aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
19,582 Commits
8 Branches
174 Tags
251 MiB
main
main-8.0.x
main-7.0.x
master-6.0.x
master-5.0.x
master-4.1.x
master-4.0.x
master-3.2.x
suricata-8.0.7
suricata-8.0.6
suricata-7.0.17
suricata-8.0.5
suricata-7.0.16
suricata-8.0.4
suricata-7.0.15
suricata-8.0.3
suricata-7.0.14
suricata-8.0.2
suricata-7.0.13
suricata-8.0.1
suricata-7.0.12
suricata-8.0.0
suricata-7.0.11
suricata-8.0.0-rc1
suricata-8.0.0-beta1
suricata-7.0.10
suricata-7.0.9
suricata-7.0.8
suricata-7.0.7
suricata-7.0.6
suricata-6.0.20
suricata-7.0.5
suricata-6.0.19
suricata-6.0.18
suricata-7.0.4
suricata-6.0.17
suricata-7.0.3
suricata-6.0.16
suricata-7.0.2
suricata-6.0.15
suricata-7.0.1
suricata-6.0.14
suricata-7.0.0
suricata-7.0.0-rc2
suricata-6.0.13
suricata-6.0.12
suricata-6.0.11
suricata-7.0.0-rc1
suricata-6.0.10
suricata-6.0.9
suricata-7.0.0-beta1
suricata-6.0.8
suricata-6.0.7
suricata-6.0.6
suricata-5.0.10
suricata-6.0.5
suricata-5.0.9
suricata-6.0.4
suricata-5.0.8
suricata-6.0.3
suricata-5.0.7
suricata-6.0.2
suricata-5.0.6
suricata-6.0.1
suricata-5.0.5
suricata-4.1.10
suricata-4.1.9
suricata-5.0.4
suricata-6.0.0
suricata-6.0.0-rc1
suricata-6.0.0-beta1
suricata-5.0.3
suricata-4.1.8
suricata-4.1.7
suricata-5.0.2
suricata-4.1.6
suricata-5.0.1
suricata-5.0.0
suricata-5.0.0-rc1
suricata-4.1.5
suricata-5.0.0-beta1
suricata-4.1.4
suricata-4.1.3
suricata-4.0.7
suricata-4.1.2
suricata-4.1.1
suricata-4.1.0
suricata-4.0.6
suricata-4.1.0-rc2
suricata-4.1.0-rc1
suricata-4.0.5
suricata-4.1.0-beta1
suricata-4.0.4
suricata-4.0.3
suricata-4.0.2
suricata-3.2.5
suricata-4.0.1
suricata-3.2.4
suricata-4.0.0
suricata-4.0.0-rc2
suricata-3.2.3
suricata-4.0.0-rc1
suricata-4.0.0-beta1
suricata-3.2.2
suricata-3.1.4
suricata-3.2.1
suricata-3.2
suricata-3.2RC1
suricata-3.1.3
suricata-3.2beta1
suricata-3.1.2
suricata-3.1.1
suricata-3.1
suricata-3.0.2
suricata-3.1RC1
suricata-3.0.1
suricata-3.0.1RC1
suricata-3.0
suricata-2.0.11
suricata-3.0RC3
suricata-3.0RC2
suricata-3.0RC1
suricata-2.0.10
suricata-2.0.9
suricata-2.1beta4
suricata-2.0.8
suricata-2.0.7
suricata-2.1beta3
suricata-2.0.6
suricata-2.0.5
suricata-2.1beta2
suricata-2.0.4
suricata-2.1beta1
suricata-2.0.3
suricata-2.0.2
suricata-2.0.1
suricata-2.0.1rc1
suricata-2.0
suricata-2.0rc3
suricata-2.0rc2
suricata-2.0rc1
suricata-2.0beta2
suricata-1.4.7
suricata-1.4.6
suricata-1.4.5
suricata-2.0beta1
suricata-1.4.4
suricata-1.4.3
suricata-1.4.2
suricata-1.4.1
suricata-1.3.6
suricata-1.4
suricata-1.3.5
suricata-1.4rc1
suricata-1.3.4
suricata-1.4beta3
suricata-1.3.3
suricata-1.4beta2
suricata-1.3.2
suricata-1.4beta1
suricata-1.3.1
suricata-1.3
suricata-1.3rc1
suricata-1.3beta2
suricata-1.3beta1
suricata-1.2.1
suricata-1.2
suricata-1.2rc1
suricata-1.2beta1
suricata-1.1.1
suricata-0.8.2
suricata-1.0.0
suricata-1.0.1
suricata-1.0.2
suricata-1.0.3
suricata-1.0.4
suricata-1.0.5
suricata-1.1
suricata-1.1beta1
suricata-1.1beta2
suricata-1.1beta3
suricata-1.1rc1
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '6aa97aa8a9'
${ noResults }
Commit Graph

