Commit Graph

1231 Commits (329742c10e0e0f151f9cacddc0ece981d6ba15bd)

Author SHA1 Message Date
Victor Julien ce90e87304 Fix failing thresholding unittests 15 years ago
Pablo Rincon e18e2ec998 Changing threshold logic 15 years ago
Pablo Rincon 8bcdf29ab7 Small fix on pass action handling and added more unittests 15 years ago
Pablo Rincon 1238668961 Adding actions order and suport for rule action "pass" 15 years ago
Victor Julien 6dd5446893 Use proper tcp/udp macro's in alert-debuglog 15 years ago
Victor Julien 26ef58342d Fix typo in uricontent within handling causing within to be wrong. 15 years ago
Victor Julien cc5c78dae9 Add tcp seq info and pcap file packet number to the alert-debuglog. 15 years ago
Victor Julien 543abf145c Fix a within calculation bug for cases where distance + pattern length > within setting. Fixes #148. 15 years ago
Pablo Rincon 9ccfda22ec Radix tree issue fix (from Steve Grubs report) 15 years ago
Victor Julien 2576f4a149 Fix a bug in the signature grouping code that didn't properly setup the mpm ctx's in some cases. 15 years ago
Victor Julien b90ebc1ce5 Add a packet count var for pcap file mode to the Packet structure to ease debugging. 15 years ago
William Metcalf ce01927515 Import of GPLv2 Header 050410 15 years ago
Victor Julien c3392b7c22 Fix checking for the stream GAP after the ssn ptr was initialized. 15 years ago
Victor Julien b6a45fd1a4 Hack around cornercase in debug code in stream engine. Works around #140. 15 years ago
Victor Julien 9676273e6d Kick out streams with gaps in them in the app layer parser until we add proper support. 15 years ago
Pablo Rincon 6abcb0d1fd http_heade fix, check first that we have a connp before checking transactions 15 years ago
Victor Julien 070ed778b8 Libcap-ng support by Gurvinder Singh and myself. Basic support for per thread caps is added, but not activated as it doesn't seem to work yet. Work around for incompatibility between libnet 1.1 and libcap-ng added. 15 years ago
Victor Julien e0c2c86342 Make HTTP proto detection more reliable. Add HEAD keyword. Thanks rmkml for the report/request. 15 years ago
Gurvinder Singh 07ff24301f fixed the depth updation when content_len is small (bug 139) 15 years ago
Pablo Rincon 1891c2a60d Adding missing error msgs at some http_header unittests 15 years ago
Gurvinder Singh e0b4838471 fix bug 133, error caused by seq mismatch in fin_wait_2 state, whis was dicarding the packet which should be accepted 15 years ago
Pablo Rincon 83f5be11e7 Fixing http_header unittest printf errors format 15 years ago
Pablo Rincon ab02ab9ead adding http_header keyword support 15 years ago
William Metcalf 57a679be49 Small fix where a space was added before \n in fast-log if a xref wasn't used 15 years ago
Gurvinder Singh 074b896879 fixed typo in dcerpc (bug 137) 15 years ago
Gurvinder Singh 5b802f6099 fixed type in htp (bug 138) 15 years ago
Gurvinder Singh 7330bcd12c fixed the regex in bug 136 15 years ago
Gurvinder Singh 0c4687f768 correct the typos (but 135) 15 years ago
Victor Julien 294b39bb3a Properly set content and uricontent depth. Fixes #134. 15 years ago
Gurvinder Singh 719fa5f5e1 fixed the incorrect depth update incase of offset is 0 (bug 134) 15 years ago
Victor Julien fc2029ef58 Fix small memuse counter issue in flow subsys, remove emergency printfs 15 years ago
Jason Ish 00974d157b Fix issue 131.
Flow-timeouts likely don't need to be a sequence, but rather mappings.  We'd only need a sequence if you wanted to list something like "tcp" twice which I don't think makes sense for configuration section.

Also fixup flow.c to not attempt to use the sequence, and put the timeouts into their correct place.
