268 Commits (9f0bf35cfdcf1c852922f31a0fd1df936afc0fb8)

Author	SHA1	Message	Date
Victor Julien	26e8a0a06a	Cleanup global threshold code.	16 years ago
Breno Silva	67f2026279	Global Threshold config	16 years ago
Victor Julien	08600df6b1	Small uri cleanups.	16 years ago
Pablo Rincon	c7350a8ac6	Fixing some naming convention issues and incorrect error messages	16 years ago
Pablo Rincon	b708d7f65d	Adding Uricontent inspection with spm. Modifiers for uricontent are now supported	16 years ago
Anoop Saldanha	c54b91ed94	fix for bug 113	16 years ago
Victor Julien	6be0778532	Comment SigMatchSignatures a bit.	16 years ago
Gerardo Iglesias Galvan	ef2ae76c42	Add support for detection_filter keyword	16 years ago
Victor Julien	297001c6d9	Only process a app layer sig if it has the proper state. Make sure a sig can't have conflicting sigmatches, such as ftpbouce and uricontent.	16 years ago
Victor Julien	ec47f840f3	Remove more scan references.	16 years ago
Victor Julien	bee4e04664	More scan/search related cleanups.	16 years ago
Victor Julien	6990d9c91b	Fix thresholding signature unittests. Because of the bug fix that made thresholding compatible to ip-only sigs the test sigs needed to be made non-ip-only.	16 years ago
Victor Julien	b259e362cd	Convert uricontent to use new scanning methods as well. Move http_method and http_cookie keywords out of pmatch list for now.	16 years ago
Victor Julien	bef70a04ce	First stage of detect engine redesign: equal patterns share id's, search phase no longer used, new match verification phase.	16 years ago
Pablo Rincon	25a3a5c6d8	Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.	16 years ago
Pablo Rincon	ebcbc859e3	Fix on IPOnly match at flows, for inline mode	16 years ago
Gurvinder Singh	50f7d0a887	app layer htp logging and better htp request handling. removed recent_in_tx.	16 years ago
Gurvinder Singh	4768e42159	bug 95 patch	16 years ago
Pablo Rincon	38dc7ffebc	Adding settings for detect engine group config	16 years ago
Anoop Saldanha	1a5ee37bd3	Added cuda logs for the engine, which shows device info and memory usage	16 years ago
Anoop Saldanha	c26e92733d	handle the cuda cleanup at shutdown. should get rid of any errors from the call to SigGroupCleanup	16 years ago
Anoop Saldanha	41e6735b92	mpm b2g cuda support added	16 years ago
Pablo Rincon	34216fd3e2	bug87 Fix IPOnly veredicts on flows	16 years ago
Pablo Rincon	0165b3f0d8	pcre P modifier support (pcre match over http body requests)	16 years ago
Pablo Rincon	ad2c136e8f	Renaming errors (naming conventions)	16 years ago
Breno Silva	7e299834d2	FragOffset Rule Keyword	16 years ago
Victor Julien	6a53ab9c5a	Stream engine memory handling update ... The stream engine memory handling needed updating as it didn't scale. Changes: - pools can now be initialized to size 0, meaning unlimited - stream engine uses a memcap setting. Sessions, segments and aldata is part of this, app layer state isn't. - memory is accounted using a global int that is spinlocked. - a counter for sessions that have not been picked up because of memcap was added. - all reassembly errors are converted to debug msgs.	16 years ago
Pablo Rincon	51dc773eec	Changing the veredict actions to flags to allow simultaneous veredict	16 years ago
Victor Julien	b3bcba077f	Only inspect http flows against uri sigs, clean up uri scanning code.	16 years ago
Gurvinder Singh	0cb43d27e9	uricontent new design	16 years ago
Gurvinder Singh	356a8bf385	applayer uri match and modified http handling	16 years ago
Victor Julien	0d34990d7f	Add OpenBSD's strlcpy and strlcat and replace all strcat/strcpy/strncat/strncpy by those calls.	16 years ago
