5096 Commits (4922cd2d3699a2dcb472adee7569894105f14083)

 

All Branches   

Search

Author	SHA1	Message	Date
Victor Julien	25636597af	Fix live rule reload confusing delayed detect ... Fixes bug 1023 and the previous attempt to fix it.	11 years ago
Victor Julien	5906eeb8c8	detect: don't do rule reload during delayed detect ... When both rule reloads and delayed detect are enabled, make sure we don't trigger a reload during delayed detect initialization. Bug #1023.	11 years ago
Victor Julien	7b687da726	profiling: add tracking of missing keywords	11 years ago
Victor Julien	5686c673ec	profiling: per buffer profiling	11 years ago
Victor Julien	9419b9cbb6	detect: add tostring function for DETECT_SM_LIST_ enum.	11 years ago
Victor Julien	97bfcac444	profiling: introduce per keyword profiling ... Initial version of per keyword profiling. Prints stats about how ofter a keyword was checked and what the costs were.	11 years ago
Victor Julien	210eede033	content inspection: introduce no_match label	11 years ago
Victor Julien	e416b2cdfb	stream: fix IPv6 pseudo packet setup ... Bug #1022: IPv6 pseudo packet setup using reverse logic of IPv4.	11 years ago
Victor Julien	ef17b7b9f4	stream: reduce scope of StreamTcpPseudoPacketSetupHeader	11 years ago
Victor Julien	ce4d262c7d	IPv4 decoder compile warning fix	11 years ago
Victor Julien	07c97412f3	DNS: fix response name length logic ... In some cases where the length would be calculated as 0 we'd loop until we'd hit our loop limit. Update name logic everywhere.	11 years ago
Anoop Saldanha	95ed53c590	Fix for #1003. ... Now that we call stream reassembly directly from proto detection, we will need to check if reassembly has been disabled inside the stream reassembly callback. This prevents any calls to bypass and re-enter proto detection, despite having reassembly disabled.	11 years ago
Victor Julien	7ebd1e6433	Counters: fix delayed-detect counter registration ... Make sure we register the detect.alerts counter before packet runtime starts even in delayed detect mode. The registration of new counters at packet runtime is not supported by the counters api and might lead to crashes as there is no proper locking to allow for this operation. This changes how delayed detect works a bit. Now we call the ThreadInit callback twice. The first call will only register the counter. The 2nd call will do all the other setup. This way the counter is registered before the counters api starts operating in the packet runtime. Fixes the segv reported in ticket #1018.	12 years ago
Victor Julien	9e88c51e24	Counters: move perf critical var to the top of the SCPerfContext struct	12 years ago
Victor Julien	ed03196a20	Counter: fix accidental logic change	12 years ago
Victor Julien	45dfecafd4	Counters: remove unused updated field	12 years ago
Victor Julien	49087f21e4	Optimizations to reduce branch misses	12 years ago
Victor Julien	64f5129f12	Counters: remove unused tm_name comparison loops	12 years ago
Victor Julien	76c305c128	Counters: fix unix socket	12 years ago
Victor Julien	25aeeebdf7	Counters: merge SCPerfCounterName into SCPerfCounter as there was a 1 on 1 mapping	12 years ago
Victor Julien	3445d17ae5	Counters: remove SCPerfCounterValue struct as we no longer support multiple data types	12 years ago
Victor Julien	677cd03e52	Counters: more unused code removal	12 years ago
Victor Julien	8d4a61a789	Counters: remove unused code	12 years ago
Victor Julien	698ff4e4aa	Counters: remove all unused parts of the API	12 years ago
Eric Leblond	79fcf1378a	Use unlikely in malloc failure test. ... This patch is a result of applying the following coccinelle transformation to suricata sources: @istested@ identifier x; statement S1; identifier func =~ "(SCMalloc|SCStrdup|SCCalloc|SCMallocAligned|SCRealloc)"; @@ x = func(...) ... when != x - if (x == NULL) S1 + if (unlikely(x == NULL)) S1	12 years ago
Eric Leblond	c8b3f4418a	af-packet: init correctly the config structure ... This fix a crash when interface is not defined in YAML.	12 years ago
Eric Leblond	eea760de3c	decode: fix typo in comment	12 years ago
Anoop Saldanha	167597cfb0	Update ftp parser protocol detection to use lowercase patterns.	12 years ago
Anoop Saldanha	36bd444406	Introduce new API to allow case insensitive protocol detection patterns.	12 years ago
Anoop Saldanha	90827ea990	Remove the obsolete DetectFtpBounceMatch() function.	12 years ago
Ken Steele	9fce4da84d	Spell fixes in threads-arch-tile.h	12 years ago
