5afe91b pop3: AUTH command handling improvements
Better track the state so it's known when to expect a base64 request
message. Also better validate the base64.

Ticket: #7994.
11 months ago
Victor Julien 2973eded56 pop3: convert to nom 8
Ticket: #8127.
11 months ago
Victor Julien da2db65f62 pop3: rustfmt 11 months ago
Jason Ish 83d8b1d2f8 quic: update to nom 8.0
Ticket: #8140
11 months ago
Philippe Antoine 3cb873e3bc ci: check script eve-parity is working 11 months ago
Philippe Antoine 1df568300c doc/jsonschema: use dnp3_func instead of its alias 11 months ago
Philippe Antoine 273e9f55eb scripts: eve-parity hard fail on unknown keyword 11 months ago
Philippe Antoine f581b8f1ae scripts: complete eve-parity type check 11 months ago
Pierre Chifflier 459e2599c7 configure: fix binary crate name in hint message if bindgen is not found 11 months ago
Philippe Antoine 62fcdf9bff detect: add debug validation check about flags consistency
If a flag is not a uint with a size, it should not have a specific
flag like multi_uint, nor enum nor bitflags
11 months ago
Philippe Antoine 32ce3d29be detect/krb: use flag u32 for krb5_msg_type 11 months ago
Philippe Antoine 8b9a779a16 file: fix hash computation for small multipart files
Ticket: 8119

Fixes: f68e2f5537 ("files: append data on closing even with
FILE_NOSTORE")
11 months ago
Jason Ish 7417cf07f6 github-ci: add schema tests to docs workflow
This will run the schema tests when no code has been modified.
11 months ago
Juliana Fajardini 331bc8aeac schema: add descriptions to global memcaps/memuses
For FTP, Host, IP Pair and HTTP.

Related to
Task #6434
11 months ago
Juliana Fajardini 2855574a2c schema: add additional properties to stats.capture
The `stats.capture` object may have different properties based on the
capture method used.

This adds the ones pertaining to AF_PACKET capture.

Related to
Task #6434
11 months ago
Juliana Fajardini 12e0e51864 schema: add desc for each main stats module
Part of the schema documentation effort.

Related to
Task #6434
11 months ago
Juliana Fajardini 025ffa6135 schema: allow stats.stream event counters
While the counters exist, they're not present in the schema, causing
validation to fail if stats.stream-events is enabled.

Task #7858
11 months ago
Juliana Fajardini 173fec81f8 schema/stats: flow_mgr is actually flow.mgr
The schema accounts for a stats counters group that is a subgroup of the
flows stats counters. Remove `flow_mgr`, thus.
11 months ago
Juliana Fajardini 1647081b29 doc: remove remaining references to pruned flows
These were removed with a5587fec2e but these mentions went under the
radar.
11 months ago
Jhonny Sousa 05a4aaf2c0 util/misc: Change shortening format and add unittests
Ticket: #5583
11 months ago
Jhonny Sousa 626027a456 util/pool: Convert unittests to new FAIL/PASS api
Ticket: #6322
12 months ago
Philippe Antoine 8ca589b5fb detect/tls: get rid of stack allocation
By making the pcre trim the trailing spaces

Ticket: 8001
12 months ago
Philippe Antoine ddb228e839 detect/msg: avoid temporary stack buffer
Just allocate the heap buffer asap and work on it.

Ticket: 8001
12 months ago
Philippe Antoine e3b79c4077 detect/content: avoid temporary stack buffer
Just allocate the heap buffer asap and work on it.

Ticket: 8001
12 months ago
Philippe Antoine 190ae4c6f9 detect/mpm: use fixed constant for stack allocation
instead of smaller run-time value.
Allows easier reading of the code for unbounded stack allocations

Ticket: 8001
12 months ago
Philippe Antoine 71c95fe670 output/frame: remove ifdefed out code
With bad pattern : stack allocation instead of using built-in
jsonbuilder hex printer

Ticket: 8001
12 months ago
Philippe Antoine ca16b4ebf7 detect/parse: debug validation about stack allocation
Ticket: 8001
12 months ago
Philippe Antoine 3337617a5e output: debug validation about stack allocations
Ticket: 8001

For flow variables names
12 months ago
Philippe Antoine 42d6c85757 util/debug: debug validation about stack allocation
Ticket: 8001
12 months ago
Philippe Antoine 6b7c78393c util/classification: check stack allocation size
Ticket: 8001
12 months ago
Philippe Antoine 753ab723b0 datasets: debug validation for stack allocation size
We iterate C substrings of a string whose max size is
SIG_JSON_CONTENT_KEY_LEN

Ticket: 8001
12 months ago
Jason Ish a9eee5dfd9 rust/htp: convert to nom 8
Ticket: #8090
12 months ago
Jason Ish ef9cd7beff rust/smb: convert to nom 8
Ticket: #8089
12 months ago
Jason Ish 02045e1d62 rust/dcerpc: convert to nom 8
Ticket: #8093
12 months ago
Jason Ish 25c98af0e8 rust/detect: convert remaining detection rule parsers to nom 8
Ticket: #8051
12 months ago
Jason Ish dea3f9e260 rust/detect: convert error.rs and dependent parsers to nom 8
Ticket: #8051
12 months ago
Jason Ish efc32dea41 rust/detect: convert uint nom 8
And users of uint directly impacted by this change.

Ticket: #8051
12 months ago
Jason Ish cf604751de rust/util: convert to nom 8
Ticket: #8088
12 months ago
Jason Ish 1e01d5adca rust/conf: convert to nom 8
Ticket: #8087
12 months ago
Jason Ish c6e8932740 rust/asn1: convert to nom 8
Ticket: #8086
12 months ago
Jason Ish 59f8fb30a8 rust/ftp: fix clippy warning
error: implicitly casting the result of `from_raw_parts_mut` to `*mut [u8]`
        --> src/ftp/response.rs:107:31
12 months ago
Jason Ish 745e972348 github-ci: update Rust 1.91 for clippy and "known" stable 12 months ago
Philippe Antoine 9d164d8794 fuzz/conf: bail out on long sequence of scalars
Ticket: 8105
12 months ago
Olusegun Fajobi 785389aa00 detect/analyzer: add more details for flowint keyword
Ticket: 6311
12 months ago