Commit Graph

1073 Commits (9209eaeaf671638d3d340cfb5c7768a40e81d1a7)

Author SHA1 Message Date
Anoop Saldanha 9e94768385 fix for bug 108 16 years ago
Anoop Saldanha 47037ef9ec fix for bug 115 16 years ago
Victor Julien 2d45a5994a Fix invalid free in HTP config deinit. 16 years ago
Victor Julien fe7ece997a Different approach to the reference keyword. Lots of cleanups, bug fixes in reference keyword code and tests. 16 years ago
Breno Silva 89baf93a40 Reference Support 16 years ago
Victor Julien 65c9d00730 Remove duplicate cuda kernel file. 16 years ago
Victor Julien 44b6380a70 Improve http body chunk memory handling robustness. 16 years ago
Pablo Rincon fe7948a7ae Modifications on http body request handling 16 years ago
Pablo Rincon 2ce728d019 Adding support for ecn flags after the handshake 16 years ago
Victor Julien 01c0e316b9 Cleanup of libnet patch. 16 years ago
William Metcalf 3678dda185 libnet now optional 16 years ago
Anoop Saldanha 35bd0c6b39 compiled and added a 64 bit version of the cuda b2g kernel 16 years ago
Anoop Saldanha 606516911b added x86_64 for the b2g cuda code 16 years ago
Pablo Rincon f862de2ee6 Fixing some code reviews (Thanks to Steve Grubb) 16 years ago
Pablo Rincon 86185ecd97 Enable spm inspection with precooked pattern contexts on content, uricontent and http_client_body (we will also add this to http_header when it gets commited) 16 years ago
Pablo Rincon 227fe516a0 Adding Boyer Moore context to content patterns, should speed up the search 16 years ago
Pablo Rincon 720f46642f Fix redmine issue 49 (allow pcre to end a pattern with an escaped slash, '\') 16 years ago
Victor Julien 8f0fe76346 Minor dbg output formatting fix. 16 years ago
Victor Julien 15bfa7aa4e Rename CUDA kernel 16 years ago
Anoop Saldanha a91a760fff Add the mpm b2g cuda kernel file into the codebase 16 years ago
Victor Julien 7dcc1daa89 Pcap eof msg can be informational 16 years ago
Victor Julien c5e15213f7 Improve pcap file mode EOF message. Fixes #123. Small cleanups to pcap file code. 16 years ago
Anoop Saldanha e6af69e10e fix for bug 114 16 years ago
Victor Julien 156b844ccb Fix tcp segment list corruption bug 16 years ago
Victor Julien e6ba571c0b Rename structures that don't adhere to our naming conventions. 16 years ago
Victor Julien 4129146a71 Because the HTP personalities code changes how the htp state's connp is initialized, we need to check for it in more places. 16 years ago
Victor Julien ead13bda4a Small cleanup and comment update to htp code. 16 years ago
Brian Rectanus a9cdd2bbae Add htp personality configuration. 16 years ago
Brian Rectanus 4b94babf5d Add functions to radix to add ip/netblocks as string. Add macro to get node user data. Cleanup radix code, docs and printing info. Export all printing functions. 16 years ago
Victor Julien ffd85ac4a6 Use correct datatype in HTPCallbackResponse fixing possible endless looping issues. 16 years ago
Pablo Rincon 2c722c9374 Adding radix tree unittests. Fixing a ipv6 issue with netmasks of 32 (was being handled as if it were ipv4) 16 years ago
Pablo Rincon 6a188f1e6b Fixing memleak also for SCRadixRemoveKey (SCRadixAddKey creates a prefix, but it's the one that the node will hold) 16 years ago
Victor Julien 2b3479577b Fix ecn/cwr unittests 16 years ago
Victor Julien 5eb4095b9a Comment ECN/CWR changes more. 16 years ago
Pablo Rincon 83ddc5813a Support for ecn/cwr TCP sessions 16 years ago
Victor Julien 047238351a Remove loop from radix unittest. We can detect memleaks with valgrind. 16 years ago
Pablo Rincon a5218664c9 Register the free function for nodes of the radix trees at unittests 16 years ago
Pablo Rincon 7cc6edbb09 Unittest used to check the radix memleak located at searching 16 years ago
Pablo Rincon ef3ac7f126 Release the tmp prefix used for searching on the radix tree 16 years ago
Anoop Saldanha 53e8120c9d adapt b2g cuda code for the mpm architecture change 16 years ago
Victor Julien 15c67bfbd2 Fix locking issue in the uri scanning code. 16 years ago
Anoop Saldanha 2c9366b83c Enable flag in http_client_body for http request body callback 16 years ago
Pablo Rincon 07680c954e Small fix handling netmasks belonging to the same octect on BestMatch search 16 years ago
Pablo Rincon b8b569c8f4 Compare uint8_t's with one byte 16 years ago
Pablo Rincon e7a989e305 IP Only Engine using radix trees 16 years ago
Victor Julien ced401b554 Update http_client_body code to recent changes. 16 years ago
Anoop Saldanha 97d49d8f5e support for http_client_body keyword 16 years ago
Victor Julien 74dfbc0c49 Move flow flags to flow.h 16 years ago
Breno Silva 81abe635c8 Global Threshold config 16 years ago
Victor Julien 26e8a0a06a Cleanup global threshold code. 16 years ago
Breno Silva 67f2026279 Global Threshold config 16 years ago
Victor Julien 08600df6b1 Small uri cleanups. 16 years ago
Pablo Rincon c7350a8ac6 Fixing some naming convention issues and incorrect error messages 16 years ago
Pablo Rincon b708d7f65d Adding Uricontent inspection with spm. Modifiers for uricontent are now supported 16 years ago
