42 Commits (844e4dba11867fb9f2b91292a9b73b10a5ec415a)

Author	SHA1	Message	Date
Victor Julien	80d62b59ec	Fix drop (and other actions) not being applied to thresholded packets. Bug #613.	13 years ago
Victor Julien	82fc61770b	threshold: allow threshold.config to override rule ... Allow threshold.conf to override rule thresholds in the following cases: - threshold.config rule uses threshold or event_filter AND - threshold.config rule applies to a single signature (so no gid 0 or sid 0) Confirmed to work with both threshold and detection_filter rule keywords. Part of bug #425.	13 years ago
Eric Leblond	e176be6fcc	Use unlikely for error treatment. ... When handling error case on SCMallog, SCCalloc or SCStrdup we are in an unlikely case. This patch adds the unlikely() expression to indicate this to gcc. This patch has been obtained via coccinelle. The transformation is the following: @istested@ identifier x; statement S1; identifier func =~ "(SCMalloc|SCStrdup|SCCalloc)"; @@ x = func(...) ... when != x - if (x == NULL) S1 + if (unlikely(x == NULL)) S1	13 years ago
Victor Julien	d8667448c1	threshold: allow suppression for sigs with threshold set. Part of #425.	13 years ago
Victor Julien	d8356c5ebd	Windows build and other misc fixes.	13 years ago
Anoop Saldanha	cde31abe96	bug #455 - Warn users on signature event vars having precedence over threshold.conf ones	13 years ago
Victor Julien	988f22ee2e	Free pcre study structs for classification, threshold and reference parsing.	13 years ago
Anoop Saldanha	0c24bbab0c	code cleanup for live swap	13 years ago
Anoop Saldanha	83a8f6e03a	cleanup threshold config de-init	13 years ago
Eric Leblond	2d22f667c2	config: use config file in sysconfdir by default.	13 years ago
Anoop Saldanha	5d22194299	fix failing rate filter unittest	13 years ago
Anoop Saldanha	c34713321a	fix rate filter alert suppression. Log error if rate filter has count of 0. Other minor fixes as well	13 years ago
Victor Julien	c0a2cbd478	Move over src and dst thresholding to use host table. Fix a bug in threshold 'both' handling.	14 years ago
Victor Julien	e237841a8e	Fix compilation with profiling enabled. Minor unittest fixes.	14 years ago
Victor Julien	de5c1d1491	Fix minor fgetc issue.	14 years ago
Victor Julien	cdba2f50d1	Various fixes and improvements based on feedback by Coverity analyzer.	14 years ago
Anoop Saldanha	eb07c345b8	code cleanup - replace SigMatchAppendThreshold with SigMatchAppendSMToList	14 years ago
Anoop Saldanha	bbb9f35f26	code cleanup - replace SigMatchGetLastSM with SigMatchGetLastSMFromLists	14 years ago
Victor Julien	c8c4a76dc6	Move threshold to it's own sig match list.	14 years ago
Victor Julien	28e15be526	Clean up default output. Use simpler output format for releases.	14 years ago
Victor Julien	2d16abcf8b	Minor code cleanups fixing all GCC 4.6 compiler warnings for default, debug and unittests mode.	14 years ago
Victor Julien	362c25ec8a	Fix potential suppression parsing issue found by CLANG.	14 years ago
Eric Leblond	685e0e1a63	Rename rule_type_t to ThresholdRuleType.	14 years ago
Eric Leblond	8787e6f6d0	suppress: use DetectAddress instead of DetectAddressHead	14 years ago
Eric Leblond	7938344e1b	threshold: refactoring of parsing code ... This patch factorize the regular expression to be ease the parsing process. It also adds a missing free and factorize exit code.	14 years ago
Eric Leblond	03c185a3ad	threshold: add suppress keyword ... This patch adds the suppress keyword to the threshold.config file. The alerts are suppressed but the other elements like flowbits are maintained.	14 years ago
Eric Leblond	a56f8dd6b2	doc: introduce doxygen group "threshold" ... This patch introduces a doxygen group to put together the documentation relative to threshold. Group appear in a separate page and they can have their own documentation. This is useful when a feature is splitted into different files.	14 years ago
Gerardo Iglesias Galvan	c968ca0f85	Fix potential small issue with ftell and fseek	14 years ago
Gerardo Iglesias Galvan	44692c83aa	Properly check retval for config and conversion function calls	14 years ago
Gerardo Iglesias Galvan	58f713254e	Make sure return value of fgetc isn't truncated	14 years ago
Eric Leblond	277a384af7	Use already defined macro instead of integer ... Code was using a integer instead of the already defined macro.	15 years ago
Victor Julien	3d60e9bfeb	Clean up output.	15 years ago
Anoop Saldanha	82fd581b64	replace all sm lists (match, pmatch, dmatch, umatch, amatch, tmatch) with an array Signature->sm_lists[]. Replace all Signature->match instances in the engine with Signature->sm_lists[DETECT_SM_LIST_MATCH]	15 years ago
Anoop Saldanha	f094523eb1	clang fix - some minor fixes for unittests	15 years ago
Pablo Rincon	6950537a76	Move rate_filter rule tracking data from Signature to Threshold context	15 years ago
Pablo Rincon	1ae36b9a6a	Adding rate_filter support for threshold.config, multiline support and unittests	15 years ago
Gerardo Iglesias Galvan	9f4fae5b1a	Fix inconsistent use of dynamic memory allocation	15 years ago
William Metcalf	ce01927515	Import of GPLv2 Header 050410	15 years ago
Pablo Rincon	3047135817	Moving inline functions to the .h files, so gcc can inline them correctly	15 years ago
Breno Silva	81abe635c8	Global Threshold config	15 years ago
Victor Julien	26e8a0a06a	Cleanup global threshold code.	15 years ago
Breno Silva	67f2026279	Global Threshold config	15 years ago