Commit Graph

19060 Commits (45762aa6443fb0e657c15b7d805d6aa30a3e07a0)
 

Author SHA1 Message Date
Juliana Fajardini 040369ed1a qa/live: update tests for fw stats counters
Part of
Ticket #7699
1 month ago
Juliana Fajardini 8a8574b149 exceptions: add dedicated flow drop reason
To better control stats counters.
1 month ago
Juliana Fajardini 312967f291 detect: add flow drop by firewall as drop reason
To track flow drops triggered by the firewall.
Add flow drop by firewall as drop reason.

As part of
Ticket #7699
1 month ago
Juliana Fajardini 0acb136b40 schema: expand stats.ips.replaced explanation
As this is a less obvious counter.
1 month ago
Juliana Fajardini 234172a93c docs: add firewall stats doc
Related to
Ticket #7699
1 month ago
Juliana Fajardini 5b488feef5 detect/firewall: add dedicated stats counters
Add a `firewall` stats counter aggregator for all firewall-related
stats.
De-overload "detect.alert_queue_overflow", by adding
"firewall.discarded_alerts" to account for discarded drops in
Firewall mode.
Add Debug statements for tracking corner cases where it can be
difficult to know where a drop is coming from.

Added counters:
- stats.firewall.blocked
- stats.firewall.accepted
- stats.firewall.rejected
- stats.firewall.drop_reason.default_app_policy
- stats.firewall.drop_reason.default_packet_policy
- stats.firewall.drop_reason.flow_drop
- stats.firewall.drop_reason.pre_flow_hook
- stats.firewall.drop_reason.pre_stream_hook
- stats.firewall.drop_reason.rules
- stats.firewall.discarded_alerts

Ticket #7699
1 month ago
Juliana Fajardini 32d89072d2 docs/configuration: add firewall mode settings
Partly related to
Ticket #7699
1 month ago
Jason Ish b366665ad8 doc: document rust thread life cycle api
Ticket: #8605
1 month ago
Jason Ish 144f824f17 rust/ffi: add thread init callback wrapper
Ticket: #8605
1 month ago
Jason Ish c689af0bbb rust/ffi: bindgen thread lifecycle callbacks
Ticket: #8605
1 month ago
Jason Ish f269e22b67 github-ci: add coverage reporting for the rust example plugin
Should help reporting coverage on the ffi wrappers only used by plugins.
1 month ago
Jason Ish e1a2a36ee7 examples/plugins/rust: misc cleanups
- Remove registration helper
- Limit function visibility
1 month ago
Philippe Antoine 07112bc7ae rust: format mqtt files
Ticket: 3836
1 month ago
Philippe Antoine 844f2effa3 rust: format modbus files
Ticket: 3836
1 month ago
Philippe Antoine db019ebefe rust: format ike files
Ticket: 3836
1 month ago
jason taylor da827322ba doc: minor ebpf doc update for fedora/rhel
Signed-off-by: jason taylor <jtfas90@proton.me>
1 month ago
Victor Julien 54322f38f8 common: fix cppcheck syntax error 2 months ago
Victor Julien bd198231a0 util/port-interval-tree: suppress cppcheck false positives 2 months ago
Victor Julien f138a64ad7 debug/validate: remove redundant checks
Pointed out by cppcheck.
2 months ago
Victor Julien 9869e9b9f5 detect/port: workaround cppcheck warning 2 months ago
Victor Julien 0af57040d9 detect/address: workaround cppcheck warning 2 months ago
Philippe Antoine bcc1e6ae32 rust: format http2 files
Ticket: 3836
2 months ago
Jeff Lucovsky cc6fbcd5dd etc/schema: add missing ftp fields
Add ftp detect keywords to metadata

Issue: 7502, 7503, 7507, 7505, 7508, 7506
2 months ago
Philippe Antoine a35760db9b rust: enforce already formatted directories in CI 2 months ago
Philippe Antoine 1070e733d8 rust: format websocket files
Ticket: 3836
2 months ago
Philippe Antoine 89e5332d88 rust: format utils files
Ticket: 3836
2 months ago
Philippe Antoine edf29b0000 rust: format ssh files
Ticket: 3836
2 months ago
Philippe Antoine fe27a2159c rust: format rfb files
Ticket: 3836
2 months ago
Philippe Antoine 5cca346f16 rust: format quic files
Ticket: 3836
2 months ago
Philippe Antoine 415360d9e8 rust: format ntp files
Ticket: 3836
2 months ago
Philippe Antoine fa864f9c2f rust: format mime files
Ticket: 3836
2 months ago
Philippe Antoine 2cfcaec1b0 rust: format ldap files
Ticket: 3836
2 months ago
Philippe Antoine 64e7c671cc rust: format ftp files
Ticket: 3836
2 months ago
Philippe Antoine f217e249cb rust: format ffi files
Ticket: 3836
2 months ago
Philippe Antoine f7c14809f4 rust: format enip files
Ticket: 3836
2 months ago
Philippe Antoine e526eb8e2b rust: format bittorrent_dht files
Ticket: 3836
2 months ago
Philippe Antoine f5ac0e201c rust: format asn1 files
Ticket: 3836
2 months ago
Philippe Antoine 1ced97bdbb rust: format applayertemplate files
Ticket: 3836
2 months ago
Sergey Pinaev d55114e6d7 detect-engine-analyzer: remove unnecessary check
Always make sure, that smd is not NULL, as we dereference it a few
lines below and base64_data for instance is forbidden as a fast_pattern

Ticket: 8504
2 months ago
Promise Charles 5c9602bcf2 suricata: add error about missing runmode
If a runmode is missing but other params are passed on the commandline,
issue an error.

Ticket: #5711

Signed-off-by: Promise Charles <descencybobby@gmail.com>
2 months ago
Jason Ish 57f76a2462 github-ci: update Fedora builds to Fedora 44 2 months ago
Philippe Antoine 87db89ea4e fuzz: extend fuzz_siginit to do engine-rule-analysis 2 months ago
Philippe Antoine efe3b16aac rust: feature debug in main crate enables feature debug in ffi 2 months ago
Philippe Antoine 5db471500c rust/ffi: remove altemplate plugin last dependency on suricata crate
Ticket: 7666
2 months ago
Philippe Antoine b90adcc2bb rust/ffi: move AppLayerTxData to ffi
Ticket: 7666
2 months ago
Philippe Antoine bce88dd83f rust: build depends on ffi/Cargo.toml.in 2 months ago
Philippe Antoine 0773fba5fd rust/ffi: move txdata flags to ffi
Ticket: 7666
2 months ago
Philippe Antoine 2525ea2e37 rust/ffi: move direction to ffi
Ticket: 7666
2 months ago
Philippe Antoine 5440e41314 rust/ffi: move debug validations macros to ffi
Ticket: 7666
2 months ago
Philippe Antoine 6dff07b631 detect/lua: remove unused macros 2 months ago