aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
19,729 Commits
8 Branches
174 Tags
255 MiB
main
main-8.0.x
main-7.0.x
master-6.0.x
master-5.0.x
master-4.1.x
master-4.0.x
master-3.2.x
suricata-8.0.7
suricata-8.0.6
suricata-7.0.17
suricata-8.0.5
suricata-7.0.16
suricata-8.0.4
suricata-7.0.15
suricata-8.0.3
suricata-7.0.14
suricata-8.0.2
suricata-7.0.13
suricata-8.0.1
suricata-7.0.12
suricata-8.0.0
suricata-7.0.11
suricata-8.0.0-rc1
suricata-8.0.0-beta1
suricata-7.0.10
suricata-7.0.9
suricata-7.0.8
suricata-7.0.7
suricata-7.0.6
suricata-6.0.20
suricata-7.0.5
suricata-6.0.19
suricata-6.0.18
suricata-7.0.4
suricata-6.0.17
suricata-7.0.3
suricata-6.0.16
suricata-7.0.2
suricata-6.0.15
suricata-7.0.1
suricata-6.0.14
suricata-7.0.0
suricata-7.0.0-rc2
suricata-6.0.13
suricata-6.0.12
suricata-6.0.11
suricata-7.0.0-rc1
suricata-6.0.10
suricata-6.0.9
suricata-7.0.0-beta1
suricata-6.0.8
suricata-6.0.7
suricata-6.0.6
suricata-5.0.10
suricata-6.0.5
suricata-5.0.9
suricata-6.0.4
suricata-5.0.8
suricata-6.0.3
suricata-5.0.7
suricata-6.0.2
suricata-5.0.6
suricata-6.0.1
suricata-5.0.5
suricata-4.1.10
suricata-4.1.9
suricata-5.0.4
suricata-6.0.0
suricata-6.0.0-rc1
suricata-6.0.0-beta1
suricata-5.0.3
suricata-4.1.8
suricata-4.1.7
suricata-5.0.2
suricata-4.1.6
suricata-5.0.1
suricata-5.0.0
suricata-5.0.0-rc1
suricata-4.1.5
suricata-5.0.0-beta1
suricata-4.1.4
suricata-4.1.3
suricata-4.0.7
suricata-4.1.2
suricata-4.1.1
suricata-4.1.0
suricata-4.0.6
suricata-4.1.0-rc2
suricata-4.1.0-rc1
suricata-4.0.5
suricata-4.1.0-beta1
suricata-4.0.4
suricata-4.0.3
suricata-4.0.2
suricata-3.2.5
suricata-4.0.1
suricata-3.2.4
suricata-4.0.0
suricata-4.0.0-rc2
suricata-3.2.3
suricata-4.0.0-rc1
suricata-4.0.0-beta1
suricata-3.2.2
suricata-3.1.4
suricata-3.2.1
suricata-3.2
suricata-3.2RC1
suricata-3.1.3
suricata-3.2beta1
suricata-3.1.2
suricata-3.1.1
suricata-3.1
suricata-3.0.2
suricata-3.1RC1
suricata-3.0.1
suricata-3.0.1RC1
suricata-3.0
suricata-2.0.11
suricata-3.0RC3
suricata-3.0RC2
suricata-3.0RC1
suricata-2.0.10
suricata-2.0.9
suricata-2.1beta4
suricata-2.0.8
suricata-2.0.7
suricata-2.1beta3
suricata-2.0.6
suricata-2.0.5
suricata-2.1beta2
suricata-2.0.4
suricata-2.1beta1
suricata-2.0.3
suricata-2.0.2
suricata-2.0.1
suricata-2.0.1rc1
suricata-2.0
suricata-2.0rc3
suricata-2.0rc2
suricata-2.0rc1
suricata-2.0beta2
suricata-1.4.7
suricata-1.4.6
suricata-1.4.5
suricata-2.0beta1
suricata-1.4.4
suricata-1.4.3
suricata-1.4.2
suricata-1.4.1
suricata-1.3.6
suricata-1.4
suricata-1.3.5
suricata-1.4rc1
suricata-1.3.4
suricata-1.4beta3
suricata-1.3.3
suricata-1.4beta2
suricata-1.3.2
suricata-1.4beta1
suricata-1.3.1
suricata-1.3
suricata-1.3rc1
suricata-1.3beta2
suricata-1.3beta1
suricata-1.2.1
suricata-1.2
suricata-1.2rc1
suricata-1.2beta1
suricata-1.1.1
suricata-0.8.2
suricata-1.0.0
suricata-1.0.1
suricata-1.0.2
suricata-1.0.3
suricata-1.0.4
suricata-1.0.5
suricata-1.1
suricata-1.1beta1
suricata-1.1beta2
suricata-1.1beta3
suricata-1.1rc1
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '912c545075'
${ noResults }
Commit Graph

84 Commits (912c5450757edbcc62c95cfe887cd0cadaab4668)

Author SHA1 Message Date
Philippe Antoine e6ee69c7da rust: format all files 
except the ones with #[rustfmt::skip]

