16219 Commits (7b730c2e682eba8c769d01e56f2568dc0fbfcc67)

 

All Branches   

Search

Author	SHA1	Message	Date
Victor Julien	7b730c2e68	pcap-file: improve setvbuf implementation ... Make optional through `pcap-file.buffer-size` config option. Make sure to check through configure. Ticket: #7155.	2 years ago
Jason Ish	5f2aef7777	pcap-file: use larger buffer for reading pcap files ... Inspired by a recent Zeek blog post, this could speed up PCAP processing by a few percent. Ticket: #7155.	2 years ago
Victor Julien	96a0ffadde	packetpool: allow larger max-pending-packets ... Original limit was due to a specific data structure.	2 years ago
Philippe Antoine	304271e63a	rust: compatibility with cbindgen 0.27 ... Ticket: 7206 Cbindgen 0.27 now handles extern blocks as extern "C" blocks. The way to differentiate them is to use a special comment before the block.	2 years ago
Giuseppe Longo	564a6c9a20	rust/ldap: handle GAPs ... Following the same logic as for PGSQL, if there is a gap in an LDAP request or response, the parser tries to sync up again by checking if the message can be parsed and effectively parses it on the next call. Ticket #7176	2 years ago
Giuseppe Longo	6a606ff21e	rust/ldap: add pdu frames ... This adds a pdu frame for both request and response, and removes invalid returns in SCLdapParseRequest and SCLdapParseResponse. Ticket #7202	2 years ago
Giuseppe Longo	edf70276d6	rust/ldap: enable parser for udp ... This introduces a new parser registration function for LDAP/UDP, and update ldap configuration in order to be able to enable/disable a single parser independently (such as dns). Also, GAPs are accepted only for TCP parser and not for UDP. Ticket #7203	2 years ago
Juliana Fajardini	246acc7140	userguide: clarify flow:stateless explanation ... While not incorrect, the previous wording made the sentence almost paradoxical. While at it, also highlight a side effect that might not be so clear to users. Related to Bug #6976	2 years ago
Philippe Antoine	ede77bc4db	rfb: move app-layer registration code to rust ... Ticket: 7178	2 years ago
Philippe Antoine	62a186ceef	detect/rfb: move keywords to rust ... Ticket: 7178 On the way, convert rfb.secresult to a generic integer with enumeration cf ticket 6723	2 years ago
Philippe Antoine	a673e1913b	ssh/frames: avoid unsigned integer overflow ... Fixes: 0b2ed97f36 ("ssh: frames support")	2 years ago
dependabot[bot]	6d8fbf364a	github-actions: bump ossf/scorecard-action from 2.3.3 to 2.4.0 ... Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.3.3 to 2.4.0. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](dc50aa9510...62b2cac7ed) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2 years ago
dependabot[bot]	9436631f33	github-actions: bump github/codeql-action from 3.25.11 to 3.25.15 ... Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.11 to 3.25.15. - [Release notes](https://github.com/github/codeql-action/releases) - [Commits](https://github.com/github/codeql-action/compare/v3.25.11...v3.25.15) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 years ago
Philippe Antoine	61cb14d272	detect: make events prefilterable ... Ticket: 6728	2 years ago
Philippe Antoine	bd23185f7d	detect: minor optimization for tx ... do not bother to clean the buffers, if we did not run detection for this transaction.	2 years ago
Philippe Antoine	3ad15f5c37	detect/tx: avoid a call to memset ... just initialize the small struct to zero	2 years ago
Victor Julien	fa9cae3899	doc/userguide: document logging changes from 6 to 7 ... Minor other logging related improvements like clarifying language and improving formatting for pdf output.	2 years ago
Philippe Antoine	42e5e556e5	rust/ike: fix collapsible_match clippy warning ... warning: this `match` can be collapsed into the outer `match` help: the outer pattern can be modified to include the inner pattern	2 years ago
Philippe Antoine	564f685eea	rust: fix byte_char_slices clippy warnings ... warning: can be more succinctly written as a byte str --> src/mime/smtp.rs:762:37 | 762 | mime_smtp_find_url_strings(ctx, &[b'\n']); | ^^^^^^^^ help: try: `b"\n"` | = help: for further information visit https://rust-lang.github.io/rust-clippy/master/index.html#byte_char_slices = note: `#[warn(clippy::byte_char_slices)]` on by default	2 years ago
