76 Commits (a2bc0080932e2971590b83011df109373f7aca66)

Author	SHA1	Message	Date
Victor Julien	75d7c9d64a	rust/smb: initial support ... Implement SMB app-layer parser for SMB1/2/3. Features: - file extraction - eve logging - existing dce keyword support - smb_share/smb_named_pipe keyword support (stickybuffers) - auth meta data extraction (ntlmssp, kerberos5)	7 years ago
Jason Ish	34811cf69e	json-vars: rename to metadata and use new metadata format	8 years ago
Victor Julien	11cb84ad35	detect: profiling update for new detect code	8 years ago
Victor Julien	cf2feeecf4	detect/prefilter: redo profiling	8 years ago
Victor Julien	044e7b8e20	output: add missing dnp3 profiling labels	8 years ago
Victor Julien	d634140fa2	logging: unique id's per log direction ... For loggers that register once per direction, use unique id's per direction. Reshuffle id's to keep tx log id's low so we can use u32 for tracking logged loggers.	8 years ago
Victor Julien	e7428b321d	profiling: fix app-layer profiling and csv output	8 years ago
Jason Ish	bb10bd7fca	profiling: fix const compiler warnings	8 years ago
Victor Julien	ab1200fbd7	compiler: more strict compiler warnings ... Set flags by default: -Wmissing-prototypes -Wmissing-declarations -Wstrict-prototypes -Wwrite-strings -Wcast-align -Wbad-function-cast -Wformat-security -Wno-format-nonliteral -Wmissing-format-attribute -funsigned-char Fix minor compiler warnings for these new flags on gcc and clang.	8 years ago
Victor Julien	e3bd5f371d	detect: more detailed state profiling	8 years ago
Victor Julien	5ca4a2e6fe	outputs: vars log ... EVE addition called 'vars' that logs pkt/flow vars for each packet/flow.	9 years ago
Victor Julien	addf64f1f7	profiling: fix memory leaks	9 years ago
Jason Ish	92885d6960	profiling: fix shadow error ... Local variable store was shadowing variable in function definition.	9 years ago
Victor Julien	dba14b676c	profiling: more prefilter profiling	9 years ago
Victor Julien	36f713c8d4	prefilter: in profiling print totals	9 years ago
Victor Julien	8798bf48b2	profiling: support prefilter engines	9 years ago
Mats Klepsland	4172c4c8ac	tls: add (mpm) keyword tls_cert_subject ... This keyword is a replacement for tls.subject.	9 years ago
Mats Klepsland	9b2717799c	tls: add (mpm) keyword tls_cert_issuer ... This keyword is a replacement for tls.issuerdn.	9 years ago
Jason Ish	04a44a077d	logging: convert pcap log to non-thread module	9 years ago
Jason Ish	fa27a76462	logging: add profiling back for non-tmm loggers ... The loggers moved away from a TMM required a new profiling support.	9 years ago
Victor Julien	b3bf7a5729	output: introduce config and perf output levels ... Goal is to reduce info output	9 years ago
Victor Julien	e09643c396	flow worker: profiling ... Previously the detect and stream code lived in their own thread modules. This meant profiling showed their cost as part of the thread module profiling logic. Now that only the flow worker is a thread module this no longer works. This patch introduces profiling for the 3 current flow worker steps: flow, stream, detect.	9 years ago
Victor Julien	4a96820320	stream-tcp: more cleanups	9 years ago
Mats Klepsland	a13df67864	detect: add (mpm) keyword for tls_sni ... Match on server name indication (SNI) extension in TLS using tls_sni keyword, e.g: alert tls any any -> any any (msg:"SNI test"; tls_sni; content:"example.com"; sid:12345;)	9 years ago
Jason Ish	796dd5223b	tests: no longer necessary to provide successful return code ... 1 pass, 0 is fail.	9 years ago
Victor Julien	cc4f7a4b96	detect: add profiling for non-mpm list build & filter	11 years ago
Victor Julien	485f34134e	unix socket: support profiling	11 years ago
Ken Steele	8f1d75039a	Enforce function coding standard ... Functions should be defined as: int foo(void) { } Rather than: int food(void) { } All functions where changed by a script to match this standard.	11 years ago
