aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
14,412 Commits
7 Branches
155 Tags
194 MiB
master
main-7.0.x
master-6.0.x
master-5.0.x
master-4.1.x
master-4.0.x
master-3.2.x
suricata-7.0.8
suricata-7.0.7
suricata-7.0.6
suricata-6.0.20
suricata-7.0.5
suricata-6.0.19
suricata-6.0.18
suricata-7.0.4
suricata-6.0.17
suricata-7.0.3
suricata-6.0.16
suricata-7.0.2
suricata-6.0.15
suricata-7.0.1
suricata-6.0.14
suricata-7.0.0
suricata-7.0.0-rc2
suricata-6.0.13
suricata-6.0.12
suricata-6.0.11
suricata-7.0.0-rc1
suricata-6.0.10
suricata-6.0.9
suricata-7.0.0-beta1
suricata-6.0.8
suricata-6.0.7
suricata-6.0.6
suricata-5.0.10
suricata-6.0.5
suricata-5.0.9
suricata-6.0.4
suricata-5.0.8
suricata-6.0.3
suricata-5.0.7
suricata-6.0.2
suricata-5.0.6
suricata-6.0.1
suricata-5.0.5
suricata-4.1.10
suricata-4.1.9
suricata-5.0.4
suricata-6.0.0
suricata-6.0.0-rc1
suricata-6.0.0-beta1
suricata-5.0.3
suricata-4.1.8
suricata-4.1.7
suricata-5.0.2
suricata-4.1.6
suricata-5.0.1
suricata-5.0.0
suricata-5.0.0-rc1
suricata-4.1.5
suricata-5.0.0-beta1
suricata-4.1.4
suricata-4.1.3
suricata-4.0.7
suricata-4.1.2
suricata-4.1.1
suricata-4.1.0
suricata-4.0.6
suricata-4.1.0-rc2
suricata-4.1.0-rc1
suricata-4.0.5
suricata-4.1.0-beta1
suricata-4.0.4
suricata-4.0.3
suricata-4.0.2
suricata-3.2.5
suricata-4.0.1
suricata-3.2.4
suricata-4.0.0
suricata-4.0.0-rc2
suricata-3.2.3
suricata-4.0.0-rc1
suricata-4.0.0-beta1
suricata-3.2.2
suricata-3.1.4
suricata-3.2.1
suricata-3.2
suricata-3.2RC1
suricata-3.1.3
suricata-3.2beta1
suricata-3.1.2
suricata-3.1.1
suricata-3.1
suricata-3.0.2
suricata-3.1RC1
suricata-3.0.1
suricata-3.0.1RC1
suricata-3.0
suricata-2.0.11
suricata-3.0RC3
suricata-3.0RC2
suricata-3.0RC1
suricata-2.0.10
suricata-2.0.9
suricata-2.1beta4
suricata-2.0.8
suricata-2.0.7
suricata-2.1beta3
suricata-2.0.6
suricata-2.0.5
suricata-2.1beta2
suricata-2.0.4
suricata-2.1beta1
suricata-2.0.3
suricata-2.0.2
suricata-2.0.1
suricata-2.0.1rc1
suricata-2.0
suricata-2.0rc3
suricata-2.0rc2
suricata-2.0rc1
suricata-2.0beta2
suricata-1.4.7
suricata-1.4.6
suricata-1.4.5
suricata-2.0beta1
suricata-1.4.4
suricata-1.4.3
suricata-1.4.2
suricata-1.4.1
suricata-1.3.6
suricata-1.4
suricata-1.3.5
suricata-1.4rc1
suricata-1.3.4
suricata-1.4beta3
suricata-1.3.3
suricata-1.4beta2
suricata-1.3.2
suricata-1.4beta1
suricata-1.3.1
suricata-1.3
suricata-1.3rc1
suricata-1.3beta2
suricata-1.3beta1
suricata-1.2.1
suricata-1.2
suricata-1.2rc1
suricata-1.2beta1
suricata-1.1.1
suricata-0.8.2
suricata-1.0.0
suricata-1.0.1
suricata-1.0.2
suricata-1.0.3
suricata-1.0.4
suricata-1.0.5
suricata-1.1
suricata-1.1beta1
suricata-1.1beta2
suricata-1.1beta3
suricata-1.1rc1
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '76c71a9120'
${ noResults }
Commit Graph

14412 Commits (76c71a9120a3f1f66b2fd38e21a84b3c9283133a)
 

Author SHA1 Message Date
Victor Julien 233f663053 detect/replace: reduce sm_lists use 2 years ago
Victor Julien 67ef4b15bb detect/pkt_data: remove obsolete tests 2 years ago
Victor Julien 6b27087527 detect/pcre: remove obsolete tests 2 years ago
Victor Julien 243c285fe9 detect/isdataat: remove obsolete test; reduce sm_lists use 2 years ago
Victor Julien 343a7fd900 detect/ftpbounce: remove obsolete tests 2 years ago
Victor Julien 1b1a51efa6 detect/geoip: reduce use of sm_list macro 2 years ago
Victor Julien 8bab0f31b1 detect/dns_query: remove obsolete tests 2 years ago
Victor Julien a66890d60f detect/distance: reduce use of sm_list macro 2 years ago
Victor Julien 34735a54d8 detect/dce_stub_data: remove obsolete tests 2 years ago
Victor Julien 416c5d4bf6 detect/dce_stub_data: remove obsolete tests 2 years ago
Victor Julien 665851d064 detect/content: reduce sm_lists use; remove obsolete tests 2 years ago
Victor Julien 9090739ddb detect/byte_test: use list util in tests; cleanups 2 years ago
Victor Julien df1cf8bbda detect/byte_math: reduce use of sm_list macro 2 years ago
Victor Julien 454d13837e detect/byte_jump: use list util in tests; cleanups 2 years ago
Victor Julien 9a68284d2e detect/byte_extract: reduce use of sm_list macro 2 years ago
Victor Julien af87b105dd detect/base64_decode: remove obsolete test; test cleanups 2 years ago
Victor Julien 0eed8cefdf detect/base64_decode: remove obsolete debug code 2 years ago
Victor Julien 485e31d5fa detect/base64_data: remove obsolete tests 2 years ago
Victor Julien 0d3c551b83 detect/base64_data: remove use of sm_list macro 2 years ago
Victor Julien 501388c912 detect/pcre: use util funcs for buffer test 2 years ago
Victor Julien 0b6ebd13ee detect: add util funcs to get first and last sigmatch for buffer 2 years ago
Philippe Antoine 6bc7f02e13 doc: rules can have http1 as protocol 
Ticket: #5962
 2 years ago
Victor Julien a42c225117 detect/content: add negated endswith test 2 years ago
Jeff Lucovsky c083cbda33 detect/content: Negated endswith matches 
Issue: 5541

