15642 Commits (8b3db3c3b515d760ae2ccb83d11a385d9a25804f)

 

All Branches   

Search

Author	SHA1	Message	Date
jason taylor	8b3db3c3b5	doc: update file.name keyword information ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	49dba7bb94	doc: update file.data keyword information ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	bee3aa9709	doc: update http.response_header keyword ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	dcb548106e	doc: update http.request_header keyword ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	3f5d228b9e	doc: update http.host http.host.raw keyword ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	739dfe5e5e	doc: update http.location keyword information ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	9ddd8cf9e0	doc: update http.server keyword information ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	3af98f3b92	doc: update http.response_body keyword information ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	64760e2e75	doc: update http.response_line keyword information ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	566bc0d39c	doc: update http.stat_msg keyword information ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	271321249f	doc: update http.stat_code keyword information ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	71d8488cb5	doc: update http.request_body keyword information ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	c2783e9391	doc: update http.header_names keyword information ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	5eadbc2ff0	doc: update http.start keyword information ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	7e65554462	doc: update http.referer keyword information ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	876dfb99ca	doc: update http.content_len keyword information ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	8ff06c1bc0	doc: update http.content_type keyword information ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	b2854486dd	doc: update http.connection keyword information ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	75436dff9c	doc: update http.accept_lang keyword information ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	f6375e487e	doc: update http.accept_enc keyword information ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	7e3288f5a7	doc: update http keyword normalization notes ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	9e87d89d2e	doc: update http.accept keyword information ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	8307168ae7	doc: update http.user_agent keyword ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	75c4cdfa1c	doc: update http.cookie keyword information ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	ebd5cd61c2	detect: minor http.cookie keyword typo fix ... Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	7a28874c8d	doc: update http.header keyword information ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	b3af723486	doc: remove legacy description/duplicated data ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	292b3eb9b3	doc: update http.request_line keyword information ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	c7f351bd6e	doc: update http.protocol keyword documentation ... Ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	2d0ceedeba	doc: update urilen keyword documentation ... ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	ef118aa582	doc: remove legacy uricontent information ... ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	96e8c10276	doc: update http.uri and http.uri.raw keywords ... ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	bf192926a8	doc: update http.method keyword ... ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	0cce5ba447	doc: add http keyword links ... ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	fd46175203	doc: update http primer information ... ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
jason taylor	54fd35c5b4	doc: remove legacy tables and image references ... ticket: 3025 Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
Victor Julien	34f53f85bc	systemd: reimplement sd_notify logic using UNIX socket ... One of the lessons of the XZ backdoor story was that just linking to libsystemd to call sd_notify is discouraged by the systemd project: Lennart Poettering: "PSA: In context of the xzpocalypse we now added an example reimplementation of sd_notify() to our man page: https://www.freedesktop.org/software/systemd/man/devel/sd_notify.html#Notes It's pretty comprehensive (i.e. uses it for reload notification too), but still relatively short. In the past, I have been telling anyone who wanted to listen that if all you want is sd_notify() then don't bother linking to libsystemd, since the protocol is stable and should be considered the API, not our C wrapper around it. After all, the protocol is so trivial" From: https://mastodon.social/@pid_eins/112202687764571433 This commit takes the example code and uses it to reimplement the notify logic. The code is enabled if Linux is detected in configure. Since the code won't do anything if the NOTIFY_SOCKET env var isn't set, this should also work fine on systems w/o systemd. Ticket: #6913.	1 year ago
Daniel Olatunji	6d40517502	detect/analyzer: add more details for the tcp ack keyword ... Issue: 6354 Added the DETECT_ACK case to detect-engine-analyzer.c	1 year ago
Victor Julien	561b81dd9e	decode: don't clear computed csums twice ... Already done in a generic way by PACKET_RESET_CHECKSUMS.	1 year ago
Victor Julien	40afbf5b09	decode/ipv4: remove unused field	1 year ago
Victor Julien	3077310ff1	output/eve: constify mac address logic	1 year ago
Victor Julien	1213936978	macset: constify addr parameters	1 year ago
Victor Julien	2236c1fcc6	decode/udp: no need to pack the structure	1 year ago
Victor Julien	7c90144d19	decode/tcp: no need to pack the structure	1 year ago
Victor Julien	a1a9b41a71	decode/icmpv4: no need to pack the structure	1 year ago
Victor Julien	ff50dc49ef	configure: tabs to spaces; minor reformatting	1 year ago
Victor Julien	e557ba0460	unittests: don't set ports for non-port proto	1 year ago
Victor Julien	e651cf922a	detect/http: fix compile warning in body tests ... When --enable-unittests w/o --enable-debug is used.	1 year ago
Victor Julien	f6c24aab57	detect/ipproto: clean up test	1 year ago
Victor Julien	4e1ae1c3bf	detect/fragbits: remove unused IP header struct from tests	1 year ago