7173 Commits (68d9677eea1fce8553223c49e7d808d0deee200c)

 

All Branches   

Search

Author	SHA1	Message	Date
Victor Julien	3c59d60049	cuda: make sure we don't use cuda in proto detect	9 years ago
Victor Julien	4111331ab0	af-packet: minor cleanups	9 years ago
Victor Julien	402bdf9b2b	af-packet: test if fanout is supported before use ... Older system may pretend they can support FANOUT but then fail to work at runtime. CentOS6 is an example of this. It would fail to start up with the default configuration with errors like: [15770] 21/6/2016 -- 16:00:13 - (tm-threads.c:2168) <Notice> (TmThreadWaitOnThreadInit) -- all 4 packet processing threads, 4 management threads initialized, engine started. [15785] 21/6/2016 -- 16:00:13 - (source-af-packet.c:1907) <Error> (AFPCreateSocket) -- [ERRCODE: SC_ERR_AFP_CREATE(190)] - Coudn't set fanout mode, error Protocol not available [15785] 21/6/2016 -- 16:00:13 - (source-af-packet.c:1337) <Error> (ReceiveAFPLoop) -- [ERRCODE: SC_ERR_AFP_CREATE(190)] - Couldn't init AF_PACKET socket, fatal error [15770] 21/6/2016 -- 16:00:13 - (suricata.c:2664) <Notice> (main) -- Signal Received. Stopping engine. [15787] 21/6/2016 -- 16:00:13 - (source-af-packet.c:1907) <Error> (AFPCreateSocket) -- [ERRCODE: SC_ERR_AFP_CREATE(190)] - Coudn't set fanout mode, error Protocol not available [15788] 21/6/2016 -- 16:00:13 - (source-af-packet.c:1907) <Error> (AFPCreateSocket) -- [ERRCODE: SC_ERR_AFP_CREATE(190)] - Coudn't set fanout mode, error Protocol not available [15786] 21/6/2016 -- 16:00:13 - (source-af-packet.c:1907) <Error> (AFPCreateSocket) -- [ERRCODE: SC_ERR_AFP_CREATE(190)] - Coudn't set fanout mode, error Protocol not available [15789] 21/6/2016 -- 16:00:13 - (flow-manager.c:693) <Perf> (FlowManager) -- 0 new flows, 0 established flows were timed out, 0 flows in closed state [15787] 21/6/2016 -- 16:00:13 - (source-af-packet.c:1337) <Error> (ReceiveAFPLoop) -- [ERRCODE: SC_ERR_AFP_CREATE(190)] - Couldn't init AF_PACKET socket, fatal error [15788] 21/6/2016 -- 16:00:13 - (source-af-packet.c:1337) <Error> (ReceiveAFPLoop) -- [ERRCODE: SC_ERR_AFP_CREATE(190)] - Couldn't init AF_PACKET socket, fatal error [15786] 21/6/2016 -- 16:00:13 - (source-af-packet.c:1337) <Error> (ReceiveAFPLoop) -- [ERRCODE: SC_ERR_AFP_CREATE(190)] - Couldn't init AF_PACKET socket, fatal error This patch adds a test that if run before the number of threads is determined. If the test fails, only 1 thread is created.	9 years ago
Victor Julien	ab65b6f83b	netmap: fix coverity warning 1362789 ... ** CID 1362789: Null pointer dereferences (FORWARD_NULL) /src/runmode-netmap.c: 247 in ParseNetmapConfig() ________________________________________________________________________________________________________ *** CID 1362789: Null pointer dereferences (FORWARD_NULL) /src/runmode-netmap.c: 247 in ParseNetmapConfig() 241 strlcpy(aconf->iface_name, iface_name, sizeof(aconf->iface_name)); 242 SC_ATOMIC_INIT(aconf->ref); 243 (void) SC_ATOMIC_ADD(aconf->ref, 1); 244 245 /* Find initial node */ 246 netmap_node = ConfGetNode("netmap"); >>> CID 1362789: Null pointer dereferences (FORWARD_NULL) >>> Comparing "netmap_node" to null implies that "netmap_node" might be null. 247 if (netmap_node == NULL) { 248 SCLogInfo("Unable to find netmap config using default value"); 249 } else { 250 if_root = ConfFindDeviceConfig(netmap_node, aconf->iface_name); 251 if_default = ConfFindDeviceConfig(netmap_node, "default"); 252 }	9 years ago
Andreas Herz	e9a2a341ce	util-threshold-config: parse suppress rules with spaces in ip list ... This modified regex allows spaces witihn the ip list for supress rules like [10.0.0.1, 10.0.0.2]	9 years ago
Jason Ish	f0e22c91cb	privs: add capability CAP_SYS_NICE. ... Allows the setting of thread priorities after dropping privileges.	9 years ago
Victor Julien	6045420812	detect: reduce verbosity, don't warn on empty files	9 years ago
Victor Julien	46ac5ed7b7	pfring: move output to 'Perf' level	9 years ago
Victor Julien	18de4c9654	offloading: work around missing TOE support	9 years ago
Victor Julien	9b80c21d78	offloading: distinguish between csum and the rest ... As AF_PACKET handles csum offloading don't check for this type of offloading. Other methods like pcap and netmap do require it to be turned off. Improve disable command suggestion wording.	9 years ago
Victor Julien	03d46f1369	offloading: reduce verbosity	9 years ago