185 Commits (6aa97aa8a93251256704e203747e3fefb75e0c24)

Author SHA1 Message Date
Juliana Fajardini 6aa97aa8a9 clang-format: handle branch without commits 
When a branch has no commits of its own, e.g. when it is the baseline
branch itself, git rev-list returns nothing and first_commit is empty.
The empty value was still used to build "$first_commit^", which git
rejects as a bad revision.

git-clang-format then failed without writing anything to stdout, which
the output check reads as "formatting required". Pushing the baseline
branch therefore failed the CI formatting check, reporting a style
violation that does not exist.

Report that there is nothing to format instead.
git rev-list also returns nothing when the baseline ref does not exist
as it only reports that on stderr, so verify the baseline separately to
keep that case a loud failure rather than a silent pass.

Ticket: #9097
 1 month ago
Jason Ish 172204be61 dnp3: allocate variable-length object fields dynamically 
Introduce a new code generated type, dynchararray. Use this new
dynamically allocated char array instead of using a 65535 static array.

Ticket: #8827
 2 months ago
Jason Ish 99942aa50d dnp3-gen: update generated code to match clang-format 2 months ago
Juliana Fajardini 34b7a9ef82 scripts: check doc rules as TD and FW rules 
Previously, a rule that had firewall-only syntax or keywords would fail
the script check.

Since we can't guarantee that a firewall rule will look different than a
detection one, run rule examples against both scenarios before failing
them.
 2 months ago
Juliana Fajardini f3e27b0e41 scripts: check-doc-rules tries local bin first 
If the point is to check the docs for added changes, it makes sense to
that used binary is the one that comes with the doc changes. Thus, try
using the local binary first, before falling back to usr/bin installed
Suricata.
 2 months ago
Jason Ish 6b8c482012 github-ci: break ubuntu/debian script into 2 scripts 
Debian 13 ships Rust 1.85 by default, Ubuntu requires installing a
specific patch to get newer then 1.75. So to support a newer MSRV,
these operating systems need different examples.
 2 months ago
Jason Ish 05882e7be0 github-ci: cleanups to almalinux minimal build 
Don't install extra repo's in the script, do it in CI. These are covered
by the documentation as they vary depending on the version and variant.
 2 months ago
Shivani Bhardwaj 35d28272b2 dcerpc: add interface-service name data 
This data directly comes from Zeek @d11a8750. It was scriptually
converted to NDJSON ingestible to Suricata using serde and serde_json.
The script used for this conversion lives in
scripts/extract_dce_rpc_interfaces.py.

Part of this data within Zeek codebase comes from the MITRE BZAR
project. Hence, the LICENSE file alongwith this data consists of both
the licenses: Zeek and BZAR.

Feature 2727
Feature 8523
 3 months ago
Philippe Antoine 17dc065326 ci: check uint keywords with their size 
So, that if a keyword advertises uint16, it can indeed parse
a uint16 and is not just a uint8
 4 months ago
Philippe Antoine 399ee1e360 ci: check multi uint keywords 
Ticket: 7929
 4 months ago
Philippe Antoine 72e9314402 ci: check cargo fmt for whole suricata 4 months ago
Shivani Bhardwaj 3adb975032 misc: rename requirements.txt to bundle.txt 
Do not use Python's standard file name to define external packages that
need to be installed. This confuses Dependabot.
 4 months ago
Philippe Antoine ca34fba00c rust: format smb files 
Ticket: 3836
 4 months ago
Philippe Antoine aea9fd73b7 rust: format dcerpc files 
Ticket: 3836
 4 months ago
Philippe Antoine e0152178da rust: format detect files 
Ticket: 3836
 5 months ago
Philippe Antoine 762b725e1f ci: check-doc-rules copies data(sets) files into tmpdir 
Allows to use datasets load
 5 months ago
Philippe Antoine e39075557a rust: check llmnr format 
Ticket: 3836
 5 months ago
Philippe Antoine 4144d9c709 rust: format snmp files 
Ticket: 3836
 5 months ago
Philippe Antoine 9318bbfbdb rust: format tftp files 
Ticket: 3836
 5 months ago
Philippe Antoine 9ec200e834 rust: format x509 files 
Ticket: 3836
 5 months ago
Philippe Antoine dd66276f82 rust: format telnet files 
Ticket: 3836
 5 months ago
Philippe Antoine 709ad1bdf4 rust: format sip files 
Ticket: 3836
 5 months ago
Philippe Antoine 8217c51126 rust: format sdp files 
Ticket: 3836
 5 months ago
Philippe Antoine 9d9d8df4cd rust: format rdp files 
Ticket: 3836
 5 months ago
Philippe Antoine c8a86cdffa ci: move rustfmt to a helper script 5 months ago
Victor Julien 781bd5184e clang-format: support clang 17 
Update Github CI runner to use it.

