32 Commits (60db5e981cd4a6680022de523bfd03f651e61764)

Author	SHA1	Message	Date
Philippe Antoine	668501c225	rust: remove unused	3 years ago
Jason Ish	0e55307c1d	app-layer: remove APP_LAYER_PARSER_OPT_UNIDIR_TXS ... This flag is no longer needed as a parser can now create a transaction as unidirectional. Setting this flag also doesn't make sense on parsers that may have request/reply and some unidirectional messaging.	4 years ago
Jason Ish	8ef410e284	app-layer: add direction to transaction creation where needed ... Build on Eric's but set the direction on transaction creation when needed. I think this makes it a little more clear, and easier to document when creating single direction transactions. This also somewhat abstracts the inner-workings of a directional transaction from the implementation. Ticket: #4759	4 years ago
Eric Leblond	19174de4f3	quic: add TX orientation ... Set no inspection in the opposite side of the transaction. Ticket: #5799	4 years ago
Jason Ish	d4418034d1	rust: update aes and aes-gcm crates ... Addresses RUSTSEC-2021-0059, RUSTSEC-2021-0060.	4 years ago
Jason Ish	f15ffbc869	rust/clippy: fix lint: single_match ... Allow this lint in some cases where a match statement adds clarity.	4 years ago
Philippe Antoine	e1ee401a12	quic: use VecDeque ... Ticket: #5637	4 years ago
Jason Ish	7ba1d3e300	rust: fix clippy lints for clippy::nonminimal_bool	4 years ago
Jason Ish	572505870a	rust: fix clippy lints for clippy::collapsible_else_if	4 years ago
Jason Ish	565da0d0af	rust: fix clippy lints for clippy::redundant_field_names	4 years ago
Jason Ish	f342d4aacd	rust: fix clippy lints for clippy::len_zero	4 years ago
Jason Ish	29a4a7fddc	rust: fix clippy lints for clippy::assign_op_pattern	4 years ago
Jason Ish	c4034dafa1	rust: fix clippy lints for clippy::derive_partial_eq_without_eq	4 years ago
Jason Ish	85cfa7254b	rust: fix clippy lint for single_char_add_str ... Idiomatic cleanup and a fix automatically done by `cargo clippy --fix`.	4 years ago
Jason Ish	c5b26e2043	rust: fix clippy ling for needless borrows ... Cleanup needless borrows found by clippy. This fix done automatically by `cargo clippy --fix`.	4 years ago
Victor Julien	79499e4769	app-layer: move files into transactions ... Update APIs to store files in transactions instead of the per flow state. Goal is to avoid the overhead of matching up files and transactions in cases where there are many of both. Update all protocol implementations to support this. Update file logging logic to account for having files in transactions. Instead of it acting separately on file containers, it is now tied into the transaction logging. Update the filestore keyword to consider a match if filestore output not enabled.	4 years ago
Victor Julien	c27df6304d	app-layer: introduce common AppLayerStateData API ... Add per state structure for storing flags and other variables.	4 years ago
Philippe Antoine	f3b6fd3329	quic: update to nom7	4 years ago
Philippe Antoine	95125811b8	quic: reassemble crypto frames and parse it	4 years ago
Philippe Antoine	f242fb7f22	quic: events and rules on them	4 years ago
Philippe Antoine	b9c1d9e86b	quic: parse gquic version Q039 ... Ticket: #5166	4 years ago
Philippe Antoine	018fef5ef8	quic: ja3 computation and logging and detection ... Logging as is done in TLS. Detection using the generic generic ja3.string keyword Ticket: #5143	4 years ago
Philippe Antoine	c6cf61a39b	quic: complete parsing of initial for non gquic ... The format of initial packet for quic ietf, ie quic v1, is described in rfc 9000, section 17.2.2 Parse more frames and logs interesting extensions from crypto frame Do not try to parse encrypted data, ie after we have seen a crypto frame in each direction. Use sni from crypto frame with tls for detection already implemented Ticket: #4967	4 years ago
Philippe Antoine	7044131c39	quic: rustfmt	4 years ago
Philippe Antoine	11e0eb9c89	quic: do not log empty cyu array ... Ticket: #5167	4 years ago
Victor Julien	e02b52c895	quic: add quic.ua for matching user agent	5 years ago
Victor Julien	4c13b73c4d	quic: log user agent when available	5 years ago
Victor Julien	da8b024b99	detect/quic: add quic.sni sticky buffer	5 years ago
Victor Julien	7b836af1b2	quic: log sni; reduce number of transactions ... Only create transactions for long headers. Store SNI in tx, log it.	5 years ago
Victor Julien	ccab28aad3	quic: log version as string ... Log as Q043, Q044, Q045, Q046. If the version is not supported/recognized, log the 4 bytes as hex. Only log for txs based on long headers.	5 years ago
Victor Julien	24a21af4ab	quic: redo quic.version; parser cleanups ... Reimplement quic.version as sticky buffer. Removed unused parts of the parser. Set unidirectional tx flag to fix double matching.	5 years ago
Emmanuel Thompson	7e51987263	quic: Add QUIC App Layer ... Parses quic and logs a CYU hash for gquic frames	5 years ago