Richard McConnell
88b98a54df
suricata: add sd_notify support
...
Upon all threads reaching a running state the system generates
a notification for systems running and configured for systemd
Implements feature 5384
(https://redmine.openinfosecfoundation.org/issues/5384 )
2 years ago
Richard McConnell
13beba141c
source: add THV_RUNNING flag to notify of running state
...
Each module (thread) updates its status to indicate running.
Main thread awaits for all threads to be in a running state
before continuing the initialisation process
Implements feature 5384
(https://redmine.openinfosecfoundation.org/issues/5384 )
2 years ago
Eric Leblond
9fb0137d9d
doc: add reference to ipaddr in IP matching
2 years ago
Eric Leblond
94664ef565
datasets: don't exit on invalid data
2 years ago
Eric Leblond
3bd48d9336
detect: doc link for ip.src and ip.dst
2 years ago
Eric Leblond
da8b16eaeb
doc: add ip.dst and ip.src doc
2 years ago
Eric Leblond
3599cbf1c4
doc: document new dataset types
...
Feature: #5383
2 years ago
Eric Leblond
7518204ad4
datasets: introduce new IPv6 type
...
This patch also simplifies IPv6 parsing.
Feature: #5383
2 years ago
Eric Leblond
6fe9d510cf
detect: add ip.dst keyword as sticky buffer
...
Feature: #5383
2 years ago
Eric Leblond
7e516aad94
detect: add ip.src keyword
...
It is a sticky buffer matching on src_ip.
Feature: #5383
2 years ago
Eric Leblond
b2cdc6c899
datasets: introduce ipv4 type
...
This patch introduce the IPv4 type for dataset so Suricata commandmatch
on a set of IPv4 addresses. This is meant to complement iprep feature
for people that needs more flexibility such as settings the IP on
the packet path.
Feature: #5383
2 years ago
Eric Leblond
a9c05c7d96
datasets: factorize serialised operations
...
Ticket: #5184
2 years ago
Eric Leblond
a1a22cccd2
doc: document dataset-lookup
...
Ticket: #5184
2 years ago
Eric Leblond
537fd76787
suricatasc: add dataset-lookup command
...
Ticket: #5184
2 years ago
Eric Leblond
843dba0a28
datasets: add dataset-lookup command
...
Ticket: #5184
2 years ago
Eric Leblond
20973e9e6b
doc: add dataset-clear command
...
Ticket: #5184
2 years ago
Eric Leblond
b63f9e7e93
suricatasc: add dataset-clear command
...
Ticket: #5184
2 years ago
Eric Leblond
2f25e48897
datasets: add dataset-clear command
...
Ticket: #5184
2 years ago
Eric Leblond
c5559cb68f
doc: document dataset-dump command
...
Ticket: #5184
2 years ago
Eric Leblond
a480abcdd0
datasets: add dump via unix socket
...
This patch adds a dataset-dump command to the list of unix socket
commands. Implementation is not optimal as we are locking the
datasets when doing the dump. But if we consider that the current
alternative from an implementation point of view is to stop Suricata
then this is far better than current state.
Ticket: #5184
2 years ago
Shivani Bhardwaj
79a78611ad
release: 7.0.0-beta1; update changelog
2 years ago
Victor Julien
1fafb83fed
packet: turn tunnel lock into spinlock
...
Lock is only held to update/check ints, so spin lock will be more
efficient.
Place the member of Packet in a new "persistent" area to make it
clear this is not touched by the PacketReinit logic.
Ticket: #5592 .
2 years ago
Victor Julien
57e70841c4
stream/tcp: remove obsolete and commented out tests
2 years ago
Victor Julien
e72770c1b2
decode/vxlan/tests: don't memset new packet
2 years ago
Victor Julien
edf93ae5b6
decode/mpls/tests: improve pkt handling; cleanups
2 years ago
Victor Julien
0f7fe2a4c3
app-layer/tests: don't memset new packet
2 years ago
Victor Julien
2f6c014f70
doc/devguide: update packet (de)alloc in unittests
2 years ago
Victor Julien
6dc53447f1
decode/geneve/tests: don't memset packet
...
Packet is already initialized.
2 years ago
Victor Julien
b07c7ad14c
threading: improve/add thread queues explanations
2 years ago
Victor Julien
951bcde0b2
eve/alert: remove tunnel locking
...
Tunnel lock is only used to sync verdict logic.
2 years ago
Victor Julien
0e7adc21a6
decode: alloc packets using calloc
2 years ago
Victor Julien
68a9da52ad
packetpool: remove PKT_ALLOC flag
...
Use Packet::pool instead. If Packet::pool is non-NULL the packet is
owned by a pool. Otherwise it is allocated and should be freed after
use.
2 years ago
Victor Julien
3ed7b4473e
runmodes: remove dead error check
2 years ago
Victor Julien
9d3c60bde3
smtp/mime: no error logging in packet path
2 years ago
Victor Julien
256f0f2c5c
defrag: no error logging in packet path
2 years ago
Victor Julien
8f02a3e415
applayer: make sure to use correct ipproto
2 years ago
Victor Julien
dba7103a96
eve/alert: use flow proto to avoid crash on ICMP
2 years ago
Alice Akaki
51c0714d71
detect-filemd5: convert unittests to FAIL/PASS APIs
...
Task: #4035
2 years ago
Alice Akaki
fe31d51c30
detect-filesha256: convert unittests to FAIL/PASS APIs
...
Task: #4038
2 years ago
dependabot[bot]
c3c8472d09
github-actions: bump actions/upload-artifact from 3.1.0 to 3.1.1
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](3cea537223...83fd05a356
)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
0b0616528f
github-actions: bump actions/download-artifact from 3.0.0 to 3.0.1
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 3.0.0 to 3.0.1.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](fb598a63ae...9782bd6a98
)
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Alice Akaki
ccdc992a71
rust: fix lint warnings about mixed case hex literals
...
Ticket: #4593
2 years ago
Gabriel Lima Luz
4e90d17fd9
rust: fix lint warnings about if same then else
...
Ticket: 4609
2 years ago
Kristina Jefferson
9cd00424c3
rust: fix lint warnings about ptr_arg
...
Ticket: #4599
2 years ago
Jason Ish
21bb697bc9
rust: fix clippy lint for unneeded late initialization
2 years ago
Jason Ish
7cca238128
rust: fix clippy lint for cmp_null is debug code
...
Ticket: 5577
2 years ago
Jason Ish
f0952aef0d
rust: fix clippy lints for unneeded reference in debug code
2 years ago
Jason Ish
6a7439a26b
rust: fix clippy lints for is_empty in debug code
2 years ago
Jason Ish
a11f51f4d3
github-ci: running clippy with all features
...
Without it, it own't see the usage of variables in SCDebugLog macros,
etc.
2 years ago
Jason Ish
560c4ea125
rust: don't allow fixed up clippy lints
2 years ago