suricata

Commit Graph

Author	SHA1	Message	Date
Anoop Saldanha	420befb180	Changed my email address to anoopsaldanha at gmail dot com from my current one	15 years ago
Victor Julien	89f83e714c	Introduce http_server_body keyword. The http_server_body content modifier modifies the previous content to inspect the normalized (dechunked, unzipped) http_server_body. The workings are similar to http_client_body. Additionally, a new pcre flag was introduced "/S". To facilitate this change the signature flags field was changed to be 64 bit.	15 years ago
Anoop Saldanha	7433d92dd2	undo this commit - commit `eff08f93d8` Author: Anoop Saldanha <poonaatsoc@gmail.com> Date: Thu Nov 3 14:31:24 2011 +0530 update failing unittest to reflect the mpm design update Fixed a bug in the mpm code that would make all the changes in the commit just undone wrong.	15 years ago
Anoop Saldanha	eff08f93d8	update failing unittest to reflect the mpm design update	15 years ago
Anoop Saldanha	539ce13695	fix broken unittests	15 years ago
Victor Julien	8186565240	Fix a number of potential issues found by CLANG and cppcheck.	15 years ago
Anoop Saldanha	ed3b44b3b5	fix parsing content keywords. We are more strict now. All content keywords need to be enclosed in double quotes. Better validation for sid, priority and rev keywords	15 years ago
Anoop Saldanha	13ea299ee0	Replace all mallocs with SCMallocs	15 years ago
Anoop Saldanha	966119b6aa	support for http_raw_uri keyword + mpm engine	16 years ago
Anoop Saldanha	c9897a44a4	fast pattern support for http_cookie. Also support relative modifiers	16 years ago
Anoop Saldanha	bbbedaf963	fast pattern support for http_method. Also support relative modifiers	16 years ago
Victor Julien	014f62247a	Another batch of clang fixes. Nothing really serious. Includes a couple of fixes for broken fixes from yesterday.	16 years ago
Anoop Saldanha	72b0fcf419	modify detection engine to carry out uri mpm run before build match array if alproto is http and if sgh has atleast one sig with uri mpm set	16 years ago
Anoop Saldanha	7ec0382774	support fast pattern for http raw header. Also support relative modifiers for http raw header	16 years ago
Anoop Saldanha	075719ea8c	fix fast pattern unittests	16 years ago
Victor Julien	18d3c87947	Add check to fast pattern keyword to make sure that the offset and length don't exceed the actual pattern length.	16 years ago
Anoop Saldanha	c61c68fd36	mpm and fast pattern support for http_header. Also support relative modifiers for http_header	16 years ago
Anoop Saldanha	0aa5cffb12	fast pattern support for http_client_body keyword added. Also mpm support for http_client_body added	16 years ago
Anoop Saldanha	eade60f0fd	make some name changes. break PopulateMpm(). Set the avoid mpm double check flags	16 years ago
Anoop Saldanha	4883efd0f6	unifying content structure - uricontent now uses DetectContentData	16 years ago
Anoop Saldanha	3b0a9ca97e	add support for http_uri; content fast_patterns	16 years ago
Anoop Saldanha	46b4806d8e	use a single populatempm() function to add the right content for mpm	16 years ago
Anoop Saldanha	e0476242c6	replace all Signature->umatch instances in the engine with Signature->sm_lists[DETECT_SM_LIST_UMATCH]	16 years ago
Anoop Saldanha	e54358a9e1	replace all Signature->pmatch instances in the engine with Signature->sm_lists[DETECT_SM_LIST_PMATCH]	16 years ago
Anoop Saldanha	4b77f132df	add support for sigs with uricontent fast_pattern	16 years ago
Anoop Saldanha	ea8eaf31aa	Fix fast_pattern tests that always showed success, irrespective of test results	16 years ago
Anoop Saldanha	a85fa6b792	support for fast_pattern only and fast_pattern:offset,length. Also support the new option for engine-analysis	16 years ago
Victor Julien	1071a53210	Fix unittests after ip_proto keyword change.	16 years ago
Pablo Rincon	693d4f54eb	Load signatures with incompatible fast_pattern option (due to design differences for optimization)	17 years ago
Victor Julien	2fd31a1a11	Remove dsize grouping from detection engine grouping reducing memory usage. Store sgh in flow to reduce lookups. Reduce locking in alert handling. Increase default grouping values as we use less memory.	17 years ago
Victor Julien	7a427ec7f4	Switch to pattern id based results checking in the mpm. Move app layer proto detection towards a more signature based approach.	17 years ago
William Metcalf	ce01927515	Import of GPLv2 Header 050410	17 years ago
Pablo Rincon	591e5e7da7	Moving inline functions to the .h files, so gcc can inline them correctly	17 years ago
Gurvinder Singh	69a4fee757	fixed the API and logic error reported by clang tool	17 years ago
Pablo Rincon	c7350a8ac6	Fixing some naming convention issues and incorrect error messages	17 years ago
Victor Julien	ec47f840f3	Remove more scan references.	17 years ago
Victor Julien	8b30226914	Detection keyword cleanup	17 years ago
Victor Julien	bef70a04ce	First stage of detect engine redesign: equal patterns share id's, search phase no longer used, new match verification phase.	17 years ago
Pablo Rincon	25a3a5c6d8	Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.	17 years ago
Gerardo Iglesias Galvan	ba6d807a6e	Improve information about errors on signature failure	17 years ago
Pablo Rincon	ad2c136e8f	Renaming errors (naming conventions)	17 years ago
Victor Julien	4824868766	Application layer detection improvements - improve locking of application layer handling, making sure that the flow cannot be freed/cleared when the detection engine is still working with it. - add a check to the app layer detection to make sure that a match function will only inspect an app layer state if it's of the right type.	17 years ago
Victor Julien	ecf86f9c23	Rename to Suricata.	17 years ago
William Metcalf	af13665684	failing unit test where fast_pattern rule and non-fast_pattern rule inspect same payload	17 years ago
Victor Julien	fdf8943dfb	Remove a few commented out code lines.	17 years ago
Anoop Saldanha	bb5bd91045	Support to get the last sigmatch of a particular type. To be used for content and its modifiers	17 years ago
Anoop Saldanha	7a10ddc07b	Fixes for the fast-pattern tests and a couple of other minor changes	17 years ago
Anoop Saldanha	6ca5dbc9e9	Support fast_pattern modifier keyword for content	17 years ago

48 Commits (420befb18035d1a9800a70fd601311758920ae1a)