15 years ago
Pablo Rincon a152623e11 Bug 130: detect-nocase was not recreating the BmCtx with nocase chars, so it was not working with patterns of capital letters as expected 15 years ago
Victor Julien 285c561559 Remove inline from counters to make gnu99 happy. 15 years ago
Victor Julien 0eabde4a9b Gnu99 inline fixes for stream engine. 15 years ago
Victor Julien 23cb020493 Fix thread flag code to compile with gnu99 15 years ago
Victor Julien c942b98f44 Fix radix inline error on gnu99 15 years ago
Victor Julien 951be71f92 Fix pm algo's inline errors in gnu99 15 years ago
Victor Julien 0fa1936923 Fix stream_size detection inline errors in gnu99 15 years ago
Victor Julien 09b48d2697 Fix payload and uri detection inline errors in gnu99 15 years ago
Victor Julien 1789e78f29 Fix compilation of pm algo's with gnu99 15 years ago
Pablo Rincon 591e5e7da7 Moving inline functions to the .h files, so gcc can inline them correctly 15 years ago
Pablo Rincon b1d1ea87ff Moving inline functions to the .h files, so gcc can inline them correctly 15 years ago
Victor Julien 53656f0d5d Remove inline's from spm to satisfy gnu99 15 years ago
Victor Julien be5b547803 Convert DecodeSetNoPayloadInspectionFlag and DecodeSetNoPacketInspectionFlag to macro's. 15 years ago
Victor Julien 63cb1818ed Move TmThread*Flag functions to the header so they can be inline with gnu99 as well. 15 years ago
Pablo Rincon bd8111f868 Moving inline functions to the .h files, so gcc can inline them correctly 15 years ago
Pablo Rincon 3212a75c63 Moving inline functions to the .h files, so gcc can inline them correctly 15 years ago
Pablo Rincon 3047135817 Moving inline functions to the .h files, so gcc can inline them correctly 15 years ago
Pablo Rincon d94d929b04 Moving inline functions to the .h files, so gcc can inline them correctly 15 years ago
Pablo Rincon a429192507 Moving inline functions to the .h files, so gcc can inline them correctly 15 years ago
Pablo Rincon 224a33f19e Moving inline functions to the .h files, so gcc can inline them correctly 15 years ago
Pablo Rincon d85176bb8b Moving inline functions to the .h files, so gcc can inline them correctly 15 years ago
Pablo Rincon b334036d75 Moving inline functions to the .h files, so gcc can inline them correctly 15 years ago
Pablo Rincon 943b4742a8 Moving inline functions to the .h files, so gcc can inline them correctly 15 years ago
Pablo Rincon 98e35ee1a9 Moving inline functions to the .h files, so gcc can inline them correctly 15 years ago
Pablo Rincon 779f154fc6 Moving inline functions to the .h files, so gcc can inline them correctly 15 years ago
Pablo Rincon b823fc0b66 Moving inline functions to the .h files, so gcc can inline them correctly 15 years ago
Pablo Rincon 9209eaeaf6 Fix some error messages and coding style at uri/content modifiers 15 years ago
Anoop Saldanha 0b6dc3e8d5 Fix globalinit memset for trans_q 15 years ago
Victor Julien accd19ba03 Fix a typo in detect-decode-event.h causing a compilation error. 15 years ago
Victor Julien 13e6c8035d Make sure we don't leak memory on app layer protocols we detect, but don't parse. Fixed #132. Thanks to Gurvinder Singh for pointing out where the issue was. 15 years ago
Victor Julien 7c314e8d21 Switch decode-event comments to doxygen format 15 years ago
Gerardo Iglesias Galvan 2128310ebe Add decode events and comments 15 years ago
Victor Julien 79a780ffe4 Improve a number of error and info messages. 15 years ago
Victor Julien 591c898f6a NFQ inline changes
- split NFQRecvPkt into a Linux and Windows version for readability
- Add many function header comments
- convert tabs to spaces in Windows code.
