7721 Commits (5ee68ca2b2e293c4711a5bcf6d6d278a09722796)

 

All Branches   

Search

Author	SHA1	Message	Date
Victor Julien	5ee68ca2b2	http_header: remove old files	8 years ago
Victor Julien	2bb0cae05a	http_header: move all code into keyword files	8 years ago
Victor Julien	aaeeae0722	detect: http_header_names sticky buffer keyword ... A sticky buffer that allows content inspection on a contructed buffer of HTTP header names. The buffer starts with \r\n, the names are separated by \r\n and the end of the buffer contains an extra \r\n. E.g. \r\nHost\r\nUser-Agent\r\n\r\n The leading \r\n is to make sure one can match on a full name in all cases.	8 years ago
Victor Julien	cf9678d926	detect: global registery for keyword thread data ... Some keywords need a scratch space where they can do store the results of expensive operations that remain valid for the time of a packets journey through the detection engine. An example is the reconstructed 'http_header' field, that is needed in MPM, and then for each rule that manually inspects it. Storing this data in the flow is a waste, and reconstructing multiple times on demand as well. This API allows for registering a keyword with an init and free function. It it mean to be used an initialization time, when the keyword is registered.	8 years ago
Victor Julien	75907fce06	profiling: output all sort options for rules ... Limit the default number of sids to 10.	8 years ago
Victor Julien	7d8a5a75ef	profiling: honor limit in json rule output	8 years ago
Victor Julien	a9a228a289	profiling: fix keyword profiling	8 years ago
Victor Julien	a1465bc4fa	detect-engine-mpm: api cleanup	8 years ago
Victor Julien	8bd1422948	detect: detect engine registration cleanup	8 years ago
Victor Julien	49fbd28ceb	detect: cleanup built-in list id's	8 years ago
Victor Julien	40851eecf0	template: dynamic buffer	8 years ago
Victor Julien	815120896b	app-layer-events: dynamic list	8 years ago
Victor Julien	b68343e372	files: use dynamic list	8 years ago
Victor Julien	e4bfdd53c2	cip/enip: dynamic buffer	8 years ago
Victor Julien	f2393c1ae0	modbus: dynamic buffer	8 years ago
Victor Julien	cfdd934aba	dnp3: dynamic buffers/lists	8 years ago
Victor Julien	9ba386a141	tls: dynamic buffers	8 years ago
Victor Julien	d9b3ae6cd6	dns: use dynamic buffers	8 years ago
Victor Julien	d2f77978ec	detect-parse: content modifier cleanup	8 years ago
Victor Julien	6f867c3c73	http_raw_uri: dynamic buffer	8 years ago
Victor Julien	ee55aefa1c	http_client_body: dynamic buffer	8 years ago
Victor Julien	e7d5e845c7	http_header / http_raw_header: dynamic buffers	8 years ago
Victor Julien	b694d96e22	http_stat_msg: dynamic buffer	8 years ago
Victor Julien	7e3ab4f5ea	http_stat_code: dynamic buffer	8 years ago
Victor Julien	128b59d4f6	http_raw_host: dynamic buffer	8 years ago
Victor Julien	296c275e23	http_host: dynamic buffer	8 years ago
Victor Julien	67b7d9734e	http_cookie: dynamic buffer	8 years ago
Victor Julien	54604c7bf2	http_user_agent: dynamic buffer	8 years ago
Victor Julien	9262fa3dcf	http_response_line: dynamic buffer	8 years ago
Victor Julien	6346a074a7	http_uri: dynamic buffer ... Clean up tests	8 years ago
Victor Julien	e34102d67a	http_method: make list dynamic	8 years ago
Victor Julien	6bd37611ee	file_data: dynamic buffer	8 years ago
Victor Julien	7052f9b933	http_request_line: dynamic buffer	8 years ago
Victor Julien	779d40cedf	detect: remove hardcoded sm_list logic from setup ... Introduce utility functions to aid this.	8 years ago
Victor Julien	04592efb76	detect: buffer type API ... To replace the hardcoded SigMatch list id's, use this API to register and query lists by name. Also allow for registering descriptions and whether mpm is supported. Registration is only allowed at startup.	8 years ago
Victor Julien	58e1180efe	detect: inspect engine setup cleanup	8 years ago
Victor Julien	debc1a6334	detect: dce test fixes and improvements	8 years ago
Victor Julien	a2b521b7fa	detect-csum: redo tests	8 years ago
Victor Julien	f370e88135	detect: move init only Signature members to init_data	8 years ago
Victor Julien	0a5ae415b8	detect: shrink Signature::sm_arrays ... Signature::sm_arrays now only contains 'built-in' lists, and so is sized appropriately.	8 years ago
Victor Julien	4978a7a133	detect: reorganize id's in prep of dynamic lists	8 years ago
Victor Julien	59303d1fbb	threshold: fix and redo tests	8 years ago
Victor Julien	6f7e4adbe8	detect: improve memory handling & comments	8 years ago
Victor Julien	8edc954e82	detect: get rid of Signature::sm_lists ... Instead use the lists in init_data during setup and the SigMatchData arrays during runtime.	8 years ago
Victor Julien	f281481b67	detect: use detect list passed to generic funcs ... Until now the GenericList users used hardcoded list id's.	8 years ago
Victor Julien	bd456076a8	detect: pass SigMatchData to inspect functions	8 years ago
Victor Julien	a0fe67a3c0	detect: template list in engine	8 years ago
Victor Julien	da7c816c7c	detect: enip/cip list in engine	8 years ago
Victor Julien	e94a7bddb3	detect: modbus list in engine	8 years ago
Victor Julien	7f7d4296da	detect: file list in engine	8 years ago