Victor Julien	2646edc129	Profiling: fix compilation on CentOS5 ... Bug #1207	11 years ago
Victor Julien	6dd10443ce	profiling: output log api modules separately ... Skip log api thread modules in the regular 'thread modules' list, instead print them in a separate list.	12 years ago
Victor Julien	a37a1d9de7	profiling: fix percentage of detect phases ... Use proper 'total' to calculate weigth of each detection phase.	12 years ago
Victor Julien	8a735a9b90	profiling: add sample-rate yaml option ... Add option "profiling.sample-rate": # Run profiling for every xth packet. The default is 1, which means we # profile every packet. If set to 1000, one packet is profiled for every # 1000 received. #sample-rate: 1000 This allows for configuration of the sample rate.	12 years ago
Victor Julien	2c3a92a1c9	profiling: conditional rule profiling ... Add support for conditional rule profiling. Currently only simple rate limiting is supported, but hardcoded to inspecting rules for each packet.	12 years ago
Victor Julien	13d491f577	profiling: lower overhead when disabled ... Instead of a large (6k+) structure in the Packet, make the profiling storage dynamic. To do this the Packet->profile is now a pointer. Initial support for selective sampling, e.g. only profile every 1000th packet.	12 years ago
Anoop Saldanha	127ef8f903	Use a typdef AppProto <-> uint16_t for representing app layer protocol. ... Some minor refactoring/cleanup, including renaming functions.	12 years ago
Eric Leblond	34abd818dd	Prefix util-conf function with Config	12 years ago
Eric Leblond	54006de40c	Use new function GetLogDirectory()	12 years ago
Victor Julien	43ba5a677e	DNS: enable mpm/fast_pattern support for dns_query	12 years ago
Victor Julien	ffffe6c10e	profiling: add formatted totals, percents to packet stats	12 years ago
Victor Julien	82769a1b37	profiling: fix missing profile names	13 years ago
Eric Leblond	e176be6fcc	Use unlikely for error treatment. ... When handling error case on SCMallog, SCCalloc or SCStrdup we are in an unlikely case. This patch adds the unlikely() expression to indicate this to gcc. This patch has been obtained via coccinelle. The transformation is the following: @istested@ identifier x; statement S1; identifier func =~ "(SCMalloc|SCStrdup|SCCalloc)"; @@ x = func(...) ... when != x - if (x == NULL) S1 + if (unlikely(x == NULL)) S1	13 years ago
Eric Leblond	655577cbbc	Add some missing checks of SCMalloc return.	13 years ago
Victor Julien	7babb35aeb	profiling: remove obsolete unit test	13 years ago
Victor Julien	2343ff8950	profiling: fix memory error in case of rule reload.	13 years ago
Victor Julien	ec7e79c748	Rule profiling update ... - Remove usage of counters api. - Store stats in detect engine thread ctx to remove locking - Support rule reloads	13 years ago
Eric Leblond	7af9fd7735	freebsd: fix warning about redeclaration.	13 years ago
Eric Leblond	0227a87fcb	cleaning: fix warning when building with clang. ... clang was issuing some warnings related to unused return in function. This patch adds some needed error treatment and ignore the rest of the warnings by adding a cast to void.	13 years ago
Eric Leblond	a0e57f58e5	OpenBSD: introduce SCLocalTime function. ... This function is a wrapper to localtime_r. It is needed to avoid a compilation warning on OpenBSD. I'm forced to type the function to a non pointer first parameter. If not we will have to use two differents functions in OpenBSD where tv->tv_sec is a long (different from time_t).	13 years ago
Victor Julien	d908e707d7	profiling: add per lock location profiling ... Add profiling per lock location in the code. Accounts how often a lock is requested, how often it was contended, the max number of ticks spent waiting for it, avg number of ticks waiting for it and the total ticks for that location. Added a new configure flag --enable-profiling-locks to enable this feature.	14 years ago
Victor Julien	979edf0b97	Add way to profile mutex/spin locks per thread module.	14 years ago