19158 Commits (6bb271cee97304025e76fc9799d0107af5995dd2)

 

All Branches   

Search

Author	SHA1	Message	Date
Juliana Fajardini	312967f291	detect: add flow drop by firewall as drop reason ... To track flow drops triggered by the firewall. Add flow drop by firewall as drop reason. As part of Ticket #7699	4 months ago
Juliana Fajardini	0acb136b40	schema: expand stats.ips.replaced explanation ... As this is a less obvious counter.	4 months ago
Juliana Fajardini	234172a93c	docs: add firewall stats doc ... Related to Ticket #7699	4 months ago
Juliana Fajardini	5b488feef5	detect/firewall: add dedicated stats counters ... Add a `firewall` stats counter aggregator for all firewall-related stats. De-overload "detect.alert_queue_overflow", by adding "firewall.discarded_alerts" to account for discarded drops in Firewall mode. Add Debug statements for tracking corner cases where it can be difficult to know where a drop is coming from. Added counters: - stats.firewall.blocked - stats.firewall.accepted - stats.firewall.rejected - stats.firewall.drop_reason.default_app_policy - stats.firewall.drop_reason.default_packet_policy - stats.firewall.drop_reason.flow_drop - stats.firewall.drop_reason.pre_flow_hook - stats.firewall.drop_reason.pre_stream_hook - stats.firewall.drop_reason.rules - stats.firewall.discarded_alerts Ticket #7699	4 months ago
Juliana Fajardini	32d89072d2	docs/configuration: add firewall mode settings ... Partly related to Ticket #7699	4 months ago
Jason Ish	b366665ad8	doc: document rust thread life cycle api ... Ticket: #8605	4 months ago
Jason Ish	144f824f17	rust/ffi: add thread init callback wrapper ... Ticket: #8605	4 months ago
Jason Ish	c689af0bbb	rust/ffi: bindgen thread lifecycle callbacks ... Ticket: #8605	4 months ago
Jason Ish	f269e22b67	github-ci: add coverage reporting for the rust example plugin ... Should help reporting coverage on the ffi wrappers only used by plugins.	4 months ago
Jason Ish	e1a2a36ee7	examples/plugins/rust: misc cleanups ... - Remove registration helper - Limit function visibility	4 months ago
Philippe Antoine	07112bc7ae	rust: format mqtt files ... Ticket: 3836	4 months ago
Philippe Antoine	844f2effa3	rust: format modbus files ... Ticket: 3836	4 months ago
Philippe Antoine	db019ebefe	rust: format ike files ... Ticket: 3836	4 months ago
jason taylor	da827322ba	doc: minor ebpf doc update for fedora/rhel ... Signed-off-by: jason taylor <jtfas90@proton.me>	4 months ago
Victor Julien	54322f38f8	common: fix cppcheck syntax error	4 months ago
Victor Julien	bd198231a0	util/port-interval-tree: suppress cppcheck false positives	4 months ago
Victor Julien	f138a64ad7	debug/validate: remove redundant checks ... Pointed out by cppcheck.	4 months ago
Victor Julien	9869e9b9f5	detect/port: workaround cppcheck warning	4 months ago
Victor Julien	0af57040d9	detect/address: workaround cppcheck warning	4 months ago
Philippe Antoine	bcc1e6ae32	rust: format http2 files ... Ticket: 3836	4 months ago
Jeff Lucovsky	cc6fbcd5dd	etc/schema: add missing ftp fields ... Add ftp detect keywords to metadata Issue: 7502, 7503, 7507, 7505, 7508, 7506	4 months ago
Philippe Antoine	a35760db9b	rust: enforce already formatted directories in CI	4 months ago
Philippe Antoine	1070e733d8	rust: format websocket files ... Ticket: 3836	4 months ago
Philippe Antoine	89e5332d88	rust: format utils files ... Ticket: 3836	4 months ago
Philippe Antoine	edf29b0000	rust: format ssh files ... Ticket: 3836	4 months ago
Philippe Antoine	fe27a2159c	rust: format rfb files ... Ticket: 3836	4 months ago
Philippe Antoine	5cca346f16	rust: format quic files ... Ticket: 3836	4 months ago
Philippe Antoine	415360d9e8	rust: format ntp files ... Ticket: 3836	4 months ago
Philippe Antoine	fa864f9c2f	rust: format mime files ... Ticket: 3836	4 months ago
Philippe Antoine	2cfcaec1b0	rust: format ldap files ... Ticket: 3836	4 months ago
Philippe Antoine	64e7c671cc	rust: format ftp files ... Ticket: 3836	4 months ago
Philippe Antoine	f217e249cb	rust: format ffi files ... Ticket: 3836	4 months ago
Philippe Antoine	f7c14809f4	rust: format enip files ... Ticket: 3836	4 months ago
Philippe Antoine	e526eb8e2b	rust: format bittorrent_dht files ... Ticket: 3836	4 months ago
Philippe Antoine	f5ac0e201c	rust: format asn1 files ... Ticket: 3836	4 months ago
Philippe Antoine	1ced97bdbb	rust: format applayertemplate files ... Ticket: 3836	4 months ago
Sergey Pinaev	d55114e6d7	detect-engine-analyzer: remove unnecessary check ... Always make sure, that smd is not NULL, as we dereference it a few lines below and base64_data for instance is forbidden as a fast_pattern Ticket: 8504	4 months ago
Promise Charles	5c9602bcf2	suricata: add error about missing runmode ... If a runmode is missing but other params are passed on the commandline, issue an error. Ticket: #5711 Signed-off-by: Promise Charles <descencybobby@gmail.com>	4 months ago
Jason Ish	57f76a2462	github-ci: update Fedora builds to Fedora 44	4 months ago
Philippe Antoine	87db89ea4e	fuzz: extend fuzz_siginit to do engine-rule-analysis	4 months ago
Philippe Antoine	efe3b16aac	rust: feature debug in main crate enables feature debug in ffi	4 months ago
Philippe Antoine	5db471500c	rust/ffi: remove altemplate plugin last dependency on suricata crate ... Ticket: 7666	4 months ago
Philippe Antoine	b90adcc2bb	rust/ffi: move AppLayerTxData to ffi ... Ticket: 7666	4 months ago
Philippe Antoine	bce88dd83f	rust: build depends on ffi/Cargo.toml.in	4 months ago
Philippe Antoine	0773fba5fd	rust/ffi: move txdata flags to ffi ... Ticket: 7666	4 months ago
Philippe Antoine	2525ea2e37	rust/ffi: move direction to ffi ... Ticket: 7666	4 months ago
Philippe Antoine	5440e41314	rust/ffi: move debug validations macros to ffi ... Ticket: 7666	4 months ago
Philippe Antoine	6dff07b631	detect/lua: remove unused macros	4 months ago
Andreas Dolp	2f972b6759	doc: improve manpage of suricatasc ... - describe all options - describe optional socket path Redmine ticket: #8563	4 months ago
Victor Julien	95b7f2b998	scan-build: support taint filtering ... Support scan-build's taint filtering logic. Adds a yaml config to mark a dedicated debug validation function as filtering a taint. Use to suppress warnings in reference, threshold and classification file handling. Ticket: #3153.	4 months ago