Anoop Saldanha	e8cd15c823	Support for feature #983. ... Provide support for icmvp4 and icmpv6 as well. You can now use alert icmpv4 and alert icmpv6 as well, apart from the existing alert icmp, which created a rule that applied to both icmpv4 and icmpv6.	12 years ago
Nelson Escobar	cf9f1e3191	Build cuda kernel for capability 3.5 devices.	12 years ago
Victor Julien	3f8b9dde04	Dead code removal	12 years ago
Victor Julien	84af1ee277	storage: fix and small optimization	12 years ago
Victor Julien	77ae8b8878	flow: set correct family in FLOW_COPY_IPV6_ADDR_TO_PACKET	12 years ago
Victor Julien	2a4f821284	Fix 2 unittests	12 years ago
Victor Julien	8516000208	Minor code cleanup/fixes to fast pattern unittests ... cppcheck: [detect-fast-pattern.c:1183] -> [detect-fast-pattern.c:1183]: (style) Same expression on both sides of '&'. [detect-fast-pattern.c:1217] -> [detect-fast-pattern.c:1217]: (style) Same expression on both sides of '&'. [detect-fast-pattern.c:1449] -> [detect-fast-pattern.c:1449]: (style) Same expression on both sides of '&'. [detect-fast-pattern.c:1479] -> [detect-fast-pattern.c:1479]: (style) Same expression on both sides of '&'. [detect-fast-pattern.c:1509] -> [detect-fast-pattern.c:1509]: (style) Same expression on both sides of '&'. [detect-fast-pattern.c:1539] -> [detect-fast-pattern.c:1539]: (style) Same expression on both sides of '&'. [detect-fast-pattern.c:1570] -> [detect-fast-pattern.c:1570]: (style) Same expression on both sides of '&'. [detect-fast-pattern.c:1686] -> [detect-fast-pattern.c:1686]: (style) Same expression on both sides of '&'. [detect-fast-pattern.c:1716] -> [detect-fast-pattern.c:1716]: (style) Same expression on both sides of '&'. [detect-fast-pattern.c:1746] -> [detect-fast-pattern.c:1746]: (style) Same expression on both sides of '&'. [detect-fast-pattern.c:1776] -> [detect-fast-pattern.c:1776]: (style) Same expression on both sides of '&'. [detect-fast-pattern.c:1806] -> [detect-fast-pattern.c:1806]: (style) Same expression on both sides of '&'. [detect-fast-pattern.c:1836] -> [detect-fast-pattern.c:1836]: (style) Same expression on both sides of '&'. [detect-fast-pattern.c:1866] -> [detect-fast-pattern.c:1866]: (style) Same expression on both sides of '&'. [detect-fast-pattern.c:1896] -> [detect-fast-pattern.c:1896]: (style) Same expression on both sides of '&'. [detect-fast-pattern.c:1926] -> [detect-fast-pattern.c:1926]: (style) Same expression on both sides of '&'. [detect-fast-pattern.c:2022] -> [detect-fast-pattern.c:2022]: (style) Same expression on both sides of '&'.	12 years ago
Victor Julien	af311aee4e	Minor fix for detection engine setup error check ... cppcheck said: [detect-engine-mpm.c:2075] -> [detect-engine-mpm.c:2075]: (style) Same expression on both sides of '||'.	12 years ago
Victor Julien	974e86e450	Minor pppoe cleanup ... cppcheck said: [decode-pppoe.c:58] -> [decode-pppoe.c:60]: (performance, inconclusive) Variable 'pppoedh' is reassigned a value before the old one has been used if variable is no semaphore variable.	12 years ago
Victor Julien	209946b07c	Fix broken check in stream.max-synack-queued parsing (coverity 1038103)	12 years ago
Victor Julien	bec59f426e	Fix sanity check in AppInspectionEngine registration code	12 years ago
Jason Ish	2953b3f640	Feature #901 - VLAN defrag support. ... Take VLAN IDs into account when re-assembling fragments. Prevents fragments that would otherwise match, but on different VLANs from being reassembled with each other.	12 years ago
Ken Steele	2d3dc23026	Correct indentation and wording of comments.	12 years ago
Ken Steele	a63b87df9e	Clean up function syntax ... Remove space before ( in function names. Put { on new line. Make tests static.	12 years ago
Anoop Saldanha	619414c59e	Add a /* fall through */ comment for all switch case fall throughs. ... This should server as a message to coverity that the fall through is intentional.	12 years ago
Victor Julien	b6efaeb0c0	storage: fix freeing storage ... Fix freeing storage. Also add workaround for unittests that don't (fully) setup storage. Bug #991.	12 years ago
Victor Julien	37669bfdd2	threshold: register threshold host storage. Related to bug #991	12 years ago
Victor Julien	1b11165864	Reset both sides of the de_state on rule reload. Bug #998.	12 years ago
Victor Julien	74d8d95f83	Don't initialize threshold before rules on delayed detect. Bug #999.	12 years ago