15 years ago
Jan Jezek 366671a8ce Added inline mode support on Windows 15 years ago
Victor Julien 54aa1790f3 Remove Makefile.am reference to non-existing file. 15 years ago
Victor Julien 2dd28ea7fd Use threadsafe time functions. 15 years ago
Victor Julien 8ec51fce57 Remove leftover debug print. 15 years ago
Victor Julien 2797e67a79 Print Suricata version after initializing logging subsys. 15 years ago
Victor Julien 27bff56cd7 Bump version to 0.8.2 15 years ago
Victor Julien 655b6acad9 Flush fp to be sure before closing. 15 years ago
Victor Julien d3b573348e Make sure that the SC_LOG_OP_FILTER env var overrides config as well. 15 years ago
Victor Julien 958b61ab85 Fix errors in the unittests reported by valgrind's drd tool. Add explanation of a FP. 15 years ago
Victor Julien 4875c2daf4 Console logging settings are now overridden by env vars. 15 years ago
William Metcalf 9527aa26a2 Small windows fixes ifdef wrapper for netinet/in.h O_NOFOLLOW def missing so added ifndef define install doc updated. 15 years ago
Victor Julien cec124df10 Fix icmp_id keyword and improve icmp_seq keyword logic. 15 years ago
Victor Julien 18e00dc6d0 Add warning about needing a patch for Barnyard 0.2.0 on 64-bit. Rename sc_timeval32 to SCTimeval32. 15 years ago
Victor Julien 0febe449e6 In unified1-alert the ip addresses are in host order. 15 years ago
Jason Ish 12962c5969 ./configure option, --enable-unified-native-timeval to have unified outputs use a native timeval to be compatible with unpatched barnyard 1 on 64 bit systems. 15 years ago
Jason Ish 2c6dd6b8fa Be compatible with Snort. Stick with a 32 bit style of timeval for the unified outputs. 15 years ago
Victor Julien b7c089df42 Fix a couple of harmless compiler warnings. 15 years ago
Victor Julien 046c813fba Small error checking rewrite. 15 years ago
Gurvinder Singh 3ffbb4c3f4 fixed more api and logic erros in recent master 15 years ago
Victor Julien eeb98c6900 Move SCSetThreadName to proper functions. 15 years ago
Gerardo Iglesias Galvan 9f35a24a1f Set threads name. Fix bug #83 15 years ago
Victor Julien 59c5e819b1 Fix compilation if debugging is disabled. 15 years ago
Victor Julien d07ded6e52 Use strlcpy instead of strncpy. 15 years ago
Gurvinder Singh cf2d254cc6 fixed the memory leaks and buffer overflows reported by parfait 15 years ago
Victor Julien 27d1dbc342 Add comment explaining how I feel a CLANG related change is unnecessary, but that I might be wrong :-) 15 years ago
Victor Julien 9e6b897ebc Improve detect-threshold parser error handling. 15 years ago
Victor Julien 565b44a7e5 Improve sig parsing unittest error handling. 15 years ago
Victor Julien cd7e5cebec Improve http-cookie keyword unittests error handling. Fix memory errors in the tests too. 15 years ago
Victor Julien d9d53fab5d Improve detection-filter parsing code error handling. 15 years ago
Victor Julien 91ed463314 Improve dce-iface keyword unittests. 15 years ago
Victor Julien f81fccd66b Reintroduce usage of the SC_RADIX_NODE_USERDATA marco into the htp code. Rewrite the macro slightly, add unittests for the macro. 15 years ago
Gurvinder Singh 69a4fee757 fixed the API and logic error reported by clang tool 15 years ago
Victor Julien 3c7027687f Fix logging api not cleaning up LogFileCtx mutex. 15 years ago
Victor Julien 78e15ea7fa Explicitly test for ipv6 in the htp personalities code. Update all affected unittests to set addr family to the flow. 15 years ago
Victor Julien ae2698c9cc Properly cleanup used mutexes and condition vars in the flow subsys. 15 years ago
Victor Julien 38f7479af2 Make sure we set the address family (AF_INET & AF_INET6) in the flow's address structures. Needed by HTP personalities code. 15 years ago
Victor Julien fe55d996c1 Improve yaml loaded debug output formatting. 15 years ago
Victor Julien ad02732907 Properly cleanup stream engine spinlocks and mutexes at shutdown. Fixes drd errors in unittests. 15 years ago
Victor Julien 531594a35f Small error message and comment update to the nocase keyword. 15 years ago
Anoop Saldanha a9d3a85b56 support nocase and negation for http_cookie 15 years ago
