8999 Commits (50370511615574ec09be0e1b6be465c0e3dc2b7f)

 

All Branches   

Search

Author	SHA1	Message	Date
Victor Julien	bf08285602	smb2: parse async records	9 years ago
Victor Julien	5c26020714	smb2: add ioctl transactions to log the funcs	9 years ago
Victor Julien	75265ec376	smb2: map ioctl funcs to names ... List is based on Wireshark's list.	9 years ago
Victor Julien	7cd66516f0	smb: use formal MS names for disposition	9 years ago
Victor Julien	f7ed749d4f	smb: disable debug output	9 years ago
Victor Julien	eed492547c	smb1: extract server guid from negotiate	9 years ago
Victor Julien	6d56edc3de	smb2: log client and server guid from negotiate	9 years ago
Victor Julien	c56f5e11ca	smb2: log share type	9 years ago
Victor Julien	d75ebdb981	smb: log create empty filename as '<share_root>' like Bro does	9 years ago
Victor Julien	fcbeab70a4	smb1: log create 'service' fields	9 years ago
Victor Julien	90e2abaac4	smb1: use generic string parsing for trans	9 years ago
Victor Julien	76917a8732	smb1: generic smb string parse func	9 years ago
Victor Julien	668c747aee	smb1: more exact tree connect record parsing	9 years ago
Victor Julien	0ed00cf104	smb: move common parsing funcs into own file	9 years ago
Victor Julien	1c701dc50e	smb: make string parsing functions public	9 years ago
Victor Julien	1d4aac1d4d	smb1: set event on empty/malformed dialect	9 years ago
Victor Julien	c91242e71c	smb: rename file to filename in output	9 years ago
Victor Julien	caf29e92b3	smb1: parse and log timestamps in CREATE	9 years ago
Victor Julien	0e05ef7369	smb2: parse and log timestamps in CREATE	9 years ago
Victor Julien	28f16e38ac	smb1: disable 'generic tx's for common commands ... Don't create a generic TX for each READ, WRITE, TRANS, TRANS2, except if they cause events to trigger.	9 years ago
Victor Julien	78cd92a933	smb: generic event per trans/read/write for tx events	9 years ago
Victor Julien	05992f1772	smb: fix event handling when no tx is available	9 years ago
Victor Julien	be615c9fbc	smb: small cleanups, fixes and optimizations	9 years ago
Victor Julien	dab055d8c8	smb: update to der-parser 0.5.1	9 years ago
Victor Julien	0d69e7b8c2	smb: remove unused dialects from state	9 years ago
Victor Julien	ad1bc7f473	smb1: minor debug improvment	9 years ago
Victor Julien	a44504a1bf	smb: redo gap catch up handling	9 years ago
Victor Julien	7114d5d25b	smb1: parser cleanups	9 years ago
Victor Julien	d9e43d3e63	smb: cleaner server component parsing	9 years ago
Victor Julien	ecbf10da70	smb2: improve write error handling	9 years ago
Victor Julien	b34392051d	smb3: parse transform records	9 years ago
Victor Julien	894a73ee06	smb2: add missing commands and improve ioctl err handling	9 years ago
Victor Julien	170edf7c44	smb1: improve error handling	9 years ago
Victor Julien	7ceb67138f	smb: add status	9 years ago
Victor Julien	98b926bf72	smb1: implement WRITE_AND_CLOSE	9 years ago
Victor Julien	595557eb8d	smb1: locking andx may have no response	9 years ago
Victor Julien	7dff9b9969	smb/nbss: work around bad traffic	9 years ago
Victor Julien	8bef120898	smb: session setup improvements ... Improve ntlmssp version extraction and logging, make its data structures optional. Extract native os/lm from smb1 ssn setup. Move session setup handling into their own files. Only log auth data for the session setup tx.	9 years ago
Victor Julien	75d7c9d64a	rust/smb: initial support ... Implement SMB app-layer parser for SMB1/2/3. Features: - file extraction - eve logging - existing dce keyword support - smb_share/smb_named_pipe keyword support (stickybuffers) - auth meta data extraction (ntlmssp, kerberos5)	9 years ago
Victor Julien	50a182194a	eve: log pcap filename	9 years ago
Victor Julien	19988310d1	detect: fix tx iterator logic in detect ... The 'tx_id' variable was used to be passed into the IterFunc as a minumum tx to return. The IterFunc could then return either the tx for that id, or a later one if that turned out to be the first available tx. The tx_id however, was still used for some things as if it was the current tx id. Most importantly for setting the tx id for alert ammending. So this could lead to alerts with missing or wrong applayer records.	9 years ago
Victor Julien	fec5997d1d	mingw: fix compile error	9 years ago
Richard Sailer	748fda1966	output/lua: better lua output setup error handling ... If suricata was started with --init-errors-fatal and an error occured during setup of lua output (like if lua scripts configured in the conf file don't exist or are not readable) suricata continued, which did not reflect "init errors fatal" very well. This fix makes the suricata initialization abort and send an error message in such cases. For details see: https://redmine.openinfosecfoundation.org/issues/1503	9 years ago
Richard Sailer	7910b6689e	output/lua: remove unnecessary detect.h include ... output-lua.c contained an include of detect.h. Since we don't (and shouldn't) call any functions from detect.c in output-lua.c and such coupling is generally unwanted this patch removes that include.	9 years ago
Pierre Chifflier	b69acaadf5	Rust: add 'debug' feature ... The 'debug' feature is enabled if suricata was configured with the --enabled-debug' flag. If enabled, the SCLogDebug format and calls the logging function as usual. Otherwise, this macro is a no-op (similarly to the C code).	9 years ago
Victor Julien	04e87e1a9f	profiling: suppress debug statements	9 years ago
Thomas Andrejak	eb12001c82	prelude: add protocol information through JSON	9 years ago
Daniel Humphries	6162ef57bd	unified2: fix xff extra-data output (Bug #2305) ... In extra-data mode, suricata does not output xff data without undocumented conditions (including enabling packet output). This behaviour has been fixed to remove the hidden requirements. Fix included removing previous xff data output implementation and adding a new function for outputting xff that is called after outputting each event. IPv6 XFF entries were also being recorded incorrectly as if they were IPv4 and this has been fixed.	9 years ago
Pascal Delalande	2e5b293afb	doc: update eve json output for DNS and HTTP	9 years ago
Victor Julien	12c350f77d	der/afl: free data during fuzzing	9 years ago