108 Commits (706b046966e8dc37f3b3de38c433668b2fab99ba)

Author	SHA1	Message	Date
Victor Julien	80fb33c651	Fix libhtp htp_tx_get_response_headers_raw 'detection' for bundled libhtp.	13 years ago
Victor Julien	227d6e058c	Make sure new rule and doc files are part of the dist.	13 years ago
Victor Julien	5886ef8249	Don't print error about missing git repo if building from tarball. Don't define REVISION in that case.	13 years ago
Victor Julien	1ac6054c23	Clean up configure check for htp_tx_get_response_headers_raw. Misc changes.	13 years ago
Anoop Saldanha	4acd5a04e6	Enable http raw response header inspection only if libhtp supports raw response header buffering which should be available post 0.2.6	13 years ago
Eric Leblond	3d558bf06f	pcre: compile jit by default if available.	13 years ago
Chris Wakelin	2aa04add54	Fix PF_RING BPF filter availability check	13 years ago
Victor Julien	842b01cc9c	Remove duplicate sys/prctl.h configure check. Wrap another include in HAVE_SYS_PRCTL_H.	13 years ago
Eileen Donlon	aaa5a78dfe	Moved prctl.h check to configure	13 years ago
Victor Julien	f4a6f4b293	Add libmagic detection, linking and a basic API.	13 years ago
Eric Leblond	43ffd779f8	autotools: add libpcap dependencyto pfring for checks. ... PF_RING seems to depend on pcap if bfp filter is activated. For this reason, not having the dependency during configure test causes a failure in feature detection.	14 years ago
Eric Leblond	0ac1cabf2a	autotools: fix problem of pfring configuration.	14 years ago
deltay	d5e254d504	Add pfring bpf filter, require pfring >= 5.1	14 years ago
Victor Julien	fb76561b09	Set version to 1.2dev to reflect we're in the 1.2 branch.	14 years ago
Victor Julien	c484b7a59e	Bump version to 1.1 (final)	14 years ago
Victor Julien	9f0e3f7c85	Bump version to 1.1rc1.	14 years ago
Eric Leblond	391d813c82	Remove unified1 output module.	14 years ago
Victor Julien	c0bc83458c	Bump version to 1.1beta3.	14 years ago
Eric Leblond	50ddd2df43	Restore old barnyard2 support. ... Some old version of barnyard2 were needing a workaround in the packet header building. THis patch introduces a enable-old-barnyard2 configure flag which can be used to restore this behaviour.	14 years ago
William Metcalf	3b3f5816bf	You spin me right round baby, right round like a rotating packet capture right round. Oh, also log file size counters are now uint64_t	14 years ago
Victor Julien	3d396e8b1e	Update PCRE JIT code to support official JIT implementation in pcre-8.20-RC1.	14 years ago
Eric Leblond	5656e34459	Fix compilation on FreeBSD 8.2 ... FreeBSD has a recent version of autotools which induces some issues. This patch fixes it by improving headers detection code in configure.in.	14 years ago
Eric Leblond	e80b30c082	af-packet: finalize code ... This patch handles the end of AF_PACKET socket support work. It provides conditional compilation, autofp and single runmode. It also adds a 'defrag' option which is used to activate defrag support in kernel to avoid rx_hash computation in flow mode to fail due to fragmentation. This patch contains some fixes by Anoop Saldanha, and incorporate change following review by Anoop Saldanha and Victor Julien. AF_PACKET support is only build if the --enable-af-packet flag is given to the configure command line. Detection of code availability is also done: a check of the existence of AF_PACKET in standard header is done. It seems this variable is Linux specific and it should be enough to avoid compilation of AF_PACKET support on other OSes. Compilation does not depend on up-to-date headers on the system. If none are present, wemake our own declaration of FANOUT variables. This will permit compilation of the feature for system where only the kernel has been updated to a version superior to 3.1.	14 years ago
