Commit Graph

26 Commits (8bc0a2e465eddd46c991018051d71c22d5b04e1e)

Author SHA1 Message Date
Victor Julien 668e9514d7 Pool update. Stream reassembly start. 17 years ago
Victor Julien 9c7f5afa79 Large update: pcap support, threading fixes, initial stream tracking, time handling, pool support, runmodes, decoders added, autojunk update. 17 years ago
Victor Julien ff4b5a5db7 Add support for flowbits. 17 years ago
Victor Julien 657be002d1 Big detection engine update: scan improvements, b2g/b3g updates, bloom fixes, iponly detection implementation, dsize/flow grouping. 17 years ago
Victor Julien 5df5b35e90 Put all globals in the detection engine ctx. Add HashList type, a hash that also stores the items ina list to it can be traversed. Many cleanups. 17 years ago
Victor Julien b2eb954099 Add b3g 3gram BNDM pattern matcher. Fix multi queue nfq initialization. Improve speed of b2g and wumanber. 17 years ago
Victor Julien 1c0ad1d415 Add implementation of the Simple BNDM 2gram pattern matcher algorithm. 17 years ago
Victor Julien 4c4862d838 Improve logging, add alert-output module, at module exit stats, add HTTP POST uri capture. 17 years ago
Victor Julien 9b07710389 Add hashing and bloomfilter api's: now include buildsys update 17 years ago
Victor Julien c4f2fe4bd7 Implement per packet variables and switch the http stuff to it. 17 years ago
William Metcalf 7006085195 udp decoding added icmp unreachables added to reject 17 years ago
Victor Julien ebf41c3b1e Remove obsolete decode-http files. 17 years ago
Victor Julien 1cb274a39a Update build sys 17 years ago
Victor Julien f3a94413db Properly support 'alert ip' rules. Add support for handling ip only rules differently. 17 years ago
Victor Julien dc48c58473 Switch to using a detection engine ctx. 17 years ago
William Metcalf 0ffa1c2465 updates for configure.in, added reject code, some decode stuff for tcp 17 years ago
Victor Julien 05fd319f6c Add log-httplog module that logs http request uri's, hosts and useragents to a per line text format. 17 years ago
Victor Julien eaaeb30cd6 Add noalert keyword for use with sigs that are used for capturing only. 17 years ago
Victor Julien f0ed41fb0a Support priority keyword, add priority to alert-fastlog. 17 years ago
Victor Julien dc224cb2d2 Large update containing the first step to making the detection engine use rule groups. Address based rule groups are now implemented. 17 years ago
Victor Julien d036264f80 Cleanup signature parsing and other detect.c parts. 17 years ago
Victor Julien 151512a45c Split up address code in ipv4 and ipv6 specific files. Cleanups. 17 years ago
Victor Julien b8ad4adf81 complete rename of address2 to address 17 years ago
Victor Julien 28b0d82169 Remove partial and broken address handling implementation now address2 is working. 17 years ago
Victor Julien 7aada782a4 WIP address matching stuff 17 years ago
Victor Julien bab4b62376 Initial add of the files. 17 years ago