353 Commits (7afc2e3aed27beab3002923dd9c8d249b3a7e3e9)

Author	SHA1	Message	Date
Victor Julien	b31ffde6f4	output: remove error codes from output	4 years ago
Victor Julien	39f5c7f56a	error: use SC_EINVAL for invalid input	4 years ago
Victor Julien	cdd52dc8cd	detect/mpm: output cleanups	4 years ago
Juliana Fajardini	5f4bcfe313	detect/engine: fix typos in assorted files	4 years ago
Philippe Antoine	c5cf2967b3	detect: fix integer warnings ... Ticket: #4516	4 years ago
Philippe Antoine	45d1a9ae77	detect: faster linked list copy ... In DetectAppLayerInspectEngineCopyListToDetectCtx Avoid quadratic complexity by remembering last element of the linked list we are inserting into	4 years ago
Philippe Antoine	f30975fb16	app-layer: fix integer warnings ... Ticket: 4516	4 years ago
Victor Julien	087151ddc3	detect/mpm: initialization micro optimization	4 years ago
Victor Julien	54a6dd09dd	detect: pattern id assignment through hash table ... Only consider active part of the pattern for mpm (so consider chop). Move data structure to hash list table over the custom array logic.	4 years ago
Victor Julien	9e6370ae2e	detect: optimize mpm-engine setup ... Instead of a loop over the rules in a group *per engine* do a single loop in which all the engines are prepared in parallel.	4 years ago
Victor Julien	3352c0bee4	detect: initialization optimization ... A lot of time was spent in `SigMatchListSMBelongsTo` for the `mpm_sm`. Optimize this by keeping the value at hand during Signature parsing and detection engine setup.	4 years ago
Philippe Antoine	529678d501	dns: wrap with HAVE_LUA ... This is just code style, to minimize the compiled code.	5 years ago
Victor Julien	f6f124f283	detect/engine: support frames ... Implement the low level detect engine support for inspecting frames, including MPM, transforms and inspect API's.	5 years ago
Victor Julien	ecce116117	detect/fast_pattern: allow for rule time registration ... In preparation of more dynamic logic in rule loading also doing some registration, allow for buffers to be registered as fast_patterns during rule parsing. Leaves the register time registrations mostly as-is, but copies the resulting list into the DetectEngineCtx and works with that onwards. This list can then be extended.	5 years ago
Victor Julien	5bcaae0a01	detect: use hashes for all buffer to id ... Instead of a map that is constantly realloc'd, use 2 hash tables for DetectBufferType entries: one by name (+transforms), the other by id. Use these everywhere.	5 years ago
Victor Julien	ed87784907	detect: enforce max app-layer progress ... Allow progress values in the range 0-47 so we have 48 bits to track prefilter engines. Mark bits 48-62 as reserved explicitly. Add debug validation checks to make sure the reserved space isn't used.	5 years ago
Victor Julien	ce18f4b8e2	detect/mpm: micro optimization for initialization ... Do less expensive check first.	5 years ago
Philippe Antoine	bbbb816ed6	detect: debug validation for list ids overflows	5 years ago
Victor Julien	86681c9d7c	detect: move init only array to init data	5 years ago
Victor Julien	975062cf40	detect: track base id for xform buffers ... Buffers with transforms are based on the non-transformed "base" buffer, with a new ID assigned and the transform callbacks added. This patch stores the id of the original buffer in the new buffer inspect and prefilter structures. This way the buffers with and without transforms can share some of the logic are progression of file and body inspection trackers. Related tickets: #4361 #4199 #3616	5 years ago
Victor Julien	e7b5201016	detect/mpm: remove usused cleanup function	6 years ago
Victor Julien	82d7f64630	detect/mpm: improve transforms handling ... Make sure keywords with transforms get their own mpm ctx, instead of sharing it with the 'pure' version of the keyword.	6 years ago