This commit handles negated endswith matches.
 2 years ago
Haleema Khan 3531a4abaa rfb: rustfmt rfb.rs 2 years ago
Haleema Khan 3eee311350 rfb: add rfb frames, update tests 
Adds a PDU frame to the RFB parser.
Update function signature in tests to reflect frames

Ticket: 5717
 2 years ago
Victor Julien d3ab33edce detect/app-layer-protocol: remove use of sm_list macro 2 years ago
Victor Julien 5753d95040 detect: reduce sm_lists macro use 2 years ago
Victor Julien 88700f2744 detect/parse: remove obsolete and commented out code 2 years ago
Victor Julien 4a8f269000 detect/pcre: add comment indicating rawbytes is a no-op 2 years ago
Victor Julien 7ea6637d6d detect/content: remove commented tests 2 years ago
Victor Julien 7ac623e0c5 detect/bytemath: fix newline in debug message 2 years ago
Victor Julien 0bbc411743 nfs: fix newline in debug messages 2 years ago
Victor Julien 92d8a712aa detect/content: cleanup content setup/check code 
Pass SigMatch pointer instead of a list id to SigParseRequiredContentSize.
 2 years ago
Jeff Lucovsky fd46c93a8f doc/byte_math: Add divide by 0 discussion. 
Issue: 5945
 2 years ago
Jeff Lucovsky 38c5e89e29 detect/byte_math: fix bug in byte_math detection 
Issue: 5945

Avoid division by zero when the byte_math operation is division and the
rvalue is 0.
 2 years ago
Victor Julien 2ddd26446e pcap: fix return check 
The check that meant to check if pcap_dispatch processed fewer packets
than the desired number was inaccurate. It would also include all errors
(negative return values).

This patch considers only positive values for this check.

Fixes: 9fe08f2374 ("pcap: improve pcap_breakloop support")
 2 years ago
Shivani Bhardwaj 5f52b199ff smtp: enforce line limit even when LF is found 
Before:
If LF character was found, so far, we won't enforce the line limit on
the line. We only enforced limits in case of LF character missing in a
long line.

After this patch:
Line limit is enforced on the line if it is bigger than 4096 Bytes
irrespective of whether LF was found or not.

Redmine Bug: 5819
 2 years ago
Shivani Bhardwaj fd4e0fbafe util/mime: allow delim len 0 when line limit is hit 2 years ago
Shivani Bhardwaj c0bff5f921 smtp: move constant declaration to header 2 years ago
Justin Azoff aacb7dc291 detect/iponly: remove DetectEngineIPOnlyThreadCtx 
This is unused.

Issue: 4578
 2 years ago
Justin Azoff dfbc3da0eb detect/iponly: Reduce the size of the SigNumArray bitsets 
Instead of tracking ip only rules by the internal signum, track them by
a separate counter that starts at zero.  This results in dense
SigNumArrays instead of sparse ones and a much smaller max_idx.

Issue: 4578
 2 years ago
Victor Julien 9fe08f2374 pcap: improve pcap_breakloop support 
When pcap_breakloop has been issued on a handle, the current pcap_dispatch
call may return -2 (PCAP_ERROR_BREAK), but it can also return the number
of processed packets if lower than the desired number. So add this condition
as a check.
 2 years ago
Victor Julien 8a968faa04 detect: only breakloop threads that are lagging 
Sleep after all threads have been checked.

Bug: #5969.
 2 years ago
Victor Julien 5e4cf182ab flow/worker: refresh detect thread during housekeeping 
During housekeeping multiple flows are processed. If a rule reload happens
at that time, we need to use the new detect thread as soon as possible.

Bug: #5969.
 2 years ago
Victor Julien 4176c7df6a flow/worker: remove unused detect thread arg 2 years ago
Philippe Antoine 9adb59bcdb http2: faster when reducing dynamic headers size 
avoid quadratic complexity from removing the first element
and copying all the contents a big number fo times.

Ticket: #5909
 2 years ago
Philippe Antoine caf9940fd1 http: fix multipart completion 
As brought by commit 578f328e06

Ticket: #5952
 2 years ago
Jeff Lucovsky 035863d029 netmap: Forward port packet stall fix 
Issue: 5862

This commit forward ports fixes from master-6.0.x that address packet
stalling that may occur under IPS configurations.
 2 years ago
Cole Dishington b6c5c59bc3 app-layer-dnp3: Fix build for big endian 
Add missing include of util-byte.h for big endian targets that need
SCByteSwap(16|32|64) for DNP3_SWAP(16|32|64).
 2 years ago