Victor Julien 71b327bd23 Improve error detection in the pidfile api. 15 years ago
Pablo Rincon 9803def006 Adding pidfile support (thanks to Steve Grubb for the patch) 15 years ago
Anoop Saldanha 9e94768385 fix for bug 108 15 years ago
Anoop Saldanha 47037ef9ec fix for bug 115 15 years ago
Victor Julien 2d45a5994a Fix invalid free in HTP config deinit. 15 years ago
Victor Julien fe7ece997a Different approach to the reference keyword. Lots of cleanups, bug fixes in reference keyword code and tests. 15 years ago
Breno Silva 89baf93a40 Reference Support 15 years ago
Victor Julien 65c9d00730 Remove duplicate cuda kernel file. 15 years ago
Victor Julien 44b6380a70 Improve http body chunk memory handling robustness. 15 years ago
Pablo Rincon fe7948a7ae Modifications on http body request handling 15 years ago
Pablo Rincon 2ce728d019 Adding support for ecn flags after the handshake 15 years ago
Victor Julien 01c0e316b9 Cleanup of libnet patch. 15 years ago
William Metcalf 3678dda185 libnet now optional 15 years ago
Anoop Saldanha 35bd0c6b39 compiled and added a 64 bit version of the cuda b2g kernel 15 years ago
Anoop Saldanha 606516911b added x86_64 for the b2g cuda code 15 years ago
Pablo Rincon f862de2ee6 Fixing some code reviews (Thanks to Steve Grubb) 15 years ago
Pablo Rincon 86185ecd97 Enable spm inspection with precooked pattern contexts on content, uricontent and http_client_body (we will also add this to http_header when it gets commited) 15 years ago
Pablo Rincon 227fe516a0 Adding Boyer Moore context to content patterns, should speed up the search 15 years ago
Pablo Rincon 720f46642f Fix redmine issue 49 (allow pcre to end a pattern with an escaped slash, '\') 15 years ago
Victor Julien 8f0fe76346 Minor dbg output formatting fix. 15 years ago
Victor Julien 15bfa7aa4e Rename CUDA kernel 15 years ago
Anoop Saldanha a91a760fff Add the mpm b2g cuda kernel file into the codebase 15 years ago
Victor Julien 7dcc1daa89 Pcap eof msg can be informational 15 years ago
Victor Julien c5e15213f7 Improve pcap file mode EOF message. Fixes #123. Small cleanups to pcap file code. 15 years ago
Anoop Saldanha e6af69e10e fix for bug 114 15 years ago
Victor Julien 156b844ccb Fix tcp segment list corruption bug 15 years ago
Victor Julien e6ba571c0b Rename structures that don't adhere to our naming conventions. 15 years ago
Victor Julien 4129146a71 Because the HTP personalities code changes how the htp state's connp is initialized, we need to check for it in more places. 15 years ago
Victor Julien ead13bda4a Small cleanup and comment update to htp code. 15 years ago
Brian Rectanus a9cdd2bbae Add htp personality configuration. 15 years ago
Brian Rectanus 4b94babf5d Add functions to radix to add ip/netblocks as string. Add macro to get node user data. Cleanup radix code, docs and printing info. Export all printing functions. 15 years ago
Victor Julien ffd85ac4a6 Use correct datatype in HTPCallbackResponse fixing possible endless looping issues. 15 years ago
Pablo Rincon 2c722c9374 Adding radix tree unittests. Fixing a ipv6 issue with netmasks of 32 (was being handled as if it were ipv4) 15 years ago
Pablo Rincon 6a188f1e6b Fixing memleak also for SCRadixRemoveKey (SCRadixAddKey creates a prefix, but it's the one that the node will hold) 15 years ago
Victor Julien 2b3479577b Fix ecn/cwr unittests 15 years ago
Victor Julien 5eb4095b9a Comment ECN/CWR changes more. 15 years ago
Pablo Rincon 83ddc5813a Support for ecn/cwr TCP sessions 15 years ago
Victor Julien 047238351a Remove loop from radix unittest. We can detect memleaks with valgrind. 15 years ago
Pablo Rincon a5218664c9 Register the free function for nodes of the radix trees at unittests 15 years ago
Pablo Rincon 7cc6edbb09 Unittest used to check the radix memleak located at searching 15 years ago
Pablo Rincon ef3ac7f126 Release the tmp prefix used for searching on the radix tree 15 years ago
Anoop Saldanha 53e8120c9d adapt b2g cuda code for the mpm architecture change 15 years ago
Victor Julien 15c67bfbd2 Fix locking issue in the uri scanning code. 15 years ago
Anoop Saldanha 2c9366b83c Enable flag in http_client_body for http request body callback 15 years ago