Victor Julien
0377ae0817
Reduce SCTP_HEADER_LEN to reflect actual pkt header size.
14 years ago
Eric Leblond
005dc599a6
detect.c: Fix usage of integer standing for protocol
...
This patch fixes direct usage of integer to code protocol value.
14 years ago
Eric Leblond
2c80f18dc9
detect: Add sctp detection and parsing.
...
This patch adds the support of SCTP in signature subsystem.
14 years ago
Eric Leblond
674b0bfae7
flow: Add basic SCTP support
...
This patch adds a basic flow support to SCTP. SCTP specificities
like the verification tag are not taken into account.
14 years ago
Eric Leblond
01e955bc27
Add SCTP to packet validation
...
Validation util was missing a test on sctph which can not be null
for SCTP packets.
14 years ago
Eric Leblond
a823160384
detect: Add support for sctp option in rule
...
'sctp' can now be used as a keyword in signature. It is at the same
level as the 'tcp' or 'udp' keywords.
14 years ago
Eric Leblond
482991ad6d
decode: add support for SCTP protocol
...
This patch adds a new counter for SCTP and defines some
macros needed for SCTP support.
14 years ago
Eric Leblond
8be92fdd99
SCTP support: add parsing of sctp
...
This patch adds support of SCTP in all part of the code in charge
of decoding packets.
14 years ago
Eric Leblond
e1d966eaf6
Makefile: add sctp files to build
...
This patch simply adds decode-sctp files to the compilation.
14 years ago
Eric Leblond
b69fd02284
decode sctp: basic SCTP decoding.
...
This files are basically a dummy conversion of UDP one. It
provides basic decoding (source port and destination port).
There is no chunk hanldling which means that suricata regexp
will match on all packet content except initial header and not
only on userspace data.
14 years ago
Eric Leblond
17af1ca123
decode-event: Add SCTP event
...
Almost empty now, because the only definition is packet
too small.
14 years ago
Victor Julien
987ce57a02
Wrap a number of BUG_ON's in the detection engine in DEBUG ifdefs as the conditions they check for are not serious enough to abort the engine.
14 years ago
Victor Julien
a3303fcf9d
Rename request-body-limit to request_body_limit to remain consistant with other options. Keep old notation around for compatibility.
14 years ago
Victor Julien
0d6d0ae371
Increase logline max length.
14 years ago
Victor Julien
c617d7cbfd
Update pfring doc.
14 years ago
Victor Julien
6047a9b562
Improve byte to numeric value error reporting and testing.
14 years ago
Victor Julien
b233105cc2
Fix a issue in stream reassembly causing the segment list getting into a inconsistent state.
14 years ago
Eric Leblond
4e9231266a
Compilation fix for OpenBSD and win32.
...
This patch fixes compilation on OpenBSD platform. It is running
fine on a pcap file. The patch should also fix compilation on
WIN32 platform but this is not tested.
14 years ago
Victor Julien
a8db8b334b
Remove debug stream testing code from non-debug builds.
14 years ago
Victor Julien
477bc1d050
Set DROP flag on a packet in addition to the REJECT flags. This makes sure we not only send a reject, but also drop the offending packet. Closes #248 .
14 years ago
Pablo Rincon
fb5fb3ab3f
IPOnly module fix for building stage. Radix Tree fix inserting diferent netmask user datas
14 years ago
Pablo Rincon
35c168ab03
Fix CPU_* macros for Mac OS X
14 years ago
Eric Leblond
91213d5ec8
Add option to run_check script
...
If given an argument run_check.sh will test this file against
the cocci patches.
14 years ago
Eric Leblond
0cf05856d0
Fix Packet usage.
...
This patch suppresses remaining direct access to pkt and pktlen in the
Packet structure.
14 years ago
Eric Leblond
12369b4393
Coccinelle: test invalid Packet usage
...
This coccinelle patches is checking that there is no direct
use of p->pkt or p->pktlen in the code. This variable must be
acceded via GET_PKT_* macros.
14 years ago
Victor Julien
cec7ece697
Don't print drop log on pseudo packet.
14 years ago
Victor Julien
1ace091bd4
Minor drop log cleanups.
14 years ago
Gurvinder Singh
7d0781b349
added support to log dropped packet as netfilter logs while in inline mode
14 years ago
Victor Julien
1681705e62
Don't print errors/warnings based on malformed traffic.
14 years ago
Anoop Saldanha
9845718138
fix detect-ssl-version.c unittests to accomodate new changes
14 years ago
Anoop Saldanha
95f9f2c28d
minor indentation changes
14 years ago
Gurvinder Singh
8f8b1212af
support for ssl_version keyword
14 years ago
Eric Leblond
a8417377e7
Don't use direct pkt access
...
pkt field in Packet needs to be accessed via macro. This
patch supress some direct access.
14 years ago
Victor Julien
addab7b5ee
Don't test the several packet detection checks against pseudo packets as the matches would not be meaningful anyway. Prevents a segv in the csum detection.
14 years ago
Victor Julien
a2465ffc1c
Fix FreeBSD's compilation of the new affinity code.
14 years ago
Victor Julien
b963890de1
Reenable SSE3 memcmp and switch AC memcmp to use the SCMemcmp wrapper.
14 years ago
Victor Julien
6f58ef13c4
Improve error cleanup in output function. Thanks to iswalker.
14 years ago
Eric Leblond
183af9ada5
Replace malloc by SCMalloc in util-mpm-ac
14 years ago
Eric Leblond
c732351077
Replace free and malloc by SC functions.
14 years ago
Victor Julien
35b938a8db
Don't pass config to unittests run in make check.
14 years ago
Eric Leblond
0044bb221b
Add suricata unittests to 'make check'
...
This patch adds a run of suricata's unittests to 'make check'
14 years ago
Eric Leblond
7c841e1d7c
Add coccinelle check to 'make check'
...
This patch adds coccinelle checking to the autotools
'make check'.
14 years ago
Eric Leblond
d151314b4d
Import coccinelle test
...
This is a import of two coccinelle patches that detect problem
on Packet handling. They are run on all commited C files in src
by the script run_check.sh.
14 years ago
Eric Leblond
66a15e2d6d
Fix some Packet initialisation.
...
This patch fixes Packet initialisation. In some place the pkt field
was not set after a memset used to zero the structure and this could
lead to some problems.
14 years ago
Anoop Saldanha
8e95884333
Use normal memcmp in ac. Improves perf
14 years ago
Martin Beyer
66d496c255
Added case sensitive unit test to util-mpm-ac
14 years ago
Anoop Saldanha
79b9eba0f0
fix case sensitive bug in ac
14 years ago
Victor Julien
1c7b7a01a6
Add option to set the syslog level for the alerts. Minor cleanups.
14 years ago
Gurvinder Singh
e5edc6e8e3
add the support to log the fast.log alerts type to syslog
14 years ago
Victor Julien
d424ac7c61
Fix nfq lockup due to improper handling of PKT_PSEUDO_STREAM_END packets.
14 years ago