dependabot[bot]
8bebc2390d
github-actions: bump ossf/scorecard-action from 2.1.1 to 2.1.2
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.1.1 to 2.1.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](15c10fcf1c...e38b1902ae
)
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Jason Ish
48f0fd3c74
doc/userguide: update logging section for time formats
...
- Update fragment of configuration file to match suricata.yaml with
new default-log-format.
- Document new %z format specifier.
2 years ago
Jason Ish
531c4336c9
logging: use ISO-like timestamp in file log
...
Also update suricata.yaml to show this default, as updating the
"default-log-format" does not affect the file output.
2 years ago
Jason Ish
761e7c2a63
suricata.yaml: update default-log-format current state
...
The default-log-format has changed, reflect this in the suricata.yaml.
2 years ago
Jason Ish
bac8b8d26d
logging: add new date format: YYYY-MM-DD HH:MM:SS
...
Adds a new logging format character, %z that uses a more standard time
format of "YYYY-MM-DD HH:MM:SS".
Ticket #5764
2 years ago
Philippe Antoine
9f21e2bcde
src: remove unneeded double colon
...
git grep ';;' src/ | grep -v for | cut -d: -f1 | uniq
| while read f; do sed -i -e 's/;;/;/' $f; done
2 years ago
Philippe Antoine
cb89192ec3
smb: fix typo in comment
2 years ago
Philippe Antoine
0dfaf2802f
test: remove one duplicate line
2 years ago
Philippe Antoine
27d2bce1a1
flow: complete stats for app_layer protocol counters
...
In the case of a gap, or in the case of a flow where one side
is recognized, but the other is not before the end, we still
increase the counters to have consistency between
jq 'select(.event_type=="flow" and .app_proto=="ftp") | .app_proto' log/eve.json | wc -l
jq 'select(.event_type=="stats") | .stats."app_layer".flow.ftp' log/eve.json
Ticket: #5769
2 years ago
Haleema Khan
cfcb7df9dc
mqtt: rustfmt parser.rs
2 years ago
Haleema Khan
23acb89653
mqtt: add unittests for nom7 parsers
...
Ticket: #5742
2 years ago
dependabot[bot]
ad7baad4a0
github-actions: bump actions/download-artifact from 3.0.1 to 3.0.2
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](9782bd6a98...9bc31d5ccc
)
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
87420c8083
github-actions: bump actions/upload-artifact from 3.1.1 to 3.1.2
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 3.1.1 to 3.1.2.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](83fd05a356...0b7f8abb15
)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
c091e65662
github-actions: bump actions/checkout from 3.2.0 to 3.3.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3.2.0...v3.3.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Philippe Antoine
fff4475d91
stream: fix memory leak when failing to insert segment
...
As introduced by commit f848e34bcc
DoInsertSegment can now return `-EINVAL` and there was no
generic handling of error values to return the tcp segment
to its pool.
Ticket: #5777
2 years ago
Jeff Lucovsky
e15c9451f2
log/stats: Ensure output exists for the stats thread
...
Issue: 5198
This commit ensures that a log output destination exists for the stats
thread.
2 years ago
Jeff Lucovsky
018ea2625f
log: Use hash table for slot maintenance
...
Issue: 5198
This commit modifies the threaded logging support to use the hash table
for handling thread/slot mappings. As a result, it's no longer necessary
to provide the thread id when ensuring the log output exists.
2 years ago
Jeff Lucovsky
f06aabc32a
log: Add hash table for thread/slot mappings
...
Issue: 5198
This commit adds a hash table to manage thread id to slot mappings. This
ensures that each thread will have its own slot (file output device)
2 years ago
Juliana Fajardini
4c7ca2c367
devguide/install: add note about ubuntu version
...
We want to make it clear with which system the instructions for
installing from were tested with.
2 years ago
Haleema Khan
cdc5ccd7f7
rfb: rustfmt parser.rs
2 years ago
Haleema Khan
b95d7efbd0
rfb: add unittests for nom7 parsers
...
