27 Commits (3a6ecab0984745f0cefe3ca3c6dfee1eec7470d8)

Author	SHA1	Message	Date
Jason Ish	c2728eee01	smtp: add firewall progress states ... Add minimal SMTP progress states to support envelope validation before moving to data. Update SMTP, file and email keywords to hook into the appropriate states. Purposefully kept minimal for now as to not break the current idea of an SMTP transaction, which is probably not ideal for firewall mode. Ticket: #8393	4 months ago
Philippe Antoine	8e39539161	detect/doc: fix broken anchor links ... Ticket: 8257	6 months ago
Jeff Lucovsky	022a79fdd5	misc/cleanup: Simplify <cond> ? true : false ... Simplify statements where there's a conditional statement followed by return true or return false. Instead of if (conditional) return true; else return false; Use: return conditional	7 months ago
Philippe Antoine	b298bce0e7	detect: list-keywords cli shows multi-buffers ... Ticket: 7571	1 year ago
Alice Akaki	8e0b0ef35f	detect: add email.body_md5 keyword ... email.body_md5 matches on md5 hash generated from email body This keyword maps to the EVE field email.body_md5 It is a sticky buffer Supports prefiltering Ticket: #7587	1 year ago
Philippe Antoine	78034b218d	rust: bindgen SCDetectSignatureSetAppProto ... Ticket: 7667	1 year ago
Philippe Antoine	dc20129195	rust: bindgen SCDetectHelperBufferMpmRegister ... Ticket: 7667	1 year ago
Philippe Antoine	e2603fa820	detect/single-buf: new simple wrapper ... Introduce DetectGetSingleData which does the generic wrapping, including the transforms, using a new callback prototype DetectTxGetBufferPtr The goal is to replace most InspectionBufferGetDataPtr. For this commit, we do not change every callback to keep the change relatively small. Focus here is to remove DetectHelperGetData as its functionality is provided more directly by the new DetectTxGetBufferPtr.	1 year ago
Philippe Antoine	13449344e8	rust: bindgen SCDetectHelperKeywordRegister ... Ticket: 7667	1 year ago
Philippe Antoine	0d82e905bc	rust: bindgen DetectHelperMultiBufferMpmRegister ... Ticket: 7667	1 year ago
Philippe Antoine	033e0480cf	detect/single-buf: helper with more explicit direction	2 years ago
Philippe Antoine	dadf9012fc	rust: bindgen detect-engine-buffer.h ... Ticket: 7667 And prefix SCDetectBufferSetActiveList to be exported Allows less use of suricata crate in plugin as we get the functions prototypes from suricata_sys and they are more correct.	2 years ago
Philippe Antoine	0024de5e9e	src: new file detect-engine-buffer.h ... Taken from detect-engine.h so that we can bindgen this smaller unit.	2 years ago
Philippe Antoine	808f8a877a	detect/multi-buf: helper with more explicit direction	2 years ago
Philippe Antoine	8ecc3efdc8	detect/multi-buf: harmonize wrapper ... Introduce DetectGetMultiData which does the generic wrapping, including the transforms. And let each keyword do just the getter.	2 years ago
Philippe Antoine	96afdce283	detect: rename SCSigTableElmt to SCSigTableAppLiteElmt	2 years ago
Alice Akaki	bda0890834	detect: add email.received keyword ... email.received matches on MIME EMAIL Received This keyword maps to the EVE field email.received[] It is a sticky buffer Supports multiple buffer matching Supports prefiltering Ticket: #7599	2 years ago
Alice Akaki	ca429ef5e3	detect: add email.url keyword ... email.url matches on URLs extracted from an email This keyword maps to the EVE field email.url[] Supports multiple buffer matching Supports prefiltering Ticket: #7597	2 years ago
Jeff Lucovsky	22ea5ddbb7	detect/transforms: Add engine detect thread ctx to signature ... Modify the transform function signature to include the detect engine thread ctx.	2 years ago
Alice Akaki	341369f203	detect: add email.x_mailer keyword ... email.x_mailer matches on MIME EMAIL X-Mailer This keyword maps to the EVE field email.x_mailer It is a sticky buffer Supports prefiltering Ticket: #7598	2 years ago
Alice Akaki	52e12410ed	detect: add email.message_id keyword ... email.message_id matches on MIME EMAIL Message-Id This keyword maps to the EVE field email.message_id It is a sticky buffer Supports prefiltering Ticket: #7593	2 years ago
Alice Akaki	ce2e7aed74	detect: add email.date keyword ... email.date matches on MIME EMAIL DATE This keyword maps to the EVE field email.date It is a sticky buffer Supports prefiltering Ticket: #7591	2 years ago
Alice Akaki	7ba4ebdc2c	detect: add email.cc keyword ... email.cc matches on MIME EMAIL Carbon Copy This keyword maps to the EVE field email.cc[] It is a sticky buffer Supports prefiltering Ticket: #7588	2 years ago
Alice Akaki	9c3c6cf4cc	detect-email.c: don't return NULL for empty buffer ... Just return NULL if tx->mime_state is NULL or if SCDetectMimeEmailGetData return 0 Fixes: 09db7c7 ("detect: add mime email.subject keyword") 90aab0d ("detect: add email.from")	2 years ago
Alice Akaki	5d6a072e35	detect: add email.to keyword ... email.to matches on MIME EMAIL TO This keyword maps to the EVE field email.to[] It is a sticky buffer Supports prefiltering Ticket: #7596	2 years ago
Alice Akaki	09db7c7ac1	detect: add mime email.subject keyword ... email.subject matches on MIME EMAIL SUBJECT This keyword maps to the EVE field email.subject It is a sticky buffer Supports prefiltering Ticket: #7595	2 years ago
Alice Akaki	90aab0d62f	detect: add email.from ... email.from matches on MIME EMAIL FROM This keyword maps to the EVE field email.from It is a sticky buffer Supports prefiltering Ticket: #7592	2 years ago