9802 Commits (8a94b93b7b93e00ac9729998728aae4a042dc3cf)

 

All Branches   

Search

Author	SHA1	Message	Date
Jeff Lucovsky	8a94b93b7b	doc: Anomaly logging documentation ... This changeset adds discussion of anomaly log records and the anomaly log record format.	7 years ago
Jeff Lucovsky	462a4e2b5b	detect/analyzer: Improve warning message ... This changeset modifies the warning printed when a rule is determined to detect in both directions.	7 years ago
Eric Leblond	5d76f0897c	af-packet: remove rollover reference ... This patch removes reference to rollover in the configuration file and add warnings when it is used.	7 years ago
Philippe Antoine	037d50ef06	signature: fix overflow in parsing	7 years ago
Philippe Antoine	3e12066819	http: adds events for each libhtp log ... Fixes #997	7 years ago
Mats Klepsland	3c57ac144c	detect-ssl-version: move unittests to tests/	7 years ago
Mats Klepsland	238797cc66	detect-ssl-state: move unittests to tests/	7 years ago
Mats Klepsland	479e73b98e	detect-tls-version: move unittests to tests/	7 years ago
Mats Klepsland	767bde5e74	detect-tls-cert-validity: move unittests to tests/	7 years ago
Mats Klepsland	a260a57b68	detect-tls-sni: move unittests to tests/	7 years ago
Mats Klepsland	adb4da3975	detect-tls-ja3-string: move unittests to tests/	7 years ago
Mats Klepsland	74a7b7e3cf	detect-tls-ja3-hash: move unittests to tests/	7 years ago
Mats Klepsland	5d3b94b3e4	detect-tls-cert-subject: move unittests to tests/	7 years ago
Mats Klepsland	0d728ee4c6	detect-tls-cert-serial: move unittests to tests/	7 years ago
Mats Klepsland	e125e58c97	detect-tls-cert-issuer: move unittests to tests/	7 years ago
Mats Klepsland	3646234ac5	detect-tls-cert-fingerprint: move unittests to tests/	7 years ago
Mats Klepsland	12d37b8b2c	detect-tls: tidy up unittests ... By doing the following: - removing unnecessary locks - moving variable declarations - removing redundant function 'SigCleanSignatures'	7 years ago
Mats Klepsland	15012fc908	ja3: check if JA3 is disabled on one line	7 years ago
Mats Klepsland	285855d928	detect-tls: remove NULL settings from keyword registration	7 years ago
Mats Klepsland	008f08c1b3	detect-tls: declare ssl_state as const in GetData()	7 years ago
Mats Klepsland	0f7f35bd85	detect-tls: check return values of functions on setup ... Check the return values of DetectBufferSetActiveList() and DetectSignatureSetAppProto().	7 years ago
Mats Klepsland	1c04d7cdae	detect-tls: remove confusing underscores from variables ... Remove confusing underscore prefix from variables in GetData() for all tls keywords.	7 years ago
Mats Klepsland	7020cffaa8	userguide: 'sticky' instead of 'Sticky' for all tls keywords	7 years ago
Jeff Lucovsky	de983fb7c9	app-layer-ftp: Potential memory leak fixed ... Ensure that when handling failures during STOR command processing, that all memory is freed on the error path.	7 years ago
Mats Klepsland	03d986dd55	userguide: add documentation for tls.certs keyword	7 years ago
Mats Klepsland	ba857e9739	detect: add tls.certs keyword ... Add keyword to do "raw" matching on each of the certificates in the TLS certificate sticky buffer. Example: alert tls any any -> any any (msg:"tls.certs test"; tls.certs; \ content:"|01 02 03 04|"; sid:1;)	7 years ago
Victor Julien	edae50de94	detect/ssh: fix ssh.protoversion memory leak	7 years ago
Victor Julien	567a7c3cef	detect/ssh: mark old ssh keywords as deprecated	7 years ago
Victor Julien	d623dc4ac0	detect/parse: add flag to indicate keyword is deprecated ... Issue warning when it is still used.	7 years ago
Victor Julien	b84eba80aa	detect/nfs.version: minor cleanups	7 years ago
Victor Julien	2ea11da230	detect/nfs: add nfs.version	7 years ago
Victor Julien	3299f007f8	detect/dcerpc: add dcerpc.iface ... Keep dce_iface as an alias.	7 years ago
Victor Julien	cdff1d50b7	detect/dcerpc.opnum: minor code cleanups	7 years ago
Victor Julien	6840e5c7df	detect/dcerpc: add dcerpc.opnum as new name for dce_opnum	7 years ago
Jeff Lucovsky	cc492c50c8	eve/logging: disable anomaly logging by default ... Disable anomaly logging by default. Networks with excessive issues may experience packet processing degradation.	7 years ago
Philippe Antoine	b6b7778e2d	http: adds event for header repetition	7 years ago
Jason Ish	9d8eb7b5f0	filestore: remove jansson ifdefs ... Jansson is now required.	7 years ago
Jason Ish	3dc973d4b1	eve/file: remove rust and jansson ifdefs. ... Both Rust and Jansson are required now.	7 years ago
Jason Ish	42c327adc4	filestore: fix leak in contructing json ... Use json_array_append_new instead of json_array_append to transfer ownership of the integer object to jansson so it gets freed. Redmine issue: https://redmine.openinfosecfoundation.org/issues/2961	7 years ago
Victor Julien	ddfcf76c57	detect/engine: make DetectAppLayerMpmRegister decprecated	7 years ago
Victor Julien	752bb1c410	detect/dnp3: add dnp3.data with v2 api support ... Adds MPM support as well. Add TxDetectFlags support to the parser to avoid duplicate matches.	7 years ago
magenbluten	09a21627d5	filestore: fix dropping of unwanted files (Issue #2853)	7 years ago
Victor Julien	9132e4032a	files: open files with track id only	7 years ago
Victor Julien	3b31bad855	detect/dce_stub_data: add dcerpc.stub_data ... Also use v2 API for inspect and mpm registration.	7 years ago
Victor Julien	d270a7603a	detect/inspect: add flags to inspect buffer	7 years ago
Victor Julien	32fb7d773a	detect/content-inspect: turn void arg into Packet ... Replace the 'void *data' argument by a 'Packet *p' as this was the only user left of the data pointer.	7 years ago
Victor Julien	b7a7517273	detect/dce_stub_data: minor cleanups	7 years ago
Victor Julien	55db6d6fb4	detect/dcerpc: move endian handling from pointer to flags	7 years ago
Victor Julien	b2638f7195	detect/krb5: add krb5.sname and krb5.cname	7 years ago
Victor Julien	aefce4d761	detect/nfs: remove HAVE_RUST guards	7 years ago