Task: #5741
2 years ago
Philippe Antoine
3979acb5ed
smb: set event for ntlmssp unusual order
2 years ago
Philippe Antoine
e41c01a483
smb: rustfmt ntlmssp_records.rs
2 years ago
Philippe Antoine
1db8685848
smb/ntlmssp: parse fields independently of order
...
Instead of relying on the usual ordering...
Ticket: #5258
2 years ago
dependabot[bot]
fc177754d1
github-actions: bump ossf/scorecard-action from 2.0.6 to 2.1.1
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.0.6 to 2.1.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](99c53751e0...15c10fcf1c
)
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Jeff Lucovsky
dfcb429524
detect/cert: Use client side certs
...
Issue: 5516
This commit modifies the detect logic to choose the certificate based on
the flow direction -- to server or to client.
2 years ago
Jason Ish
ae192ebae7
rust: sync log levels with C
2 years ago
Juliana Fajardini
377885f420
exception-policies: fix typos
2 years ago
Shivani Bhardwaj
21edf136a5
scripts: fix app-layer-protos.c setup
...
After the changes in the script in 05e16820de
, the file
app-layer-protos.c was to be modified properly iff it was left unformatted.
However, the file was also formatted as a part of the same commit making
the lines split which broke the output of the script. Fix that by
looking for another pattern and changing the lines following that.
2 years ago
Victor Julien
23eeba3e35
app/protos: reformat string to proto
2 years ago
Victor Julien
4f6d388740
app-layer: check name vs proto mapping in registration
2 years ago
Victor Julien
0ff88c0315
netmap/runmode: minor code cleanup
2 years ago
Victor Julien
0e5af9e8a7
ioctl: output cleanups
2 years ago
Victor Julien
07008f0da2
netmap: output cleanups
2 years ago
Victor Julien
597601b294
dpdk: don't "fix" broken ips setting
2 years ago
Victor Julien
4e945351a5
dpdk: output cleanups
2 years ago
Victor Julien
7196257f68
nfq: minor error message improvement
2 years ago
Victor Julien
a4eefd16b7
output: add %M format option for the log message body
...
If %M is not specified, it is automatically appended to the format
string, to provide backwards compatibility.
2 years ago
Victor Julien
fa7760aa67
commandline: output cleanups
2 years ago
Victor Julien
da5fa24ab2
pcap: output cleanups
2 years ago
Victor Julien
1db4dc4fcb
output: default output format
...
Add a separate default for file output.
2 years ago
Victor Julien
5b58be6076
output: remove unused log levels
...
Critical, alert and emergency were unused, so remove.
2 years ago
Victor Julien
8a3c8984b4
output: print detect-engine as detect
2 years ago
Victor Julien
199e444498
output/capture: group source and runmode
...
So outputs from runmode-af-packet and source-af-packet both will
show 'af-packet' as the module.
2 years ago
Victor Julien
1b755653c0
output: add %D for compact log level
2 years ago
Jeff Lucovsky
2c9c18a9d0
log/json: Convert log output to use JsonBuilder
...
This commit converts the file logging logic to use JsonBuilder instead
of libjansson.
2 years ago
Jeff Lucovsky
e7c2298203
config: Clarify when log format can be overridden
2 years ago
Jeff Lucovsky
3a37cf4507
log: Use SCCalloc instead of alloc/clear
2 years ago
Jeff Lucovsky
f8474344cd
log: Add module and subsystem identifiers to log
...
Issue: 2497
This changeset provides subsystem and module identifiers in the log when
the log format string contains "%S". By convention, the log format
surrounds "%S" with brackets.
The subsystem name is generally the same as the thread name. The module
name is derived from the source code module name and usually consists of
the first one or 2 segments of the name using the dash character as the
segment delimiter.
2 years ago
Victor Julien
197aa010d6
unix-socket: minor output improvements
2 years ago