Gurvinder Singh	f6b0c481b0	urilen support for engine	16 years ago
Victor Julien	4284276b11	Merge applayer detect function into normal match function. Should speed up detection.	16 years ago
Victor Julien	bcd0682150	Make engine startup a little less verbose.	16 years ago
Breno Silva	1d055b0e09	ICMP Seq Rule Keyword	16 years ago
Pablo Rincon	c80160b96d	More examples of unittest helper functions usage reference	16 years ago
Pablo Rincon	b6a3395c08	Adding unittest helper functions for building generic packets, checking arrays of expected match results, perform generic tests, etc. Look at util-unittest-helper.c and detect-ipproto.c for references	16 years ago
Victor Julien	eb67bb442e	Fixup unittests that use buffers that simulate configuration files. They now include the YAML header.	16 years ago
Gerardo Iglesias Galvan	40c514f295	Fix bug in logging msg when using --init-errors-fatal	16 years ago
Gerardo Iglesias Galvan	5eb819b0f4	Add signature line no. to error message when parsing fails	16 years ago
Gerardo Iglesias Galvan	fae92f8d7b	Fix bug#30. Fix logging call from prev patch	16 years ago
Gerardo Iglesias Galvan	988dc5520b	Improve output when loading rules	16 years ago
Victor Julien	6b36e23e45	Fix not decreasing the flow use_cnt reference counter in some cases from the app layer detection code. This caused some streams to never fully time out and thus clutter up the flow table and session pool.	16 years ago
Brian Rectanus	c22d42693a	Added http_method rule keyword.	16 years ago
Victor Julien	b7bac14040	Fixup code to compile with -Wall -Werror -Wextra -Wno-unused-parameter compiler options.	16 years ago
Victor Julien	2b66667a76	Make sure we can't overflow our packet alert storage	16 years ago
Anoop Saldanha	f684989f98	dce_iface, dce_opnum, dce_stub_data keyword support	16 years ago
Victor Julien	ecab1fae36	Remove contents of VRT classification.config.	16 years ago
Anoop Saldanha	011b74df63	Modify the classification config tests to use the buffer than a temp file and also fix an invalid free	16 years ago
Anoop Saldanha	bc4df59414	Support for Classtype keyword and Classification Config file	16 years ago
Victor Julien	d5c732f1f9	Add tag keyword stub	16 years ago
Jason Ish	ce20c33634	multiline rule support.	16 years ago
Will Metcalf	23aa6cf642	more fixes for exit on sig init failure	16 years ago
Victor Julien	778228d1c5	Flags keyword fix. Fatal init fix.	16 years ago
Victor Julien	35e884f303	Make sure offset modifies depth.	16 years ago
William Metcalf	c63b1e0f67	failing unit test depth doesn't take into account offset	16 years ago
Gurvinder Singh	8cfdf6c666	bug 18 patch update	16 years ago
Gurvinder Singh	b92886a79a	bug#18 and some minor changes	16 years ago
Victor Julien	10cc9d5b6a	Add icmp flow handling.	16 years ago
Victor Julien	71ed2d38f5	Fix scan patterns sometimes not being added to the scan ctx. Should fix bug #9.	16 years ago
William Metcalf	c40e81d42b	failing unittest rules with same content match fail	16 years ago
Victor Julien	4824868766	Application layer detection improvements ... - improve locking of application layer handling, making sure that the flow cannot be freed/cleared when the detection engine is still working with it. - add a check to the app layer detection to make sure that a match function will only inspect an app layer state if it's of the right type.	16 years ago
Pablo Rincon	f2f9b83280	Adding FTP app layer parser and ftpbounce detection at L7	16 years ago
Gerardo Iglesias Galvan	7e87f373b9	Add icmp_id keyword support	16 years ago
