34 Commits (6717c356e3d23dccbd837c85e37e51566e7a4f54)

Author	SHA1	Message	Date
Victor Julien	84696ebe2a	stream: configurable stream chunk prealloc ... The stream chunk pool contains preallocating stream chunks (StreamMsg). These are used for raw reassembly, used in raw content inspection by the detection engine. The default setting so far has been 250, which was hardcoded. This meant that in setups that needed more, allocs and frees would be happen constantly. This patch introduces a yaml option to set the 'prealloc' value in the pool. The default is still 250. stream.reassembly.chunk-prealloc Related to feature #1093.	12 years ago
Victor Julien	4049c2f74c	Packet logging API: convert unified2 ... Convert unified2 alert to new logging API.	12 years ago
Victor Julien	eb1f5ce358	stream: increase max StreamMsg data ... Increase from 4024 bytes to 4072 to make the whole structure 4096 again.	12 years ago
Victor Julien	c801ef3515	stream: remove flags from StreamMsg	12 years ago
Victor Julien	b159c1714c	stream: remove flow reference from StreamMsg ... StreamMsg' flow reference was used mostly to make sure a flow would not get removed from the hash before inspection. For this it needed to reference the flow use_cnt reference counter. Nowadays we have more advanced flow timeout handling. This will make sure that if there still are pending smsgs' in a flow, these will still be processed.	12 years ago
Victor Julien	0ec375d95a	stream msg: remove structure	12 years ago
Victor Julien	5ca0139cbc	stream: remove unused gap structure from StreamMsg.	12 years ago
Victor Julien	869109a6a0	stream/app layer: add Truncate app layer callback that is called if stream depth is reached. Use it to trunc open files in HTTP.	13 years ago
Victor Julien	3f94b12007	Minor stream optimization.	14 years ago
Eric Leblond	4f0cdf28a3	Introduce StreamSegmentForEach function ... This patch introduces a function called StreamMsgForEach which can be used to run a callback on all segments of a stream. This is currently only supported for TCP as this is the only streaming aware protocol.	14 years ago
Anoop Saldanha	38fe2b9070	Removed FLOW_AL_STREAM_START, EOF and GAP flags. We don't need these. Just use STREAM_* flags	15 years ago
Victor Julien	4f5aad1476	Enforce configurable minimum chunk size in raw stream reassembly. Minor stream cleanups, unittest updates.	15 years ago
Victor Julien	936b34ddf6	Remove minimum init chunk length code, set a default limit of 2560 to the minimum chunk size, allow toclient raw reassembly to start even if toserver hasn't started yet.	15 years ago
Victor Julien	864c8718e1	Store matching stream msg (ptr) in packets alert structure so it's available to the output plugins.	15 years ago
Victor Julien	d10cf5b4e3	Increase stream msg size.	15 years ago
Victor Julien	8fa5a2c025	Split applayer and raw stream reassembly ... Split stream reassembly in 2 parts: a part that sends ack'd data to the app layer parsers as soon as it's available, and another part that queues up data into larger chunks for raw inspection.	15 years ago
Victor Julien	a3ff0e7210	Don't scan TCP packet payload if it was added to the stream. Inspect the tcp stream with the correct packet. Should fix #184 and #185.	16 years ago
Victor Julien	b60d2c4345	Fix flags mixup issue in the app layer.	16 years ago
Victor Julien	ba12f3c109	Applayer to flow fixes and cleanups.	16 years ago
Victor Julien	81f2499834	Store stream msgs processed by the app layer in the tcp session so they can be inspected by the detection module as well. The detection module returns them to the pool.	16 years ago
Victor Julien	76d62778c3	Use bigger stream msg.	16 years ago
William Metcalf	ce01927515	Import of GPLv2 Header 050410	16 years ago
Gurvinder Singh	8e444f1772	stream and application layer improvements	16 years ago
Pablo Rincon	e26833be3f	Changing mutex/spinlocks/conditions naming types	16 years ago
Pablo Rincon	769022f4be	Adding support for Mac OS X, FreeBSD, centrailizing mutex/spins/conditions in a macro API, and some unittests	16 years ago
Victor Julien	be3bbe0a85	Fix segv in reassembly. Fix sequence gap handling tests.	16 years ago
Victor Julien	5ecd187b6f	Tie app layer parsing to the stream engine.	16 years ago
Victor Julien	edfddcb282	Clean up stream tests memory handling. Remove counters in the address handling that were thread unsafe.	16 years ago
Victor Julien	b102ea2123	Big update: ... - Implement "closing" state in flow. - Add protocol specific timeouts. - Lots of stream tracking updates, fixing a lot of out of window issues. - Stream reassembly fixes. - Implement a new IDS runmode with 4 stream and detect threads. - Added a BUG_ON macro that aborts the engine if the expression is true. - Better balance the flow queue handler for traffic that doesn't have flow (like icmp currently). - Simplify application level protocol in the Tcp Session. - Add some debugging memory counters.	16 years ago
Brian Rectanus	fa5939ca91	64 bit cleanup part2	17 years ago
Victor Julien	54ae12b1f9	Fixes for the stream reassembly. It turned out that using both a prev_seg pointer and a list_seg->prev pointer at the same time was not the best of ideas. So removed the prev_seg ptr. Cleaned up some copy functions too. Added some more debug statements. Made sure the L7 stuff doesn't kick in when running the unittests for reassembly.	17 years ago
Victor Julien	689bbfdc45	Rename all structure definitions in the "typedef struct _SomeStruct" format to "typedef struct SomeStruct_" to make the Doxygen output more useful. ... Remove the Trie multi pattern matcher code. It wasn't used anymore.	17 years ago
Victor Julien	c957dc7775	Updates & cleanups to stream & l7 stuff	17 years ago
Victor Julien	1c2240cfeb	Stream reassembly update and WIP code for L7 modules.	17 years ago