68 Commits (5c5d8f8a5dde6b8af59bb62e8a6cff53fc24d2c7)

Author	SHA1	Message	Date
Anoop Saldanha	5c5d8f8a5d	indentation fix in DCERPCParseBINDCTXItem, following changes from the previous patch	16 years ago
Anoop Saldanha	38e26e5186	modify the dce parser to accept context ids that start with a non-zero value	16 years ago
Anoop Saldanha	d57428471c	fix endianness handling for bindacksecondaryaddrlen	16 years ago
Anoop Saldanha	ba9355d688	Flag if we see a fragged pdu. Do not reset dce stub buffer, if we are dealing with fragmented pdus(holds good only for first frag request pdus). Also reset the dce state vars on seeing an invalid PDU. Some minor fixes with respect to endianess as well.	16 years ago
Anoop Saldanha	00f21252fa	support fragmented pdus in dce + unittest	16 years ago
Anoop Saldanha	ebc1f62050	some additional indentation changes in DCERPCParser	16 years ago
Anoop Saldanha	c2bc8ca252	fix mem leak in tailq that holds dce uuids	16 years ago
Anoop Saldanha	1c443677b2	fix indentation in DCERPCParser	16 years ago
Victor Julien	f081577fe4	Revert yesterday's dcerpc commits as there were to many corner cases for it to go into 1.0.1.	16 years ago
Anoop Saldanha	526a782002	temporary fix for dcerpc so that we don't loop endlessly, till we cover all cases with fragged pdus	16 years ago
Anoop Saldanha	361cf14f50	fix endless loop. Change dce parser to accept ctx ids that always start with a ctx with a 0 ctx id	16 years ago
Anoop Saldanha	8c774a1e2a	fix 206. Keep a count of uuids that don't belong to the first frag. Change dce_iface to match against uuids based on any_frag setting	16 years ago
Anoop Saldanha	52bb4c0670	fix endless loop in dce parser. fix parsing error of secondaryaddrlen for bindack	16 years ago
Anoop Saldanha	cda1efff29	fix mem leak in tailq that holds dce uuids	16 years ago
Anoop Saldanha	154a48fada	parse fragmented dce rpc headers correctly. Also some other minor fixes	16 years ago
Anoop Saldanha	c7fdc5ebda	do not reset dce stub buffer, if we are dealing with fragmented pdus(holds good only for first frag request pdus)	16 years ago
Anoop Saldanha	73241fc86c	support fragmented puds in dce + unittest	16 years ago
Anoop Saldanha	3ae45e5bbc	fix indentation in DCERPCParser	16 years ago
Kirby Kuehl	e8ecc94d6a	fix multiple dcerpc fragments in one packet	16 years ago
Anoop Saldanha	b7a57c5210	fix setting the right value for parsed bytes in case of fragmented BIND dce PDUs	16 years ago
Kirby Kuehl	18840bd96e	properly handle bytecount of 0	16 years ago
Victor Julien	718fecb6fc	Better handle low memory conditions.	16 years ago
William Metcalf	0e4235cc94	FLOW_DESTROY added to clean-up UT's that init flow	16 years ago
Anoop Saldanha	015385c6bd	changes to the dce parser stub data processed var. changed to stub data fresh var to indicate if the stub is fresh or not	16 years ago
Anoop Saldanha	98433f407c	dce rpc stub data held in separate buffers for request and response pdus	16 years ago
Pablo Rincon	8cc525c939	UDP support at AppLayer message handling	16 years ago
William Metcalf	cc76aa4bc6	properly init flows inside of unit-tests caused lock-up when falling back to using mutex locks	16 years ago
Victor Julien	70b32f7380	First stab at creating a stateful detection engine. ... Stateful detection for app layer detection keywords, except uricontent. Stores it's partial results in the flow structure. Other modifications: - Generalize transaction tracking, logging and inspection. - Adapt http and dcerpc to use the new transaction handling. - Stream engine now always notifies app layer of a stream eof. This commit fixes bug #124.	16 years ago
root	73c6fb16ba	Return 0 instead of -1 when SMB and DCERPC encounter non fatal errors to clean up errors emitted in AppLayerParse.	16 years ago
William Metcalf	ce01927515	Import of GPLv2 Header 050410	16 years ago
Gurvinder Singh	074b896879	fixed typo in dcerpc (bug 137)	17 years ago
Victor Julien	e6ba571c0b	Rename structures that don't adhere to our naming conventions.	17 years ago
Victor Julien	449205cfeb	Remove wrong copyright info, cleanup headers.	17 years ago
Kirby Kuehl	afb08d388d	make sure we have input_len	17 years ago
Pablo Rincon	25a3a5c6d8	Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.	17 years ago
Kirby Kuehl	565eab1f54	fix bug88	17 years ago
Kirby Kuehl	bea30a6db6	bug 88 validate dcerpc header	17 years ago
Victor Julien	b99e10236c	Fix a endless loop condition in the smb parser and make dcerpc parser more quiet.	17 years ago
Kirby Kuehl	4b05bc281d	fix padding bug	17 years ago
Kirby Kuehl	4dd2f621ac	smb writeandx dcerpc over smb	17 years ago
Victor Julien	6a53ab9c5a	Stream engine memory handling update ... The stream engine memory handling needed updating as it didn't scale. Changes: - pools can now be initialized to size 0, meaning unlimited - stream engine uses a memcap setting. Sessions, segments and aldata is part of this, app layer state isn't. - memory is accounted using a global int that is spinlocked. - a counter for sessions that have not been picked up because of memcap was added. - all reassembly errors are converted to debug msgs.	17 years ago
Kirby Kuehl	298bf4cc88	dcerpc over smb for transact	17 years ago
Kirby Kuehl	8efbe491a1	dcerpc refactoring	17 years ago
Kirby Kuehl	008de4321b	refactor dcerpc in prep for dcerpc over smb	17 years ago
Kirby Kuehl	f15ca04889	fix padding calculation and stubdata parser for dcerpc	17 years ago
Victor Julien	c352bff6fb	Remove unused conditional locking code from the app layer parsing code.	17 years ago
Kirby Kuehl	08915649f3	fix double free	17 years ago
Victor Julien	0d34990d7f	Add OpenBSD's strlcpy and strlcat and replace all strcat/strcpy/strncat/strncpy by those calls.	17 years ago
Pablo Rincon	705471e4ee	Adding single pattern matcher algorithms. If you cannot store a context for the patterns, use SpmSearch() macro. Adding unittests and stats	17 years ago
Victor Julien	34e11e4784	Fixup unused variable compiler warning in the dce code.	17 years ago