Commit Graph

50 Commits (3a45b2711cf02cc0d7cc83d45954d441332a5cea)

Author SHA1 Message Date
Anoop Saldanha 3a45b2711c Fixed the Perf API startup issue 16 years ago
Victor Julien b102ea2123 Big update:
- Implement "closing" state in flow.
- Add protocol specific timeouts.
- Lots of stream tracking updates, fixing a lot of out of window issues.
- Stream reassembly fixes.
- Implement a new IDS runmode with 4 stream and detect threads.
- Added a BUG_ON macro that aborts the engine if the expression is true.
- Better balance the flow queue handler for traffic that doesn't have flow (like icmp currently).
- Simplify application level protocol in the Tcp Session.
- Add some debugging memory counters.
16 years ago
Gurvinder Singh 2e3d7fcb9d Fixed seg fault 16 years ago
Gurvinder Singh ced5157dc9 Flow get state protocol specific 16 years ago
Gurvinder Singh ec4fee215c registering unit tests 16 years ago
Anoop Saldanha f35d9f0437 threading improvements. Replaced the use of slot(2/3) with varslot. Improve error handling in slot functions. Additional helper functions for thread creation 16 years ago
Victor Julien 3636ca9703 Adding a "flow" queue handler. This queue handler passes packets of the same flow to the same queue. Changed the default IDS mode to use this.
Some output cleanups, shutdown should be cleaner now.
16 years ago
Anoop Saldanha 22c0ec2bc5 Added support for the csum-<protocol> rules keyword to the detection engine. Keywords added are ipv4-csum, tcpv4-csum, tcpv6-csum, udpv4-csum, udpv6-csum, icmpv4-csum and icmpv6-csum 16 years ago
Anoop Saldanha 401a0313d4 checksum calculation functions for icmpv6, udp over ipv6 and tcp over ipv6 16 years ago
Victor Julien 086ba5f49b Add 'BySize' field parser. Add stub tls parser. 16 years ago
Victor Julien b26b5aa462 More cleanups. 16 years ago
Jamie 9adfe54620 more unit tests for pppoe - part I 16 years ago
Anoop Saldanha 41dd0f8e62 checksum calculation functions for ipv4, tcp, udpv4, icmpv4 16 years ago
Victor Julien 85abc3ef62 Complete removal of global de_ctx. UtRuntests now returns the number of failed tests or 0 on none. Program exits with code 1 on failed tests, code 0 otherwise. Removal of broken http uri test. 16 years ago
Victor Julien b9972a9d2c Cleanups 16 years ago
Victor Julien 391e69e699 Fix tunnel packet handling. 16 years ago
Breno Silva 9528e02e46 GRE support 16 years ago
Brian Rectanus 74cb73fc1d Decode IPv4 options. 16 years ago
Victor Julien 6a1acba1ab Fix missing conf include. 16 years ago
Jason Ish e3b538c7d7 Simple configuration API.
Allow the log directory to be changed.
16 years ago
Victor Julien 4369816cdd Improvements to content keyword memory handling.
First version of a simple pattern based L7 proto detection engine. Currently just works by matching a single pattern in the initial data. Implemented HTTP, SSL, MSN, JABBER, SMTP and a few more.

Couple of pattern matcher cleanups.
16 years ago
Victor Julien 57f71f7e4b Pass the DecodeThreadVars to all Decoder functions properly. Improve the error handling. 17 years ago
Victor Julien 2d406555a8 Fix compiler warning about 'mode'. 17 years ago
Jamie afa8a6766e test cases for PPPoE, ICMPv4 17 years ago
Victor Julien 720ac9efe8 Improve unittest error message if unittests are not compiled in. 17 years ago
Victor Julien 5501212e62 Fix sizeof printf related compiler warnings. 17 years ago
Brian Rectanus fa5939ca91 64 bit cleanup part2 17 years ago
Victor Julien 2e4cc2ad3d Convert tabs to spaces in PPPoE code. 17 years ago
Jamie 8817364ef6 initial PPPoE decoder commit 17 years ago
Victor Julien 630a58b719 Fix unittests -u commandline option. 17 years ago
William Metcalf dd86b51dbc added optional option to specify signature file to load 17 years ago
Victor Julien 9f78d47c2a Further work on the stream L7 parser, it's api and the http stub implementation. 17 years ago
Victor Julien 5a9a23f9bb Update to the parsers. 17 years ago
Victor Julien 8e10844f95 Initial code of Application Layer parsing framework. Rename of L7* to AppLayer*. 17 years ago
Jason Ish fed12be6c0 Add some usage. 17 years ago
Jason Ish f28ffebf0e Basic command line support for pcap (file, network), nfq and unit test modes.
Just some basic command line support I had in my tree for setting the
run-mode, including unit tests.  Seems fine for simple setups, but I
think we'll want to make things setup in the config file.  Anyways, I
like to switch from file to real device without a recompile :)

Also want to check with you if the patch is formatted correctly.. I
use git format-patch then used it as a template into mutt, which seems
easier than the git send-email command.

Thanks
-- Jason
17 years ago
Victor Julien e147b87d5f Fix small error in thread creation. 17 years ago
Anoop Saldanha 53c21410b6 improve the threading api for the ids 17 years ago
Victor Julien b7c42d55f5 Fix setting l7 thread name. 17 years ago
Victor Julien f9227969b0 Add some dbg output to the counters. 17 years ago
Anoop Saldanha a5fb240a4a Changes added for the Performance Counter API 17 years ago
Victor Julien e6400bf456 --enable-unittests now controls compilation of unittest code. Added crude commandline support for running unittests: ./eidps runtests 17 years ago
William Metcalf a3510f2025 Made NFQ optional via --enable-nfqueue, --enable-logsigs will now load local.rules in the path other fixes 17 years ago
Victor Julien 1dc2916c3a Add debug output to SetupPkt. 17 years ago
Victor Julien 9854c19a88 Adapt Flow subsys init function to be able to initialize quietly for us in unit tests. Add flow to PPP unit tests. Fixes a floating point exception error. 17 years ago
Victor Julien c53dfea379 Improve the threading code to enable a single pcap file processing thread. 17 years ago
Victor Julien 76581ef967 Small layout fixes to the ppp code. 17 years ago
Breno Silva dec11038c6 PPP Support 17 years ago
Victor Julien 1c2240cfeb Stream reassembly update and WIP code for L7 modules. 17 years ago
Victor Julien 51a9e36e10 Remove vips references. Rename to eidps. 17 years ago