106 Commits (89baf93a40f10c6cec5714836b13437d9bf686d4)

Author	SHA1	Message	Date
Breno Silva	89baf93a40	Reference Support	15 years ago
Pablo Rincon	e7a989e305	IP Only Engine using radix trees	15 years ago
Anoop Saldanha	97d49d8f5e	support for http_client_body keyword	15 years ago
Victor Julien	26e8a0a06a	Cleanup global threshold code.	15 years ago
Breno Silva	67f2026279	Global Threshold config	15 years ago
Pablo Rincon	b708d7f65d	Adding Uricontent inspection with spm. Modifiers for uricontent are now supported	15 years ago
Victor Julien	e3552a8e3f	Add more comments to detect and flow structures.	15 years ago
Gerardo Iglesias Galvan	ef2ae76c42	Add support for detection_filter keyword	16 years ago
Victor Julien	297001c6d9	Only process a app layer sig if it has the proper state. Make sure a sig can't have conflicting sigmatches, such as ftpbouce and uricontent.	16 years ago
Victor Julien	ec47f840f3	Remove more scan references.	16 years ago
Victor Julien	bee4e04664	More scan/search related cleanups.	16 years ago
Victor Julien	f298fec872	Make sure nocase applies to the last pattern, content or uricontent.	16 years ago
Victor Julien	8b30226914	Detection keyword cleanup	16 years ago
Victor Julien	b259e362cd	Convert uricontent to use new scanning methods as well. Move http_method and http_cookie keywords out of pmatch list for now.	16 years ago
Victor Julien	bef70a04ce	First stage of detect engine redesign: equal patterns share id's, search phase no longer used, new match verification phase.	16 years ago
Victor Julien	50e41817a7	Share content id's between identical patterns.	16 years ago
Pablo Rincon	25a3a5c6d8	Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.	16 years ago
Victor Julien	dc11247511	Change the way we replace contents by http_method and http_cookie, fixing #90.	16 years ago
Pablo Rincon	38dc7ffebc	Adding settings for detect engine group config	16 years ago
Anoop Saldanha	8cf60d6645	Changed the way cuda dispatcher passes back results. Now each detection thread has it's own queue to which the dispatcher can pump packets back to the detect thread. Also, with cuda enabled and a non-cuda mpm being used, we won't create a dispatcher and instead call the b2g scan/search funtions directly instead of using the dispatcher.	16 years ago
Anoop Saldanha	41e6735b92	mpm b2g cuda support added	16 years ago
Victor Julien	defc6595c6	Make pcre P have it's own sm type.	16 years ago
Breno Silva	7e299834d2	FragOffset Rule Keyword	16 years ago
Victor Julien	b3bcba077f	Only inspect http flows against uri sigs, clean up uri scanning code.	16 years ago
Gurvinder Singh	356a8bf385	applayer uri match and modified http handling	16 years ago
Gurvinder Singh	f6b0c481b0	urilen support for engine	16 years ago
Breno Silva	1d055b0e09	ICMP Seq Rule Keyword	16 years ago
Brian Rectanus	c22d42693a	Added http_method rule keyword.	16 years ago
Anoop Saldanha	f684989f98	dce_iface, dce_opnum, dce_stub_data keyword support	16 years ago
Anoop Saldanha	bc4df59414	Support for Classtype keyword and Classification Config file	16 years ago
Victor Julien	d5c732f1f9	Add tag keyword stub	16 years ago
Victor Julien	4824868766	Application layer detection improvements ... - improve locking of application layer handling, making sure that the flow cannot be freed/cleared when the detection engine is still working with it. - add a check to the app layer detection to make sure that a match function will only inspect an app layer state if it's of the right type.	16 years ago
Pablo Rincon	f2f9b83280	Adding FTP app layer parser and ftpbounce detection at L7	16 years ago
Victor Julien	6ab64706b0	Improve threshold hash table handling.	16 years ago
Gerardo Iglesias Galvan	7e87f373b9	Add icmp_id keyword support	16 years ago
Victor Julien	493715c0d2	Implement alert sid storage in the flow so we can check previous alerts in the flow.	16 years ago
Victor Julien	9fd46e9425	Support for sigs with both pkt and applayer detect ... Sets a flowbit with the sig id if the packet matches match. Checks on that if the app layer matches match. Currently misuses the flowbits api for this in a way that needs fixing.	16 years ago
Breno Silva	69eb869cc9	Threshold Rule	16 years ago
Gurvinder Singh	a0f184866c	http_cookie keywork support	16 years ago
Gerardo Iglesias Galvan	b254719ffc	Add fatal failures on unittest and siginit failure (using Conf API)	16 years ago
Pablo Rincon	1ad6d75dfe	Added rpc keyword support at packet level	16 years ago
Pablo Rincon	a8d7b71490	First version of flowints	16 years ago
Gerardo Iglesias	991d421394	Changed printf's to logging API functions	16 years ago
Pablo Rincon	6206ffb530	Adding bidirectional operator support and unittests	16 years ago
Victor Julien	f1f7df0766	First iteration of doing app layer detection.	16 years ago
Anoop Saldanha	6ca5dbc9e9	Support fast_pattern modifier keyword for content	16 years ago
Anoop Saldanha	1c7ac13c25	Support for negated content	16 years ago
Pablo Rincon	f233f9fa31	Adding detect_content chunks handling for max_pattern_length and unittests. Updating modifiers to use it.	16 years ago
Victor Julien	d6be6ceb19	Fixup artifact from automatic renames: rename DetectAddresssHead to DetectAddressHead.	16 years ago
Gurvinder Singh	cacbf31aad	support for ttl keyword	16 years ago