Ticket: 3836
 4 months ago
Philippe Antoine 0773fba5fd rust/ffi: move txdata flags to ffi 
Ticket: 7666
 5 months ago
Philippe Antoine 267c3baff7 rust/ffi: move STREAM_ constants to ffi crate 
Ticket: 7666

reexport them in suricata crate
cbindgen them to C
 7 months ago
Philippe Antoine 71b59f6dbe rust/ffi: move IPPROTO_TCP to ffi 
and reexport in suricata

Allows to reduce dependencies to full suricata crate

Ticket: 7666
 8 months ago
Philippe Antoine 4b541b39f2 rust: move AppLayerEventType definition to C 
and bindgen it to rust.

Will make easier the bindgen of RustParser structure which uses
a callback which uses AppLayerEventType
 9 months ago
Philippe Antoine a393147415 rust: restrict visibility of reexported suricata_sys structs 1 year ago
Philippe Antoine 958344787f rust: bindgen FileAppendData 
Ticket: 7667
 1 year ago
Philippe Antoine 24503b0ead rust: move file functions out of SuricataContext 
Ticket: 7667
 1 year ago
Philippe Antoine 1f084f8cb7 rust: move HttpRangeFreeBlock out of SuricataContext 
Ticket: 7667
 1 year ago
Philippe Antoine 828a6bdbf8 rust: bindgen SCLogMessage 
Ticket: 7667
 1 year ago
Philippe Antoine cc845dccdb rust: bindgen GenericVarFree 
Ticket: 7667
 1 year ago
Philippe Antoine b00788af8b rust: bindgen SCAppLayerParserTriggerRawStreamInspection 
Ticket: 7667
 1 year ago
Philippe Antoine c52121586a rust: move AppLayerEvents funcs out of RustContext 
Ticket: 7667

just use it directly, with bindgen, and cfg not test
 1 year ago
Philippe Antoine bf6b8510fe rust: move DetectEngineStateFree out of RustContext 
Ticket: 7667

just use it directly, with bindgen, and cfg not test
 1 year ago
Philippe Antoine 6fa85d18f0 rust: reenable lint unused_doc_comment 
With just local exceptions
 1 year ago
Philippe Antoine bbf1424371 rust: bindgen MpmAddPatternCI 
Ticket: 7667
 1 year ago
Philippe Antoine bca6cbfb04 rust: fix prototype for AppLayerParserTriggerRawStreamInspection 
Ticket: 7762

As it modifies the flow indeed
 1 year ago
Philippe Antoine 59a5b53809 util/mpm: constify arg 
and make rust version use the correct integer type

Ticket: 7762
 1 year ago
Philippe Antoine 79544d0f1e rust: remove some unneeded cbindgen:ignore 
Ticket: 7667
 1 year ago
Philippe Antoine 6bc86230a5 rust: bindgen part of util-debug.h 
Ticket: 7667

Especially SCLogLevel whose enum redef is removed in rust
 1 year ago
Shivani Bhardwaj 35cef72b44 stream: rename TriggerRawStreamReassembly 
The functions around TriggerRawStreamReassembly are misnomers in the
current layout of the code. The functions were named appropriately when
they were created as per the structural and logical layout of the code
at the time.

These functions in today's code are being used to track, update and
trigger progress of inspection in the raw stream only. Hence, rename them
to TriggerRawStreamInspection.
 1 year ago
Philippe Antoine 0d82e905bc rust: bindgen DetectHelperMultiBufferMpmRegister 
Ticket: 7667
 1 year ago
Philippe Antoine 1f871cdd64 rust: reuse/reexport suricata_sys DetectEngineThreadCtx 
Use the bindgen'd version instead of our own recoded one
 1 year ago
Jason Ish bf427c69cd rust: remaining rs_ to SC conversions 2 years ago
Philippe Antoine 8ecc3efdc8 detect/multi-buf: harmonize wrapper 
Introduce DetectGetMultiData which does the generic wrapping,
including the transforms.

And let each keyword do just the getter.
 2 years ago
Victor Julien 10dcc383ae detect/xbits: implement tx bits 
Implement `xbits:set,mybit,track tx;` and `xbits:isset,mybit,track tx;`.

Store these in the AppLayerTxData.

Ticket: #6455.
 2 years ago
Philippe Antoine e4f71621b7 rust: fix clippy missing_abi warning 
warning: extern declarations without an explicit ABI are deprecated
  --> src/core.rs:72:1
   |
72 | extern {
   | ^^^^^^ help: explicitly specify the "C" ABI: `extern "C"`
   |
   = note: `#[warn(missing_abi)]` on by default
 2 years ago
Victor Julien 834378ff88 detect: per tx detect flags to a u8 progress value 
Reduce per tx space for tracking detection/prefilter progress. Instead
of a per direction u64 of flags, where each bit reflected a progress
value, use a simple u8 to track the linear progression through the
progress values. Use an offset to allow 0 to mean no value.