Eric Leblond	c45d898572	af-packet: basic support for AF_PACKET socket ... This patch provides basic support for AF_PACKET socket. It is completed by a subsequent patches prodiding extended features and bugfixes.	14 years ago
William	6408febaec	Only check for PF_RING if we enable PF_RING.	14 years ago
William	1099093e0f	Support for PF_RING versions where packet passed as a reference and version 4.7.1 where pfring_enable_ring now seems to be required.	14 years ago
Martin Beyer	2f1262b446	fixed cuda build: portability issues and nvcc version check	14 years ago
Martin Beyer	49d66430bc	build cuda modules with make	14 years ago
Victor Julien	b73939bcef	Clean up & better check includes to allow Windows to build.	14 years ago
Victor Julien	6be38123f0	Cleanup configures pcre sljit test.	14 years ago
William	d74fe520e5	Experimental support for PCRE-sljit enable via --enable-pcre-sljit	14 years ago
Victor Julien	36917c7d66	Fix not using new htp callback when using the bundled htp. Add indication to --build-info. Fix valgrind warning in test and further improve test.	14 years ago
Victor Julien	a3e2b35536	Add configure check for new htp 0.2.5 uri normalize hook.	14 years ago
Victor Julien	38a7d1777f	Bump version to 1.1beta2	14 years ago
Eric Leblond	4e9231266a	Compilation fix for OpenBSD and win32. ... This patch fixes compilation on OpenBSD platform. It is running fine on a pcap file. The patch should also fix compilation on WIN32 platform but this is not tested.	14 years ago
Eric Leblond	0044bb221b	Add suricata unittests to 'make check' ... This patch adds a run of suricata's unittests to 'make check'	14 years ago
Eric Leblond	7c841e1d7c	Add coccinelle check to 'make check' ... This patch adds coccinelle checking to the autotools 'make check'.	14 years ago
Victor Julien	c9f9e3f9a4	Add configure check for signed or unsigned nfq_get_payload, adapt code.	14 years ago
Eric Leblond	2600d203cc	Fix typo in configure.in ... Signed-off-by: Eric Leblond <eric@regit.org>	14 years ago
Eric Leblond	1e600c1054	source-nfq: add simulated non-terminal NFQUEUE verdict ... This patch adds a new mode for NFQ inline mode. The idea is to simulate a non final NFQUEUE rules. This permit to do send all needed packets to suricata via a simple FORWARD rule: iptables -I FORWARD -m mark ! --mark $MARK/$MASK -j NFQUEUE And below, we have a standard filtering ruleset. To do so, suricata issues a NF_REPEAT instead of a NF_ACCEPT verdict and put a mark ($MARK) with respect to a mask ($MASK) on the handled packet. NF_REPEAT verdict has for effect to have the packet reinjected at start of the hook after the verdict. As it has been marked by suricata during the verdict it will not rematch the initial rules and make his way to the following classical ruleset. Mode, mark and mask can be configured via suricata.yaml file with the following syntax: nfq: repeat_mode: (false|true) mark: $MARK mask: $MASK Default is false to preserve backward compatibility. Signed-off-by: Eric Leblond <eric@regit.org>	14 years ago
Eric Leblond	72ec56ab23	source-nfq: autodetection of queue max length function ... Signed-off-by: Eric Leblond <eric@regit.org>	14 years ago
Victor Julien	627c02e300	Use a different way of getting a short git rev that is compatible to older git versions.	14 years ago
Victor Julien	e3bde3e95d	Add a simple revision based on the git rev to the version number, like a build number.	14 years ago
Victor Julien	96ec2a76c6	Update version to 1.1beta1	14 years ago
Victor Julien	99ad338e91	Bump version to 1.0.2	15 years ago
Victor Julien	610b7702ba	Bump version to 1.0.1	15 years ago
William Metcalf	9f1d779a28	pkg-config detection added to configure.in added to install doc except for OSX	15 years ago
Victor Julien	a4951286e9	Bump version to 1.0.0	15 years ago
Victor Julien	1fb11e939a	Improve configure messages. Make sure CUDA doesn't try to process packets that are too big.	15 years ago
Victor Julien	e685579231	Add optional structure validation code.	15 years ago