Commit Graph

2092 Commits (6e0d98d9c4e33ca5e61447518d7e686419fc1858)
 

Author SHA1 Message Date
Victor Julien 0377ae0817 Reduce SCTP_HEADER_LEN to reflect actual pkt header size. 14 years ago
Eric Leblond 005dc599a6 detect.c: Fix usage of integer standing for protocol
This patch fixes direct usage of integer to code protocol value.
14 years ago
Eric Leblond 2c80f18dc9 detect: Add sctp detection and parsing.
This patch adds the support of SCTP in signature subsystem.
14 years ago
Eric Leblond 674b0bfae7 flow: Add basic SCTP support
This patch adds a basic flow support to SCTP. SCTP specificities
like the verification tag are not taken into account.
14 years ago
Eric Leblond 01e955bc27 Add SCTP to packet validation
Validation util was missing a test on sctph which can not be null
for SCTP packets.
14 years ago
Eric Leblond a823160384 detect: Add support for sctp option in rule
'sctp' can now be used as a keyword in signature. It is at the same
level as the 'tcp' or 'udp' keywords.
14 years ago
Eric Leblond 482991ad6d decode: add support for SCTP protocol
This patch adds a new counter for SCTP and defines some
macros needed for SCTP support.
14 years ago
Eric Leblond 8be92fdd99 SCTP support: add parsing of sctp
This patch adds support of SCTP in all part of the code in charge
of decoding packets.
14 years ago
Eric Leblond e1d966eaf6 Makefile: add sctp files to build
This patch simply adds decode-sctp files to the compilation.
14 years ago
Eric Leblond b69fd02284 decode sctp: basic SCTP decoding.
This files are basically a dummy conversion of UDP one. It
provides basic decoding (source port and destination port).
There is no chunk hanldling which means that suricata regexp
will match on all packet content except initial header and not
only on userspace data.
14 years ago
Eric Leblond 17af1ca123 decode-event: Add SCTP event
Almost empty now, because the only definition is packet
too small.
14 years ago
Victor Julien 987ce57a02 Wrap a number of BUG_ON's in the detection engine in DEBUG ifdefs as the conditions they check for are not serious enough to abort the engine. 14 years ago
Victor Julien a3303fcf9d Rename request-body-limit to request_body_limit to remain consistant with other options. Keep old notation around for compatibility. 14 years ago
Victor Julien 0d6d0ae371 Increase logline max length. 14 years ago
Victor Julien c617d7cbfd Update pfring doc. 14 years ago
Victor Julien 6047a9b562 Improve byte to numeric value error reporting and testing. 14 years ago
Victor Julien b233105cc2 Fix a issue in stream reassembly causing the segment list getting into a inconsistent state. 14 years ago
Eric Leblond 4e9231266a Compilation fix for OpenBSD and win32.
This patch fixes compilation on OpenBSD platform. It is running
fine on a pcap file. The patch should also fix compilation on
WIN32 platform but this is not tested.
14 years ago
Victor Julien a8db8b334b Remove debug stream testing code from non-debug builds. 14 years ago
Victor Julien 477bc1d050 Set DROP flag on a packet in addition to the REJECT flags. This makes sure we not only send a reject, but also drop the offending packet. Closes #248. 14 years ago
Pablo Rincon fb5fb3ab3f IPOnly module fix for building stage. Radix Tree fix inserting diferent netmask user datas 14 years ago
Pablo Rincon 35c168ab03 Fix CPU_* macros for Mac OS X 14 years ago
Eric Leblond 91213d5ec8 Add option to run_check script
If given an argument run_check.sh will test this file against
the cocci patches.
14 years ago
Eric Leblond 0cf05856d0 Fix Packet usage.
This patch suppresses remaining direct access to pkt and pktlen in the
Packet structure.
14 years ago
Eric Leblond 12369b4393 Coccinelle: test invalid Packet usage
This coccinelle patches is checking that there is no direct
use of p->pkt or p->pktlen in the code. This variable must be
acceded via GET_PKT_* macros.
14 years ago
Victor Julien cec7ece697 Don't print drop log on pseudo packet. 14 years ago
Victor Julien 1ace091bd4 Minor drop log cleanups. 14 years ago
Gurvinder Singh 7d0781b349 added support to log dropped packet as netfilter logs while in inline mode 14 years ago
Victor Julien 1681705e62 Don't print errors/warnings based on malformed traffic. 14 years ago
Anoop Saldanha 9845718138 fix detect-ssl-version.c unittests to accomodate new changes 14 years ago
Anoop Saldanha 95f9f2c28d minor indentation changes 14 years ago
Gurvinder Singh 8f8b1212af support for ssl_version keyword 14 years ago
Eric Leblond a8417377e7 Don't use direct pkt access
pkt field in Packet needs to be accessed via macro. This
patch supress some direct access.
14 years ago
Victor Julien addab7b5ee Don't test the several packet detection checks against pseudo packets as the matches would not be meaningful anyway. Prevents a segv in the csum detection. 14 years ago
Victor Julien a2465ffc1c Fix FreeBSD's compilation of the new affinity code. 14 years ago
Victor Julien b963890de1 Reenable SSE3 memcmp and switch AC memcmp to use the SCMemcmp wrapper. 14 years ago
Victor Julien 6f58ef13c4 Improve error cleanup in output function. Thanks to iswalker. 14 years ago
Eric Leblond 183af9ada5 Replace malloc by SCMalloc in util-mpm-ac 14 years ago
Eric Leblond c732351077 Replace free and malloc by SC functions. 14 years ago
Victor Julien 35b938a8db Don't pass config to unittests run in make check. 14 years ago
Eric Leblond 0044bb221b Add suricata unittests to 'make check'
This patch adds a run of suricata's unittests to 'make check'
14 years ago
Eric Leblond 7c841e1d7c Add coccinelle check to 'make check'
This patch adds coccinelle checking to the autotools
'make check'.
14 years ago
Eric Leblond d151314b4d Import coccinelle test
This is a import of two coccinelle patches that detect problem
on Packet handling. They are run on all commited C files in src
by the script run_check.sh.
14 years ago
Eric Leblond 66a15e2d6d Fix some Packet initialisation.
This patch fixes Packet initialisation. In some place the pkt field
was not set after a memset used to zero the structure and this could
lead to some problems.
14 years ago
Anoop Saldanha 8e95884333 Use normal memcmp in ac. Improves perf 14 years ago
Martin Beyer 66d496c255 Added case sensitive unit test to util-mpm-ac 14 years ago
Anoop Saldanha 79b9eba0f0 fix case sensitive bug in ac 14 years ago
Victor Julien 1c7b7a01a6 Add option to set the syslog level for the alerts. Minor cleanups. 14 years ago
Gurvinder Singh e5edc6e8e3 add the support to log the fast.log alerts type to syslog 14 years ago
Victor Julien d424ac7c61 Fix nfq lockup due to improper handling of PKT_PSEUDO_STREAM_END packets. 14 years ago