Add flags field as well to track "skip detect" and "inspect complete".
 2 years ago
Jeff Lucovsky b7d240fb14 applayer/ftp: Move MPM declaration 
This commit moves the MPM fn declaration into core.rs making it
available for other Rust modules.

Issue: 4082
 2 years ago
Jason Ish 4554c4778d rust: use AppProto from generated bindings instead of duplicating 
Have bindgen generate bindings for app-layer-protos.h, then use the
generated definitions of AppProto/AppProtoEnum instead if defining
them ourselves.

This header was chosen as its used by Rust, and its a simple header
with no circular dependencies.

Ticket: #7341
 2 years ago
Philippe Antoine b11381d952 rust: AppLayerRegisterParser out of SuricataContext 
Just use a regular compile time rust export, instead of having
a runtime definition through the SuricataContext structure
 2 years ago
Jason Ish 2bcc66da58 rust/log: move rust log and debug utils to debug module 
Move Rust logging, and debug_validation to a debug module to mirrow
the C side.
 2 years ago
Jason Ish f62be374ea rust/direction: move direction to own file (cleanup) 
Move the implementation of Direction to its own file, direction.rs.
 2 years ago
Jason Ish 7ef4caf90e rust/flow: move flow support to its own file (cleanup) 
Move the Rust Flow support from core.rs to flow.rs.
 2 years ago
Philippe Antoine e6be049c5d app-layer: move ALPROTO_FAILED definition 
Because some alprotos will remain static and defined as a constant,
such as ALPROTO_UNKNOWN=0, or ALPROTO_FAILED.

The regular already used protocols keep for now their static
identifier such as ALPROTO_SNMP, but this could be made more
dynamic in a later commit.

ALPROTO_FAILED was used in comparison and these needed to change to use
either ALPROTO_MAX or use standard function AppProtoIsValid
 2 years ago
Philippe Antoine 304271e63a rust: compatibility with cbindgen 0.27 
Ticket: 7206

Cbindgen 0.27 now handles extern blocks as extern "C" blocks.
The way to differentiate them is to use a special comment
before the block.
 2 years ago
Philippe Antoine 6e12475f48 doh2: handle dns message in POST requests 
Ticket: 5773

Handles both directions the same way for data if content type is
application/dns-message
 2 years ago
Daniel Olatunji 5c0af0b203 rust/doc: add docstring to rust module files. 
Issue: #4584
 3 years ago
Philippe Antoine f2a18e91c4 rust: define AppLayerEventType only in rust 
And detect.h does no longer depend on app-layer-events.h
 3 years ago
Philippe Antoine 668501c225 rust: remove unused 3 years ago
Jason Ish 8ef410e284 app-layer: add direction to transaction creation where needed 
Build on Eric's but set the direction on transaction creation when
needed. I think this makes it a little more clear, and easier to
document when creating single direction transactions.

This also somewhat abstracts the inner-workings of a directional
transaction from the implementation.

Ticket: #4759
 4 years ago
Eric Leblond 236869bc58 detect: remove STREAM_FLUSH 
It is unused in the code so can be removed.

Ticket: #5799
 4 years ago
Victor Julien e3e55406a7 files: update API and callers to take stream config 
This is to allow not storing the stream buffer config in each file.
 4 years ago
Victor Julien d57510a10f files: remove unused Rust binding for file pruning 4 years ago
Jeff Lucovsky f8474344cd log: Add module and subsystem identifiers to log 
Issue: 2497

This changeset provides subsystem and module identifiers in the log when
the log format string contains "%S". By convention, the log format
surrounds "%S" with brackets.

The subsystem name is generally the same as the thread name. The module
name is derived from the source code module name and usually consists of
the first one or 2 segments of the name using the dash character as the
segment delimiter.
 4 years ago
Victor Julien b31ffde6f4 output: remove error codes from output 4 years ago
Jason Ish c4034dafa1 rust: fix clippy lints for clippy::derive_partial_eq_without_eq 4 years ago
Victor Julien 79499e4769 app-layer: move files into transactions 
Update APIs to store files in transactions instead of the per flow state.

Goal is to avoid the overhead of matching up files and transactions in
cases where there are many of both.

Update all protocol implementations to support this.

Update file logging logic to account for having files in transactions. Instead
of it acting separately on file containers, it is now tied into the
transaction logging.

Update the filestore keyword to consider a match if filestore output not
enabled.
 4 years ago
Jason Ish c862e84c01 rust/frames: cleanups 
- Implement the Display trait on Direction to print "toserver" or
  "toclient" which used in a format string.

- Use Direction struct inside Frame instead of a u32.  Requires a helper
  method as there are two representation in C for direction, and the C
  methods for frames don't use the internal representation of the
  Direction enum (some sweeping changes could help here)
 4 years ago
Philippe Antoine 6058792bee rust: make suricata context const 
So that it is read only and its pointers do not get modified
 4 years ago