1228 Commits (647b1c0ebaa926d7f3415c54a0119fd4a76d353a)

 

All Branches   

Search

Author	SHA1	Message	Date
Pablo Rincon	c7350a8ac6	Fixing some naming convention issues and incorrect error messages	15 years ago
Pablo Rincon	b708d7f65d	Adding Uricontent inspection with spm. Modifiers for uricontent are now supported	15 years ago
Victor Julien	e3552a8e3f	Add more comments to detect and flow structures.	15 years ago
Gurvinder Singh	8e444f1772	stream and application layer improvements	15 years ago
Victor Julien	3d7b882bde	Make sure all smsgs are handled every time, even in case or error. The fuzzer found an issue where unhandled messages remained in the queue leading to threading issues.	15 years ago
Victor Julien	cb8aaa5968	Make sure we only run the app layer proto detection (successfully) once per flow. Solves an issue found by the fuzzer where both flow directions were detected as different protos, messing up the app layer parser.	15 years ago
Victor Julien	68576947e2	Small SMB cleanups.	15 years ago
Victor Julien	f4ee4f5670	Properly clear list tail ptr in segment list.	15 years ago
William Metcalf	b0faeb91d7	small PF_RING update cmd line opts changed	15 years ago
Gurvinder Singh	4879045c6f	bug 102 patch	15 years ago
Victor Julien	4fd4c1331e	Fix broken unittest, improve within error messaging.	15 years ago
Anoop Saldanha	c54b91ed94	fix for bug 113	15 years ago
Victor Julien	6be0778532	Comment SigMatchSignatures a bit.	15 years ago
Kirby Kuehl	f08d3e76ee	add maximum andx chain depth	15 years ago
Jason Ish	acaee78b1c	Fix bug 125. - Always bail on parse errors. - Exit if loading the config file fails. - Display the line number where the parsing failed.	15 years ago
Victor Julien	449205cfeb	Remove wrong copyright info, cleanup headers.	15 years ago
Kirby Kuehl	afb08d388d	make sure we have input_len	15 years ago
Pablo Rincon	4a351c07a6	Bug 103, bound checks at pppoe, added macros for 4bit fields	15 years ago
root	ddf995da3b	pfring support lb type, and now uses logging subsys	15 years ago
Victor Julien	057031acce	Don't inspect more methods than necessary.	15 years ago
Pierre Chifflier	5535e083a0	Fix prelude init and cleanup sequence using OutputCtx ... Signed-off-by: Pierre Chifflier <chifflier@edenwall.com>	15 years ago
Jason Ish	37bb733929	Looks like something happened in a previous merge: - Don't set the limit here, its already set. - Don't write the log file header here, its also been written.	15 years ago
Jason Ish	40f9653c06	Have output plugs use an OutputCtx which is a little more generic than LogFileCtx. The OutputCtx provides a place for module private data to avoi overriding the LogFileCtx.	15 years ago
Victor Julien	99d5dc3d2a	Don't scan more cookie headers than necessary.	15 years ago
Victor Julien	c1a19bcd6b	Fix compilation of new detect-filter code, fix ip-only compatibility of detect-filter code.	15 years ago
Gerardo Iglesias Galvan	ef2ae76c42	Add support for detection_filter keyword	15 years ago
Jason Ish	eab93e766a	Do policy lookup for defrag. Add unit test for a default host os policy. Update example config to use a default. Add 2 new policies to the stream to cover all the policies for stream and defrag.	15 years ago
Gurvinder Singh	7438f981da	stream memory leaks fixed and unit tests added	15 years ago
Victor Julien	90006d94a6	Fix compilation	15 years ago
Jason Ish	5c3ab2b73f	Load host OS info from the configuration.	15 years ago
Victor Julien	297001c6d9	Only process a app layer sig if it has the proper state. Make sure a sig can't have conflicting sigmatches, such as ftpbouce and uricontent.	15 years ago
Victor Julien	ec47f840f3	Remove more scan references.	15 years ago
Victor Julien	bee4e04664	More scan/search related cleanups.	15 years ago
Victor Julien	7a8cd61fdf	Cleanups.	15 years ago
Victor Julien	153d1425fe	Fix nocase searching in payload search phase.	15 years ago
Victor Julien	80dc4f1dbe	Further simplify content api: merge flags that indicate a next relative match, remove chunks as they are unnecessary now, make negated a bitflag.	15 years ago
Victor Julien	f0d68b633e	Remove nosearch flag from pattern api and add a generic bitwise flags field.	15 years ago
Victor Julien	1e01fd613c	Remove all references to the scan phase from the pattern matchers and it's api.	15 years ago
Victor Julien	dd846c9b0e	Remove all search code from the pattern matchers, cleanup mpm api, remove unused http code, more cleanups.	15 years ago
Victor Julien	6990d9c91b	Fix thresholding signature unittests. Because of the bug fix that made thresholding compatible to ip-only sigs the test sigs needed to be made non-ip-only.	15 years ago
Victor Julien	f298fec872	Make sure nocase applies to the last pattern, content or uricontent.	15 years ago
Victor Julien	24b5149adf	Remove search phase from b2g pattern matcher.	15 years ago
Victor Julien	0e7cb90212	Fix broken pmatch list handling.	15 years ago
Victor Julien	27f3382066	Fix rules with thresholding set not being able to be ip-only.	15 years ago
Victor Julien	8b30226914	Detection keyword cleanup	15 years ago
Victor Julien	6637873348	Update prev ptrs in SigMatchReplaceContent	15 years ago
Victor Julien	b259e362cd	Convert uricontent to use new scanning methods as well. Move http_method and http_cookie keywords out of pmatch list for now.	15 years ago
Victor Julien	bef70a04ce	First stage of detect engine redesign: equal patterns share id's, search phase no longer used, new match verification phase.	15 years ago
Victor Julien	50e41817a7	Share content id's between identical patterns.	15 years ago
Victor Julien	4494545d3a	Fix bogus error message.	15 years ago