Victor Julien	ee15bd8076	detect/mpm: rename variable to ease code review	6 years ago
Victor Julien	9831839388	detect/mpm: fix hs check	6 years ago
Victor Julien	4726d7027c	detect/mpm: 'mpm-algo' parsing cleanups	6 years ago
Shivani Bhardwaj	6f7d8e50c8	src: use FatalError whenever possible ... Replaces all patterns of SCLogError() followed by exit() with FatalError(). Cocci script to do this: @@ constant C; constant char[] msg; @@ - SCLogError(C, + FatalError(SC_ERR_FATAL, msg); - exit(EXIT_FAILURE); Closes redmine ticket 3188.	6 years ago
Jeff Lucovsky	fb409664d2	detect: byte_math support	6 years ago
Shivani Bhardwaj	537fb7a1c6	hyperscan: better error message if not compiled	6 years ago
Jeff Lucovsky	5d10db88bc	detect/transform: Support transform options ... This commit adds support for transform-specific options. During Setup, transforms have the signature string available for options detection. When a transform detects an option, it should convert the option into an internal format and supply a pointer to this format as the last argument to DetectSignatureAddTransform. Transforms that support options must provide a function in their Sigmatch table entry. When the transform is freed, a pointer to the internal format of the option is passed to this function.	6 years ago
Victor Julien	f903766849	detect/mpm: don't process empty store	6 years ago
Jeff Lucovsky	218a5c4345	mpm: Fix typos and spelling errors	7 years ago
Jeff Lucovsky	db8527e7b3	detect/mpm: Improved handling of variable values ... This commit removes the offset and depth if either of these values are dependent upon a byte-extract operation.	7 years ago
Victor Julien	bdd74d413b	detect/mpm: put transform into 'profile name' ... So that profiling gives more info about cost of the mpm engines when they use transforms.	7 years ago
Victor Julien	d6323ae33d	detect/mpm: improve stats reporting	7 years ago
Victor Julien	4dff903b35	detect: introduce pkt mpm engines ... Instead of the hardcode L4 matching in MPM that was recently introduced, add an API similar to the AppLayer MPM and inspect engines. Share part of the registration code with the AppLayer. Implement for the tcp.hdr and udp.hdr keywords.	7 years ago
Victor Julien	ac694b089a	detect: add udp.hdr sticky buffer	7 years ago
Victor Julien	35be8385eb	detect: tcp.hdr sticky buffer ... Sticky buffer to inspect the TCP header.	7 years ago
Victor Julien	47ef8f5822	detect/mpm: add l4-header support ... Prepare MPM part of the detection engine for a new type of per packet matching, where the L4 header will be inspected. Preparation for TCP header inspection keyword.	7 years ago
Victor Julien	636fb8d387	mpm: track maxdepth ... Track max depth setting per MpmCtx. To make sure the data structure doesn't increase in size change global bool to use a flags field.	7 years ago
Victor Julien	6fcd2db043	tile: remove files	8 years ago
Victor Julien	3f253cb8c0	mpm: rename internal id for ac-tile to ac-ks	8 years ago
Victor Julien	998f32f88c	detect/tls: consolidate validity code	8 years ago
Victor Julien	ccdafe6697	detect/http-server-body: move tests to tests/	8 years ago
Victor Julien	9a8092249e	detect/http-client-body: move tests into tests/	8 years ago
Victor Julien	76fd666cad	detect/http_raw_header: move tests into tests/	8 years ago
Victor Julien	ab027cb481	detect/http_cookie: move tests into tests/	8 years ago
Victor Julien	2f342da048	detect/http_stat_code: move tests into tests/	8 years ago
Victor Julien	5dfba01b2e	detect/http_stat_msg: move tests to tests/	8 years ago
Victor Julien	b469938998	detect/http_raw_host: move raw into regular host logic	8 years ago
Victor Julien	dc43f35427	detect/http_host: move tests into tests/	8 years ago