Victor Julien	01976a0b74	Support for sigs with both pkt and applayer detect ... Sets a flowbit with the sig id if the packet matches match. Checks on that if the app layer matches match. Currently misuses the flowbits api for this in a way that needs fixing.	16 years ago
Victor Julien	493715c0d2	Implement alert sid storage in the flow so we can check previous alerts in the flow.	16 years ago
Victor Julien	9fd46e9425	Support for sigs with both pkt and applayer detect ... Sets a flowbit with the sig id if the packet matches match. Checks on that if the app layer matches match. Currently misuses the flowbits api for this in a way that needs fixing.	16 years ago
Victor Julien	4f843ff8e9	Improve matching of packet and app layer sigs.	16 years ago
Pablo Rincon	992aaa3d79	Small fix on SigMatchSignaturesAppLayer() and SigMatchSignatures()	16 years ago
Breno Silva	69eb869cc9	Threshold Rule	16 years ago
Victor Julien	ecf86f9c23	Rename to Suricata.	16 years ago
Gurvinder Singh	a0f184866c	http_cookie keywork support	16 years ago
Pablo Rincon	a67bd2457b	Loading rules from config support	16 years ago
Pablo Rincon	c816af822e	Adding support to load rule files from config	16 years ago
Pablo Rincon	1ad6d75dfe	Added rpc keyword support at packet level	16 years ago
Pablo Rincon	a8d7b71490	First version of flowints	16 years ago
Gerardo Iglesias	991d421394	Changed printf's to logging API functions	16 years ago
Victor Julien	2cfa284999	Fix app layer detect to actually work.	16 years ago
Victor Julien	a1d33e2d0b	Compilation fixes after merge.	16 years ago
Victor Julien	f1f7df0766	First iteration of doing app layer detection.	16 years ago
Anoop Saldanha	7a10ddc07b	Fixes for the fast-pattern tests and a couple of other minor changes	16 years ago
Anoop Saldanha	6ca5dbc9e9	Support fast_pattern modifier keyword for content	16 years ago
Victor Julien	07bcc8cc9a	Fix signatures with ports and/or addresses but without sigmatches.	16 years ago
Anoop Saldanha	1c7ac13c25	Support for negated content	16 years ago
Victor Julien	241db64dd7	Fix a few memory issues.	16 years ago
Victor Julien	981ca859cb	Fixes for distance and within content modifiers.	16 years ago
William Metcalf	884b1034b4	failed unittest for within distance	16 years ago
Anoop Saldanha	dc44700ce5	Support vars lookup from conf file. Current patch support address and port group vars lookup	16 years ago
Victor Julien	951b4d5cf4	Fix within in some corner cases and add some more tests.	16 years ago
Victor Julien	4f2164677a	- Fix pattern matchers b2g and b3g not being able to deal with a single pattern of the max pattern length (32 bytes by default). ... - Fix the setting of the correct pattern matcher when it was set in the detection ctx. - Add tests for the fixes.	16 years ago
Victor Julien	d6be6ceb19	Fixup artifact from automatic renames: rename DetectAddresssHead to DetectAddressHead.	16 years ago
Anoop Saldanha	78db80ea15	Unittests and style fix for detect-engine-siggroup.[ch]	16 years ago
Gurvinder Singh	cacbf31aad	support for ttl keyword	16 years ago
Victor Julien	de8caa7964	Rename DetectAddressGroup* to DetectAddress*	16 years ago
Victor Julien	13dca5e8ce	Cleanup of address functions.	16 years ago
Victor Julien	3c7a038477	Further memory cleanups. Split out init only vars out of the sig group head.	16 years ago
Victor Julien	32e51e5e5a	Replace sgh refcnt by a flag.	16 years ago
Victor Julien	2d0e9658f8	Speed up per sgh content maxlen calc. Remove mpm ptrs from mpm ctx. Add unittests testing the detection engine internals.	16 years ago
Victor Julien	e4c98c562c	Merge DetectAddressData and DetectAddressGroup	16 years ago