Victor Julien
75727c05e0
doc/manpage: add --reject-dev option
5 years ago
Victor Julien
82ac72782d
doc/userguide: update app-proto list
5 years ago
Victor Julien
e6330c354d
doc/userguide: list valid rule actions
5 years ago
Jeff Lucovsky
5e4aa5b851
doc: Improve tos description
...
This commit improves the description of the `tos` keyword by emphasizing
that the value used should adhere to the guidelines in RFC2474. Instead
of specifying the DSCP value directly, right shift the DSCP value and
use that.
5 years ago
Jeff Lucovsky
3005dca3fd
doc: pcrexform documentation
5 years ago
Jason Ish
a77662bdbf
userguide: remove old drop-log documentation
...
Redmine issue:
https://redmine.openinfosecfoundation.org/issues/2381
5 years ago
Jason Ish
8997a114cb
userguide: RDP now enabled by default
...
Redmine issue:
https://redmine.openinfosecfoundation.org/issues/3255
5 years ago
Jason Ish
3eb0461abd
userguide: SIP now enabled by default
...
Redmine issue:
https://redmine.openinfosecfoundation.org/issues/3256
5 years ago
Victor Julien
d0526e71c0
doc/userguide: add IPS with BPF info, minor cleanups
5 years ago
Jason Ish
6b8320d1c0
doc: document file-store v1 to v2 configuration changes
5 years ago
Jason Ish
6850dbc852
suricata.yaml: remove filestore v1 configuration
5 years ago
Victor Julien
e5fd47dcfd
doc/devguide: create basic layout
...
Issue: #3343
5 years ago
Jason Ish
0dd1b2a616
doc: typo: http.server_body should be http.response_body
...
Thanks to Jason Williams for pointing this out.
5 years ago
Victor Julien
a611ae2102
doc/perf: minor improvements
5 years ago
Andreas Herz
1d9db2b5f9
doc: add performance analysis section
5 years ago
Sascha Steinbiss
5598ff5bb3
doc/install: refer to buster as Debian stable
5 years ago
Todd Mortimer
6b4d32c6bb
doc: Update documentation for by_rule and by_both thresholds.
5 years ago
Jeff Lucovsky
5f71e7a371
doc/devguide: Submission and style
...
This commit adds code submission and coding style guidelines to the
devguide. Most of the material is a straight port from the wiki but
there have been some content modifications and additions.
5 years ago
Jason Ish
752e4828d7
devguide: include sources in EXTRA_DIST
...
Required for distcheck to pass, and required to build docs
from a dist archive.
5 years ago
Victor Julien
e97cdb48f3
decode/teredo: implement port support
...
Implement support for limiting Teredo detection and decoding to specific
UDP ports, with 3544 as the default.
If no ports are specified, the old behaviour of detecting/decoding on any
port is still in place. This can also be forced by specifying 'any' as the
port setting.
5 years ago
Jeff Lucovsky
4ad6c5421a
doc: fix documentation typos
5 years ago
Jeff Lucovsky
bc01392e93
doc: Update byte_test documentation
5 years ago
Frank Honza
1c8943dedd
add RFB parser
...
This commit adds support for the Remote Framebuffer Protocol (RFB) as
used, for example, by various VNC implementations. It targets the
official versions 3.3, 3.7 and 3.8 of the protocol and provides logging
for the RFB handshake communication for now. Logged events include
endpoint versions, details of the security (i.e. authentication)
exchange as well as metadata about the image transfer parameters.
Detection is enabled using keywords for:
- rfb.name: Session name as sticky buffer
- rfb.sectype: Security type, e.g. VNC-style challenge-response
- rfb.secresult: Result of the security exchange, e.g. OK, FAIL, ...
The latter could be used, for example, to detect brute-force attempts
on open VNC servers, while the name could be used to map unwanted VNC
sessions to the desktop owners or machines.
We also ship example EVE-JSON output and keyword docs as part of the
Sphinx source for Suricata's RTD documentation.
5 years ago
Victor Julien
ccfdcb55fb
devguide: document new app-layer retvals
5 years ago
Philippe Antoine
6251deae21
doc: adds doc for ipv4.hdr signature keyword
5 years ago
Philippe Antoine
1cd314c500
detect: adds icmpv6.mtu keyword
5 years ago
Jeff Lucovsky
e14447d594
docs/napatech: Correct typo
5 years ago
Shivani Bhardwaj
c5cee05169
doc: Fix typo Generate -> Generator
5 years ago
Shivani Bhardwaj
7b1699c5a8
doc: Add chassis for dev docs
...
Closes redmine ticket 3344.
5 years ago
Philippe Antoine
8396333493
detect: adds icmpv6.hdr keyword
5 years ago
Philippe Antoine
af1361a988
doc: add missing documentation for ipv6.hdr keyword
5 years ago
Jason Ish
d3f6a95b56
doc: removed unified2 output
5 years ago
Jeff Lucovsky
8c132c0b87
doc: Correct RST quote usage
...
Corrects misplaced backticks preventing proper formatting of `mpm-algo`
section.
5 years ago
Jeff Lucovsky
3385859176
doc/userguide: Update for dump-features
5 years ago
Phil Young
3fbcacf9a8
napatech: documentation hardware based bypass support
...
Napatech hardware bypass support enables Suricata to utilize
capabilities of Napatech SmartNICs to selectively bypass flow-based
traffic.
5 years ago
Shivani Bhardwaj
700eebaecc
doc/conf: Update copyright and regex for version
...
Make the new regex in compliance with the modern autoconf syntax.
Closes redmine ticket #3423
5 years ago
jason taylor
1666bc0ad1
doc: minor capitalization fix
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
5 years ago
jason taylor
4f7dc4f136
doc: add bsize documentation and rule example
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
5 years ago
Daisu
fccdb1c642
doc/commandline: -i option is useable several times
5 years ago
Steven Hostetler
4ac5ab00b7
doc/install: fix geoip typo
5 years ago
Victor Julien
411dd69e92
doc/eve: layout and formatting fixes
5 years ago
Jason Williams
55a36c79ff
doc: update http keywords documentation
5 years ago
jason taylor
95237f9894
docs: update datasets examples
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
5 years ago
EmilienCourt
50bb8d4cb2
doc: fix typo on example
...
Quotes have been forgotten in the dnp3.data example, which throws an
SC_ERR_INVALID_SIGNATURE(39) if used like in the example.
5 years ago
Eric Leblond
9ef2f81ee7
doc/userguide: fix typo
5 years ago
Eric Leblond
821d590f5b
doc/userguide: fix base64 example
...
Add a sticky buffer example and fix the content modifier one.
5 years ago
Pascal Delalande
8e6a2bd42e
doc: removal of disable-rust and path typo for suricatasc
5 years ago
Victor Julien
d5ae68afc2
doc: fix version in install doc
5 years ago
Victor Julien
1c27a99827
doc: add upgrade page
5 years ago
Jason Ish
718fcbb682
doc: document eve/dns v2 as the default
...
Adds eve/dns v2 format documentation. Update legacy format
to require the version field.
5 years ago