Philippe Antoine	3f8251bd47	fuzz: make confyaml.c an explicit source ... Ticket: 7181 Allows confyaml.c to be in the release archive	2 years ago
Philippe Antoine	f96994fb3b	source: fix -Wshorten-64-to-32 warnings ... Ticket: #6186	2 years ago
Philippe Antoine	4ae5799720	log: fix -Wshorten-64-to-32 warnings ... Ticket: #6186	2 years ago
Philippe Antoine	87eb4b5077	output/tx: use dynamic number of app-layer protos ... Ticket: 5053	2 years ago
Philippe Antoine	323610c1e8	output: use dynamic number of app-layer protos ... Ticket: 5053	2 years ago
Philippe Antoine	dacb965fb8	runmodes: use dynamic number of app-layer protos ... Ticket: 5053	2 years ago
Philippe Antoine	089d2b11fd	frames: remove unneeded comments ... Used by documentation with the SIP frames only	2 years ago
Philippe Antoine	ef42f835eb	ssh: avoid panic in packet path ... use debug_validate_bug_on instead	2 years ago
Philippe Antoine	6ae294c770	detect: run frames on pseudo flush packets ... for SSH packets that mark the end of plaintext	2 years ago
Philippe Antoine	0b2ed97f36	ssh: frames support ... Ticket: 5734 Adds frames for SSH records, that come after banner, and before the data is encrypted. These records may contain cipher lists for instance.	2 years ago
Victor Julien	da1645b3e1	rust: bump time to most recent ... Fixes build on rustc 1.80. Bumps the MSRV to 1.67.1. Bug: #7130.	2 years ago
Victor Julien	058ad87089	rust: set MSRV to 1.67.1 ... This is needed for updating the ``time`` crate.	2 years ago
Victor Julien	e480938724	github-actions: switch dist builders to ubuntu 22.04 ... Part of bumping MSRV. 22.04 is the first Ubuntu release to ship a new enough Sphinx.	2 years ago
Victor Julien	f94988d050	github-actions: update for MSRV 1.67.1	2 years ago
Victor Julien	a0bf282963	rust: address clippy errors	2 years ago
Victor Julien	5bda7b5017	ssh/hassh: fix clippy warning	2 years ago
Shivani Bhardwaj	638b5c4da7	eve/stats: add description for flow stats ... Ticket 6434	2 years ago
Philippe Antoine	7617fe5ab0	ldap: reset tx_index_completed on tx removal ... So, that this index does not overflow	2 years ago
Philippe Antoine	7f6c963ac4	doh2: log like dns v3	2 years ago
Philippe Antoine	8aa2964e73	doh: move fields into dedicated Optional struct ... So as to consume less memory for HTTP2Transaction	2 years ago
Philippe Antoine	6e12475f48	doh2: handle dns message in POST requests ... Ticket: 5773 Handles both directions the same way for data if content type is application/dns-message	2 years ago
Philippe Antoine	bd5ad0d74a	util/profiling: remove assertion ... Now a flow alproto can be changed by a call to AppLayerParserParse when HTTP2 forces the flow to turn into DOH2.	2 years ago
Philippe Antoine	0ccad8fd88	doh: make dns and http keywords for doh2 ... Ticket: 5773	2 years ago
Philippe Antoine	1e82e20c65	doh: implement dns over http2 app-proto ... Ticket: 5773	2 years ago
Philippe Antoine	46d98ae81c	http2: log dns if DoH is recognized ... Ticket: 5773	2 years ago
Philippe Antoine	29d9dc2729	http2: rustfmt	2 years ago
Philippe Antoine	b5f55b5b1f	dns: prepare for dns over http2 support ... by making tx parsing and creation more easily available, without needing a dns state. Dns event NotResponse is now set on the right tx, and not the one before. Also debug log for Z-flag on request says "request" instead of "response" Also rustfmt dns.rs	2 years ago
Philippe Antoine	eff7b52327	build: Wimplicit-int-float-conversion checked with --enable-warnings ... When configure is used with --enable-warnings, we try to add most warning flags that should pass. This commits adds the warning Wimplicit-int-float-conversion	2 years ago
Philippe Antoine	10ef4e832f	runmodes: fix -Wshorten-64-to-32 warnings ... Ticket: #6186	2 years ago
Philippe Antoine	ce2c087e92	defrag: fix -Wshorten-64-to-32 warnings ... Ticket: #6186	2 years ago
Philippe Antoine	bb9a45cfd0	datasets: fix -Wshorten-64-to-32 warnings ... Ticket: #6186	2 years ago