Victor Julien	507027845d	afpacket: update offloading warning	9 years ago
Victor Julien	45fa25eb0c	offloading: improve checks on FreeBSD ... Move FreeBSD specific (but not netmap specific) checks from the netmap code to the general ioctl wrapper code. Warn from the check functions now, so callers no longer need to.	9 years ago
Victor Julien	33f8769001	offloading: move linux specific into their own func	9 years ago
Victor Julien	54bc471810	offloading: check for more offloading on Linux	9 years ago
Victor Julien	b1d191b478	netmap: fix enabling promisc mode on FreeBSD ... In FreeBSD setting the IFF_PROMISC flag has no effect. Instead we need to set the IFF_PPROMISC flag.	9 years ago
Victor Julien	6c7bf006b7	netmap: redo config parsing ... Normally we parse the config per interface only. But to properly setup the bridge, netmap also needs the config of it's peering interface. Instead of using a complicated peering scheme like in afpacket, simply parse the peers config too.	9 years ago
Victor Julien	0e9134930d	changelog: update for 3.1 and add missing 3.1rc1 tickets	9 years ago
Andreas Herz	d0baa83d2b	util-runmode: pass initdata to runmode workers for nfqueue ... The VerdictNFQ was missing the initdata which results in a segfault within CaptureStatsSetup. This commit adds the passing of the initdata.	9 years ago
Victor Julien	f7124b1149	afpacket: disable tpacket-v3 by default ... It's still considered experimental at this point.	9 years ago
Victor Julien	66346e4632	libnet: work around older libnet type difference ... Older libnet 1.1.x have a non-const type for libnet_init's dev argument.	9 years ago
Victor Julien	9119007d00	pfring: no longer link against rt and numa libs	9 years ago
Victor Julien	a88359dcf0	detect: get proper legacy custom values. Issue #1804	9 years ago
Victor Julien	5c974f92a8	livedev: shorten devname at registration	9 years ago
Victor Julien	b673e14411	afl: fix various --afl-* options	9 years ago
Victor Julien	d4f8445564	Update Changelog for 3.1RC1	9 years ago
Victor Julien	e76b334f8d	http body: fix compression tests	9 years ago
Victor Julien	5ec885e451	http: set of response body decompress limit ... This is a per personality setting.	9 years ago
Victor Julien	ed7dc0c6b3	unittest: minor cleanup	9 years ago
Victor Julien	b313f8ca7b	http: update compression mismatch test	9 years ago
Victor Julien	439b62fe69	configure: cleanup configure output ... Don't present missing spatch as a warning. Remove verbose libnet warnings as well.	9 years ago
Andreas Herz	36e4126227	detect-filemagic: fix heap-use-after-free ... This fixes the heap-use-after-free issue with sm being freed without being removed from the signature (s) list. Move the protocol check for rules with filemagic before the alloc and make the error log more precise.	9 years ago
Victor Julien	a309598721	netmap: work around mtu error on iface+ settings	9 years ago
Victor Julien	648a69759b	netmap: don't set more than 1 thread on sw ring	9 years ago
Victor Julien	86d44cea96	netmap: code cleanup	9 years ago
Victor Julien	ffba26d04a	configure: don't set -march=native for powerpc	9 years ago
Victor Julien	0b6171854d	yaml: improve affinity defaults	9 years ago
Victor Julien	b5633b9bfd	affinity: small cleanups to output & code	9 years ago
Victor Julien	5f9de1e734	affinity: rename detect -> worker set internall	9 years ago
Victor Julien	723e90a174	affinity: rename detect-cpu-set to worker-cpu-set ... Add fallback for existing configs.	9 years ago
Victor Julien	45b72d61c9	affinity: improve suricata.yaml doc	9 years ago
Victor Julien	570b9d06e0	affinity: remove unused settings ... These were never referenced to in the code so they can be removed. Add bypass to config parser in case the settings are still in old yamls.	9 years ago
Victor Julien	bdc2c6e9ce	affinity: type cleanup	9 years ago
Victor Julien	2aac437927	output: reduce verbosity on info level	9 years ago
Victor Julien	4c663bb143	netmap: don't check for offloading twice	9 years ago
Victor Julien	2beb39469b	netmap: output cleanup	9 years ago
Victor Julien	b3bf7a5729	output: introduce config and perf output levels ... Goal is to reduce info output	9 years ago
Victor Julien	cc2ed783c5	output: improve notice and warning/error color handling	9 years ago
Victor Julien	1c0f20f0e5	yaml: profiling 'json' depend on jansson availability	9 years ago
Victor Julien	e11753e3f2	profiling: fix minor compiler warning	9 years ago