suricata

Commit Graph

Author	SHA1	Message	Date
jason taylor	64760e2e75	doc: update http.response_line keyword information Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	566bc0d39c	doc: update http.stat_msg keyword information Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	271321249f	doc: update http.stat_code keyword information Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	71d8488cb5	doc: update http.request_body keyword information Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	c2783e9391	doc: update http.header_names keyword information Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	5eadbc2ff0	doc: update http.start keyword information Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	7e65554462	doc: update http.referer keyword information Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	876dfb99ca	doc: update http.content_len keyword information Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	8ff06c1bc0	doc: update http.content_type keyword information Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	b2854486dd	doc: update http.connection keyword information Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	75436dff9c	doc: update http.accept_lang keyword information Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	f6375e487e	doc: update http.accept_enc keyword information Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	7e3288f5a7	doc: update http keyword normalization notes Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	9e87d89d2e	doc: update http.accept keyword information Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	8307168ae7	doc: update http.user_agent keyword Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	75c4cdfa1c	doc: update http.cookie keyword information Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	ebd5cd61c2	detect: minor http.cookie keyword typo fix Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	7a28874c8d	doc: update http.header keyword information Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	b3af723486	doc: remove legacy description/duplicated data Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	292b3eb9b3	doc: update http.request_line keyword information Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	c7f351bd6e	doc: update http.protocol keyword documentation Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	2d0ceedeba	doc: update urilen keyword documentation ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	ef118aa582	doc: remove legacy uricontent information ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	96e8c10276	doc: update http.uri and http.uri.raw keywords ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	bf192926a8	doc: update http.method keyword ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	0cce5ba447	doc: add http keyword links ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	fd46175203	doc: update http primer information ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	54fd35c5b4	doc: remove legacy tables and image references ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
Victor Julien	34f53f85bc	systemd: reimplement sd_notify logic using UNIX socket One of the lessons of the XZ backdoor story was that just linking to libsystemd to call sd_notify is discouraged by the systemd project: Lennart Poettering: "PSA: In context of the xzpocalypse we now added an example reimplementation of sd_notify() to our man page: https://www.freedesktop.org/software/systemd/man/devel/sd_notify.html#Notes It's pretty comprehensive (i.e. uses it for reload notification too), but still relatively short. In the past, I have been telling anyone who wanted to listen that if all you want is sd_notify() then don't bother linking to libsystemd, since the protocol is stable and should be considered the API, not our C wrapper around it. After all, the protocol is so trivial" From: https://mastodon.social/@pid_eins/112202687764571433 This commit takes the example code and uses it to reimplement the notify logic. The code is enabled if Linux is detected in configure. Since the code won't do anything if the NOTIFY_SOCKET env var isn't set, this should also work fine on systems w/o systemd. Ticket: #6913.	1 year ago
Daniel Olatunji	6d40517502	detect/analyzer: add more details for the tcp ack keyword Issue: 6354 Added the DETECT_ACK case to detect-engine-analyzer.c	1 year ago
Victor Julien	561b81dd9e	decode: don't clear computed csums twice Already done in a generic way by PACKET_RESET_CHECKSUMS.	1 year ago
Victor Julien	40afbf5b09	decode/ipv4: remove unused field	1 year ago
Victor Julien	3077310ff1	output/eve: constify mac address logic	1 year ago
Victor Julien	1213936978	macset: constify addr parameters	1 year ago
Victor Julien	2236c1fcc6	decode/udp: no need to pack the structure	1 year ago
Victor Julien	7c90144d19	decode/tcp: no need to pack the structure	1 year ago
Victor Julien	a1a9b41a71	decode/icmpv4: no need to pack the structure	1 year ago
Victor Julien	ff50dc49ef	configure: tabs to spaces; minor reformatting	1 year ago
Victor Julien	e557ba0460	unittests: don't set ports for non-port proto	1 year ago
Victor Julien	e651cf922a	detect/http: fix compile warning in body tests When --enable-unittests w/o --enable-debug is used.	1 year ago
Victor Julien	f6c24aab57	detect/ipproto: clean up test	1 year ago
Victor Julien	4e1ae1c3bf	detect/fragbits: remove unused IP header struct from tests	1 year ago
Victor Julien	d3a429d919	defrag: test cleanups and fixes Pass tv and dtv to make sure reassembled packet is decoded.	1 year ago
Victor Julien	7728047888	decode/icmpv6: minor test cleanup	1 year ago
Victor Julien	3d4626f656	detect/dsize: remove unused ip6h from test	1 year ago
Jason Ish	568b941d7e	configure: .git can be a file as well In worktree scenarios, .git is a file. Assuming its a directory causes the release date to check the ChangeLog instead of the last commit, while not a big issue, can be confusing.	1 year ago
Jason Ish	71f59e529c	jsonbuilder: fix serialization of nan and inf When outputting a float, check if its infinity, or not a number and output a null instead. Using a null was chosen as this is what serde_yaml, Firefox, Chrome, Node, etc. do. Ticket: #6921	1 year ago
Victor Julien	b224209f45	host-info: remove pcre2_substring_list_free use Function prototype has changed in a recent release. Rather than dealing with detecting that, fall back to our regular pattern of using pcre2_substring_copy_bynumber(). Bug: #6918.	1 year ago
dependabot[bot]	d310d00eb0	github-actions: bump github/codeql-action from 3.24.6 to 3.24.9 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.6 to 3.24.9. - [Release notes](https://github.com/github/codeql-action/releases) - [Commits](https://github.com/github/codeql-action/compare/v3.24.6...v3.24.9) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 year ago
Jason Ish	6035a8a2b6	github-ci: set checkout directory as safe before running git commands While the checkout job appears to do this, it is done with a different version of git which seems to be the cause for it not having an effect when doing manual git operations from within a job. Also removes duplicate checkout statements in Windows builds.	1 year ago

1 2 3 4 5 ...

15634 Commits (64760e2e75b90cd9db01037dbba2fbeb162bf1a0) All Branches Search

15634 Commits (64760e2e75b90cd9db01037dbba2fbeb162bf1a0)

All Branches