Anoop Saldanha
a304a98d1d
http_* setup unified.
12 years ago
Anoop Saldanha
434bdca9e2
uricontent simplified to use the existing content + http_uri infrastructure.
12 years ago
Anoop Saldanha
0b5d277254
code cleanup for all content based keywords.
12 years ago
Anoop Saldanha
51dcf19817
turn dce_stub_data into a sticky buffer.
12 years ago
Anoop Saldanha
a308d718ae
Allow the use of relative without the presence of a related previous keyword.
12 years ago
Victor Julien
4845631335
tcp stream: don't move to LAST_ACK on toserver resent of FIN
12 years ago
Victor Julien
3163243a55
Coverity 989710 and 989711: small recourse leaks in filemd5 parsing code.
12 years ago
Anoop Saldanha
12e4105dc3
fix for #770 .
...
Invalidate sigs with negative depth.
12 years ago
Anoop Saldanha
d041b98d95
fix for #771 .
...
Fix /etc/protocols parsing. Remove trailing newspace stored under some cases.
12 years ago
Victor Julien
37c80ea508
If an IP-only pass rule matches, set the no inspect flag for that flow. Bug #718 .
12 years ago
Anoop Saldanha
75130f9702
fix for #769 .
...
Packet inserted by live swap flagged as pseudo packet.
12 years ago
Victor Julien
274641abc2
Fix valgrind error/warning in ip reputation parsing code
12 years ago
Anoop Saldanha
c6ec23ca87
fix for #758 . Add redmine wiki link and desc for icmp-id keyword.
12 years ago
Victor Julien
04d7d00df6
Try to use pkg-config to resolve libnspr and related dependencies.
12 years ago
Christian Kreibich
cb8e5bc533
Try to use pkg-config to resolve libnss and related dependencies.
12 years ago
Victor Julien
eeb439c1a3
Open 2.0 dev branch
12 years ago
Victor Julien
b66af2c2ed
nfq: add missing error string
12 years ago
Eric Leblond
7ec820d3ab
Fix potential Null deref.
12 years ago
Victor Julien
8924d7598d
Fix potential iprep file parsing issue (2).
12 years ago
Victor Julien
754ae8a1be
Fix potential iprep file parsing issue.
12 years ago
Victor Julien
1b363ecb1d
Fix test AddressTestParse36 on Big Endian systems
12 years ago
Anoop Saldanha
0febe5a410
fix for #760 .
...
If udpv4 csum isn't calculated, udpv4-csum detection shouldn't run on the
csum.
12 years ago
Anoop Saldanha
ce7d78dd69
fix for #725 .
...
Update trec_len, trec_pos to 32 bits from 16 bits.
Handle handshakes that are fragmented across records.
12 years ago
Anoop Saldanha
c6d50764e5
temporarily patched smb + dcerpc parsers for direction demaraction.
12 years ago
Eric Leblond
5b067e1abb
pcap-file: treat the case of unsupported pcap link
...
In unix socket mode, Suricata was stopping processing pcap files
when a pcap file with an unsupported datalink was treated. This
patch updates error handling to allow Suricata to treat other
pcap files.
12 years ago
Eric Leblond
350d761961
af-packet: leave reading loop at each turn
...
The idea of this patch is to be sure to leave the ring reading loop
enough to be able to sync counters. This should fix #706 .
12 years ago
Jason Ish
eae4de9850
Replace the deprecated AM_CONFIG_HEADER with AC_CONFIG_HEADERS.
...
Addresses bug #704 for building on a Mac. More generically
it addresses the issue building using newers versions of automake.
12 years ago
Eric Leblond
ff2b8009ef
suricatasc: fix make distcheck.
12 years ago
Eric Leblond
df0e7af8f2
unix-manager: fix thread killing function
...
The name of the thread was not searched in the correct family.
Reported-by: iswalker <mail2cissp@gmail.com>
12 years ago
Eric Leblond
cd305c3a78
suricatasc: update python packaging
...
'make install' install now suricatasc script and Python module to
the system. The suricatasc client module can now be used in other
Python projects by using 'import suricatasc'.
A transformation was needed for distribution of a module and a script.
Module in src directory is now containing most of the code and the
script only handle argument parsing and the creation of a unix socket
client through 'suricatasc' module.
12 years ago
Eric Leblond
c39c5453e9
suricatasc: refactor as a class
...
The goal of this commit is to be able to use suricatasc has a library
and and program. This is done by putting all active code in class and
adding a Python magic to detect when file is used as a program.
12 years ago
Eric Leblond
31c03d38b9
unix socket: add 'dump-counters' command
...
This patch adds a 'dump-counters' command which answer an output of
all performance counter.
12 years ago
Eric Leblond
345cfc3541
suricatasc: improve output of command result
12 years ago
Eric Leblond
9fc996e4df
suricatasc: treat old server case
...
If the server don't have the 'command-list' function, suricatasc
was failling. This patch fixes this issue by adding a static list
instead.
12 years ago
Eric Leblond
5722d8846a
unix socket: add 'help' as alias to 'command-list'
12 years ago
Eric Leblond
36519fb4e4
suricatasc: real cmd line parsing and verbose mode
...
This patch adds commandline parsing and help to suricatasc. It also
adds a verbose mode (-v) where the send and received JSON object are
shown. This should ease development of unix socket client.
12 years ago
Eric Leblond
84322fa556
unix socket: add 'conf-get' command
...
This patch adds a 'conf-get' command which get the configuration
value from suricata. Argument of the command is the name of the
variable to fetch.
The command syntax is the following:
{
"command": "conf-get",
"arguments": { "variable":value}
}
12 years ago
Eric Leblond
c961056ed8
unix socket: add 'capture-mode' command
...
This patch displays what capture mode is used.
12 years ago
Eric Leblond
74a9fc4b66
Add function to display current capture mode
...
This patch adds a function to display the capture mode.
12 years ago
Eric Leblond
2f30485f7b
unix socket: add 'runnning-mode' command
...
This command displays the active running mode ('autofp' for
example).
12 years ago
Eric Leblond
f4faff6ff9
unix socket: add 'uptime' command
...
This command displays the nuber of second since the start of
Suricata.
12 years ago
Eric Leblond
c6b38ebf67
unix socket: add 'version' command
12 years ago
Eric Leblond
e3df0d4f5d
suricatasc: display command list
12 years ago
Eric Leblond
bb639e4a6d
suricatasc: add readline completion
12 years ago
Eric Leblond
68c1276433
suricatasc: factorize code and use dynamic commands
...
This patch factorize the recv code and uses the new 'command-list'
to get the list of existing commands from suricata. This allows
suricatasc to be able to call any new command if this command does
not require an argument.
12 years ago
Eric Leblond
78b5812ae6
unix runmode: add 'pcap-current' command
...
This command outputs the currently processed file name or 'None'
if no file is currently processed.
12 years ago
Eric Leblond
fc7e6c4a3d
unix socket: implement command-list command
12 years ago
Eric Leblond
346d5662b5
cuda: fix invalid use of sizeof
12 years ago
Eric Leblond
aa9f795800
cocci test: add sizeof test
...
This patch adds a new semantic patch taken from
http://coccinellery.org/ . This patch tests if a sizeof take size
of pointer and not of pointed value.
12 years ago
Anoop Saldanha
71609229cc
sigorder cleaned up.
12 years ago