Victor Julien e3552a8e3f Add more comments to detect and flow structures. 16 years ago
Gurvinder Singh 8e444f1772 stream and application layer improvements 16 years ago
Victor Julien 3d7b882bde Make sure all smsgs are handled every time, even in case or error. The fuzzer found an issue where unhandled messages remained in the queue leading to threading issues. 16 years ago
Victor Julien cb8aaa5968 Make sure we only run the app layer proto detection (successfully) once per flow. Solves an issue found by the fuzzer where both flow directions were detected as different protos, messing up the app layer parser. 16 years ago
Victor Julien 68576947e2 Small SMB cleanups. 16 years ago
Victor Julien f4ee4f5670 Properly clear list tail ptr in segment list. 16 years ago
William Metcalf b0faeb91d7 small PF_RING update cmd line opts changed 16 years ago
Gurvinder Singh 4879045c6f bug 102 patch 16 years ago
Victor Julien 4fd4c1331e Fix broken unittest, improve within error messaging. 16 years ago
Anoop Saldanha c54b91ed94 fix for bug 113 16 years ago
Victor Julien 6be0778532 Comment SigMatchSignatures a bit. 16 years ago
Kirby Kuehl f08d3e76ee add maximum andx chain depth 16 years ago
Jason Ish acaee78b1c Fix bug 125. - Always bail on parse errors. - Exit if loading the config file fails. - Display the line number where the parsing failed. 16 years ago
Victor Julien 449205cfeb Remove wrong copyright info, cleanup headers. 16 years ago
Kirby Kuehl afb08d388d make sure we have input_len 16 years ago
Pablo Rincon 4a351c07a6 Bug 103, bound checks at pppoe, added macros for 4bit fields 16 years ago
root ddf995da3b pfring support lb type, and now uses logging subsys 16 years ago
Victor Julien 057031acce Don't inspect more methods than necessary. 16 years ago
Pierre Chifflier 5535e083a0 Fix prelude init and cleanup sequence using OutputCtx
Signed-off-by: Pierre Chifflier <chifflier@edenwall.com>
16 years ago
Jason Ish 37bb733929 Looks like something happened in a previous merge: - Don't set the limit here, its already set. - Don't write the log file header here, its also been written. 16 years ago
Jason Ish 40f9653c06 Have output plugs use an OutputCtx which is a little more generic than LogFileCtx. The OutputCtx provides a place for module private data to avoi overriding the LogFileCtx. 16 years ago
Victor Julien 99d5dc3d2a Don't scan more cookie headers than necessary. 16 years ago
Victor Julien c1a19bcd6b Fix compilation of new detect-filter code, fix ip-only compatibility of detect-filter code. 16 years ago
Gerardo Iglesias Galvan ef2ae76c42 Add support for detection_filter keyword 16 years ago
Jason Ish eab93e766a Do policy lookup for defrag. Add unit test for a default host os policy. Update example config to use a default. Add 2 new policies to the stream to cover all the policies for stream and defrag. 16 years ago
Gurvinder Singh 7438f981da stream memory leaks fixed and unit tests added 16 years ago
Victor Julien 90006d94a6 Fix compilation 16 years ago
Jason Ish 5c3ab2b73f Load host OS info from the configuration. 16 years ago
Victor Julien 297001c6d9 Only process a app layer sig if it has the proper state. Make sure a sig can't have conflicting sigmatches, such as ftpbouce and uricontent. 16 years ago
Victor Julien ec47f840f3 Remove more scan references. 16 years ago
Victor Julien bee4e04664 More scan/search related cleanups. 16 years ago
Victor Julien 7a8cd61fdf Cleanups. 16 years ago
Victor Julien 153d1425fe Fix nocase searching in payload search phase. 16 years ago
Victor Julien 80dc4f1dbe Further simplify content api: merge flags that indicate a next relative match, remove chunks as they are unnecessary now, make negated a bitflag. 16 years ago
Victor Julien f0d68b633e Remove nosearch flag from pattern api and add a generic bitwise flags field. 16 years ago
Victor Julien 1e01fd613c Remove all references to the scan phase from the pattern matchers and it's api. 16 years ago
Victor Julien dd846c9b0e Remove all search code from the pattern matchers, cleanup mpm api, remove unused http code, more cleanups. 16 years ago
Victor Julien 6990d9c91b Fix thresholding signature unittests. Because of the bug fix that made thresholding compatible to ip-only sigs the test sigs needed to be made non-ip-only. 16 years ago
Victor Julien f298fec872 Make sure nocase applies to the last pattern, content or uricontent. 16 years ago
Victor Julien 24b5149adf Remove search phase from b2g pattern matcher. 16 years ago
Victor Julien 0e7cb90212 Fix broken pmatch list handling. 16 years ago
Victor Julien 27f3382066 Fix rules with thresholding set not being able to be ip-only. 16 years ago
Victor Julien 8b30226914 Detection keyword cleanup 16 years ago
Victor Julien 6637873348 Update prev ptrs in SigMatchReplaceContent 16 years ago
Victor Julien b259e362cd Convert uricontent to use new scanning methods as well. Move http_method and http_cookie keywords out of pmatch list for now. 16 years ago
Victor Julien bef70a04ce First stage of detect engine redesign: equal patterns share id's, search phase no longer used, new match verification phase. 16 years ago