Bump to Ubuntu 24.04 as well.
 5 months ago
Philippe Antoine 38d41e6fa6 dnp3: fix off-by-one in array sizes 
So that we can write a final zero without overflowing the array
and relying on padding to avoid further problems

Ticket: 8448
 5 months ago
Philippe Antoine c25ccd299e dnp3: explicit application layer length is bounded in uint16_t 
Ticket: 8460
 5 months ago
Philippe Antoine 891b17277e ci: check dist rules 
So that we catch if we add a typo like
app-layer-event:snmp.version_mismatchZZZ;
 6 months ago
Philippe Antoine d84b6789c9 ci: make doc rules validation strict 
not finding anymore problems now
 6 months ago
Philippe Antoine cce673349a ci/scripts: check for dots and dashes in json schema keys 
Ticket: 6502
 6 months ago
Philippe Antoine adc0f18463 doc/ci: check keyword links 
Ticket: 8257
 6 months ago
Philippe Antoine 64f003190d doc: move more rules to dedicated css container 
Ticket: 8372

Also remove dead code from script checking the rules
 6 months ago
Philippe Antoine e0d10c0513 scripts: remove dead code in check-doc-rules 6 months ago
Philippe Antoine 42a85c37f1 scripts: add script to check rules in doc 
Ticket: 8372

and run it in github CI
 6 months ago
Philippe Antoine 512bbe4de8 detect/template: merge template and template2 
Ticket: 7278

Do a single packet match template merging best of both current
templates
 7 months ago
Jason Ish 551f6ded69 github-ci: update almalinux minimal build to use dist archive 
Update the AlmaLinux recommended minimal build to use the pre built
distribution archive as this is the type of build the documentation is
targetting.
 7 months ago
Jason Ish 87dba92bdd github-ci: update debian/ubuntu minimal build to use dist 
Update the Ubuntu/Debian minimal recommended build to use the
pre-built dist archive instead of building from git, as that is the
type of build this documentation targets.

Also use the ubuntu:22.04 container. The GitHub provided Ubuntu 22.04
VM appears to contain some new additions like a newer Rust that is not
found on a typical Ubuntu 22.04 installation.
 7 months ago
Philippe Antoine cf88ed518c jsonschema: check for duplicate keys 
Ticket: 6691

And fix the one duplicate found
 11 months ago
Philippe Antoine 273e9f55eb scripts: eve-parity hard fail on unknown keyword 11 months ago
Philippe Antoine f581b8f1ae scripts: complete eve-parity type check 11 months ago
Jason Ish 6bd360570a dnp3: fix dnp3 generation script to match code 12 months ago
Jason Ish 2848061d0d scripts/evedoc.py: handle union types in schema 
Update EVE documentation script to handle union types like:

    "type": ["string", "number"]
 1 year ago
Philippe Antoine f7f8fbc116 scripts: setup app layer rustfmt mod.rs last 
Otherwise rustfmt complains that parser.rs does not exist yet
 1 year ago
Philippe Antoine 24503b0ead rust: move file functions out of SuricataContext 
Ticket: 7667
 1 year ago
Victor Julien b58c8461c3 clang-format: adjust for master to main rename 1 year ago
Jason Ish 8d67c91c0d clang-format: don't reformat schema on rewrite-branch 
Add --extensions c,h flag to git clang-format when reformatting
commits on a branch. This prevents clang-format from modifying
non-C files like JSON schemas.

The extensions is used elsewhere in this script, so I suspect it was
just an oversight.

Also, ./scripts/schema-order.py --in-place will consistently format the
schema, while sorting the keys.
 1 year ago
Philippe Antoine cca169f307 scripts: clang-format can use a different base than master 
useful for git hook running on main-7.0.x branches so that
not every commit gets its format checked again.

Ticket: 7292
 1 year ago
Jason Ish 371d7cba06 schema: add script to check or sort the schema 1 year ago
Jason Ish e8d7d3d83d scripts/setup-app-layer: fixes for name changes 1 year ago