6294 Commits (310e8fcbf8df6a57f159c1c86f70bfa1ecd8e220)

 

All Branches   

Search

Author	SHA1	Message	Date
Victor Julien	310e8fcbf8	stats: export StatsToJSON	10 years ago
Victor Julien	ffdfb6a8f0	json-stats: split out json generation ... Split out JSON generation logic so the code becomes reusable.	10 years ago
Victor Julien	c446abeb47	jansson: include in suricata-common.h	10 years ago
Andreas Herz	8c0e575063	configure: warn if libpcre 8.35 is used	10 years ago
Travis Green	72c9debbd6	yaml: disable rules by default ... Change to "disable by default" rulefiles	10 years ago
Tom DeCanio	8f059b2841	output-json-dns: add logging of NS answer record content.	10 years ago
Andreas Herz	09fe1c62d8	detect-tls-version: fix small resource leak	10 years ago
Jason Ish	3d2834a232	json: use top-level sensor-name if provided. ... Currently the default configuration file contains a "sensor-name" at the root of the configuration file, however, eve-log will only use it if its specified under eve-log. Now we will look for it at the eve-log, if present we'll use it but log a deprecation warning, if its not present we'll look for sensor-name at the root of the configuration.	10 years ago
Victor Julien	5f39728509	ssh: fix string handling in unittest	10 years ago
Victor Julien	9015fb5a7f	travis: set CFLAGS to error on cc warnings	10 years ago
Victor Julien	8bb1cf08ef	eve: fix mishandling of big messages ... When the string representation of a JSON message grew bigger than 64k, the JSON record would just be truncated. This lead to errors in the parser(s) of the JSON stream. This patch changes the buffer logic to grow the buffer on demand.	10 years ago
Victor Julien	6c30f7bdbb	counters: fix thread stats delta logging ... Just like with the global stats, store prev values. Fixes delta logging.	10 years ago
Victor Julien	0138bf5605	qa: add leak sanitzer suppression	10 years ago
Victor Julien	1c3a0434ca	wirefuzz: exit with error code on more issues	10 years ago
Victor Julien	9d49b828a6	wirefuzz: logdir handling improvement	10 years ago
Victor Julien	8626eccf58	wirefuzz: remove obsolete stream mem check	10 years ago
Victor Julien	048e538828	wirefuzz: add -N option to count complete passes	10 years ago
Victor Julien	7299388d05	wirefuzz: improve logfile cleanup	10 years ago
Victor Julien	3d0542405d	wirefuzz: enforce -n option per run	10 years ago
Victor Julien	0d77c4d560	wirefuzz: add -S option for exclusive rule load	10 years ago
Victor Julien	0a22ba7e23	http: fix multipart body tracking slowdown ... Optimize HTTP multipart body parsing. Big records that were not files could slow down Suricata. The reason was that the body tracker was not moved forward. This lead to growing body buffers, which were expensive wrt memory and inspection. This patch add logic to move the tracker forward in this case.	10 years ago
Victor Julien	4ee20f2649	asan: fix reputation code include	10 years ago
Victor Julien	ee5fd4613b	tls-sni: fix uninitialized memory use ... On bad traffic the parser could allocated memory that was not intialized. This was later used in the JSON output logging as a valid null terminated string.	10 years ago
Victor Julien	4086938f1e	pool: fix memory leak ... Due to pointer size mishandling, the pool code could consider a block of memory inside the 'preallocated' block. It would then not free the block.	10 years ago
Victor Julien	b93a302a5b	stream: improve StreamTcpSegmentForEach for IPS ... StreamTcpSegmentForEach would only return ACK'd segments. This lead to missing stream data in alerts when running in IPS mode. This patch changes the behavior for IPS. All segments are iterated now, also the non-ACK'd ones. For IDS mode the behavior is unchanged.	10 years ago
Victor Julien	3a9bcd6a53	qa: add --simulate-ips option ... This option forces the engine in 'IPS' mode. This is useful for testing some IPS code paths based on pcaps.	10 years ago
Victor Julien	6152d1abca	eve: fix stream payload logging wrong direction ... In the EVE stream payload logging the IPS path logged the wrong dir. Both IDS and IPS can take the same path as the detection engine inspects in the same direction in both cases, so the alert is also generated in the same direction. Bug #1684	10 years ago
Maxtors	4b8bd9dfc9	Added checking of negated "totals" and "threads" config values for stats.	10 years ago
Mats Klepsland	6f79137971	lua: expose TLS certificate chain to lua ... Expose TLS certificate chain to lua through TlsGetCertChain().	10 years ago
Tom DeCanio	559747e325	file-store: add force-filestore configuration option to enable writing all ... extracted files to filesystem.	10 years ago
Nicolas Thill	3c9538b783	lua: set thread vars in DetectLuaMatch ... Fix internal error when calling SCThreadInfo from Lua detection modules. Signed-off-by: Nicolas Thill <ntl@p1sec.com>	10 years ago
Maurizio Abba	c4fb6217ee	filestore-call: forcing a call to FileStore instead of manually updating ... the relative flag in order to have a single point where we actually touch the File structure	10 years ago
notnyt	2b263d55a2	fix nfq_get_timestamp ... Handle case when nfq_get_timestamp returns 0 for success, but timestamp is empty.	10 years ago
bladeswords	2a17e3e827	Fix typo of trailing ] in configure --help ... It is the small things that count. This is an example of the fix Before --disable-threading-tls Disable TLS (thread local storage)] After --disable-threading-tls Disable TLS (thread local storage)	10 years ago
Andreas Herz	5cee70f9ae	Fix the comment and explanation for random-chunk-size	10 years ago
Andreas Herz	8bd9f3d072	json: fix missing includes in disable unix socket case	10 years ago
Victor Julien	adbf8bec74	drmemory: suppress magic leak	10 years ago
Andreas Herz	15c98c6085	file-magic: improve libmagic handling on *nix systems	10 years ago
Alexander Gozman	368d7e913a	In configuration test mode, check signatures if 'delayed-detect' is enabled ... When 'detection-engine.delayed-detect' option was set to 'yes', suricata didn't check signatures validity in configuration test mode.	10 years ago
Andreas Herz	20dd593981	remove unnecessary braces	10 years ago
Andreas Herz	dc1bd5b6bd	configure: add --disable-python option	10 years ago
Jason Ish	18760e222a	asn1: fix memory leak ... As reported in issue #1395, fix 2 memory leaks when destroying asn.1 decode contexts.	10 years ago
Victor Julien	96ed8d90ee	Fix two more potential issues like bug 1550	10 years ago
Alessandro Guido	05fdfcb71e	Segfault fix	10 years ago
Andreas Herz	b6de1b6567	coccinelle: fix typo for strchrnul	10 years ago
Jason Ish	4352dd179c	conf: null guard in ConfNodeLookupChild ... Add NULL guarding to the lookup so callers can process nodes in a loop with less error checking. Addresses issue #1660.	10 years ago
Alexander Gozman	2aa971240b	unix manager: log client's version with debug level ... As (dis)connects are already logged as a debug events, this one should do the same.	10 years ago
Eric Leblond	384db27800	unix-manager: fix ressource leak when init fail	10 years ago
Victor Julien	f9faf990fb	Update Changelog for 3.0	10 years ago
Victor Julien	202b11c0f6	smtp: harden mime parsing	10 years ago