2169 Commits (a844eecb0e115758eb87d515d37b9fcd877d2fec)

Author	SHA1	Message	Date
Martin Beyer	736f09c4bc	fixed ptxdump for python3	15 years ago
Martin Beyer	49d66430bc	build cuda modules with make	15 years ago
Victor Julien	f7f037c1d1	Make sure stateful detection engine inspecting HTTP streams works well for to_client rules as well.	15 years ago
Anoop Saldanha	b4427e81ec	minor fixes in endianness handling in dcerpc and dce detection engine	15 years ago
Kirby Kuehl	acfc9a8ab0	Improve DCERPC big endian support when parsing BIND CTX Items (UUID). Make default byte packing order for the slow path little endian. Byte swapping on slow path will occur if big endian. This is a readability change, not a functional change.	15 years ago
Anoop Saldanha	5ccd9a8347	byte_extract support for isdataat added	15 years ago
Anoop Saldanha	35f3eafa5e	byte extract added to the engine. Detection support added for packet payload, uri and dce detection engines	15 years ago
Eric Leblond	64b069369e	Unified2: Use local variable for header copy ... Due to the chaining of function call, the per-thread buffer was overwritten. This was causing invalid data to be output. This patch restores a local variable usage for the writing of the header which are rather small and thus should not be a performance and security issue.	15 years ago
Eric Leblond	9d24e3aacc	Fix len computation.	15 years ago
deltay	170efc8d38	Register http parser callbacks in the right place.	15 years ago
Victor Julien	1174df9712	Fix passing a uint8_t as an int. Breaks on some args.	15 years ago
Victor Julien	ad175c8aec	Fix complition on OS/archs that don't support atomic variables.	15 years ago
Victor Julien	0ea883edf3	Fix broken stateful detection unittest.	15 years ago
Victor Julien	3f409db486	Use pmmintrin.h as older gcc's don't have immintrin.h it seems.	15 years ago
Victor Julien	73efb4c70f	Add a app layer state and stateful detection engine counter that makes sure the stateful inspection is only done when the state changes.	15 years ago
Victor Julien	50aceb11eb	Clean up stateful detection code.	15 years ago
Victor Julien	0768ca9806	Fix SIMD mask checking on 64 bit systems.	15 years ago
Victor Julien	350215966b	Fix signature mask bitorder.	15 years ago
Victor Julien	aa822c0ac1	Always reset alert cnt and always increment det_ctx->pkts.	15 years ago
Victor Julien	1e0b050a54	Add more mask flags.	15 years ago
Victor Julien	4b52823ab6	Use 64 bit mask on 64-bit systems.	15 years ago
Victor Julien	e5b6c0f518	Check 32 masks per run instead of 16 in the SIMD code.	15 years ago
Victor Julien	2dbfdd40af	Clean up new SIMD mask checking code, improve non-SIMD checks.	15 years ago
Victor Julien	b421019cef	Match packet mask against 16 signature masks at once using SIMD instructions for SSE3 and up.	15 years ago
Victor Julien	8f43670b16	Add wrappers for aligned memory allocation.	15 years ago
Victor Julien	7e128176d2	Add Vector datatype for SSE operations.	15 years ago
Victor Julien	bc5738d57d	Add compiler and hardware barrier macro's.	15 years ago
Victor Julien	90ebb6f01f	Fix broken fix.	15 years ago
Gerardo Iglesias Galvan	a3e0325075	Don't loose memory if PoolInit fails	15 years ago
Gerardo Iglesias Galvan	363285d485	No need to check array pointer	15 years ago
Gerardo Iglesias Galvan	a2b7b77434	Make sure we always check the result of TmThreadCreatePacketHandler	15 years ago
Gerardo Iglesias Galvan	f545df3ea7	Fix potential issue in TmThreadsSlot1NoIn	15 years ago
Gerardo Iglesias Galvan	a9509eea2e	Fix very minor mem leak when setting bpf filter	15 years ago
Gerardo Iglesias Galvan	4c4c2a5583	Remove dead code from the BoyerMoore implementation	15 years ago
Gerardo Iglesias Galvan	b1e7c0b123	Properly free data in tag match function	15 years ago
Gerardo Iglesias Galvan	570e0ec9e4	Fix potential memory leak in ASN1 parsing code in low memory conditions	15 years ago
Gerardo Iglesias Galvan	313067f47f	Check return code of DetectEngineCtxInit at startup	15 years ago
Gerardo Iglesias Galvan	c968ca0f85	Fix potential small issue with ftell and fseek	15 years ago
Gerardo Iglesias Galvan	dd5e438d6f	Make all access to memory tracking counters in stream engine lock protected	15 years ago
Gerardo Iglesias Galvan	36290297dc	Remove dead code from reference handling	15 years ago
Gerardo Iglesias Galvan	44692c83aa	Properly check retval for config and conversion function calls	15 years ago
Gerardo Iglesias Galvan	5ac8ab9a61	Check inet_pton retval and properly cleanup on error in unittest helper	15 years ago
Gerardo Iglesias Galvan	58f713254e	Make sure return value of fgetc isn't truncated	15 years ago
Gerardo Iglesias Galvan	bd6d1bfac4	Fix potential crash in classtype parsing code	15 years ago
Gerardo Iglesias Galvan	73dd5562c3	Fix potential crash in signature parsing code	15 years ago
Gerardo Iglesias Galvan	91c001f93b	Fix potential crash in initialization cleanup code	15 years ago
Gerardo Iglesias Galvan	5d85b0f7b7	Fix potential crash in ip-only address parsing code	15 years ago
Gerardo Iglesias Galvan	a56592e556	Make sure we do all after the null check in HTPStateFree	15 years ago
Gerardo Iglesias Galvan	c4832814b4	Prevent a memory leak on low memory conditions in http client body handling	15 years ago
Gerardo Iglesias Galvan	2836e0de4e	Fix potential alert-unified-log recourse leak during initialization	15 years ago
Gerardo Iglesias Galvan	0f458495c7	Fix potential prelude recourse leak during initialization	15 years ago
Gerardo Iglesias Galvan	db94f01831	Fix declaration hiding len parameter in IPv6 decoder	15 years ago
Gerardo Iglesias Galvan	305140d081	Silence coverity warning	15 years ago
Eric Leblond	bc68c108a7	NFQ: use per thread allocated data for recv buffer.	15 years ago
Pierre Chifflier	a2b37e7487	Prelude: fix test always returning true ... Fix wrong logic in test for error handling code. Signed-off-by: Pierre Chifflier <chifflier@wzdftpd.net>	15 years ago
deltay	2856cf0de5	#277 ignore bpf filter if fread failed.	15 years ago
Eric Leblond	4b0c8f6567	Use local thread variable buffer in alert unified2.	15 years ago
Eric Leblond	c8a811e69d	Make use of per function/thread data in alert unified. ... This patch replaces a local variable buffer by the usage of the data contained in the local thread variable.	15 years ago
Victor Julien	63f6de58cb	Fix HTP unittests that test pre 0.2.6 libhtp issue. HTP config wasn't restored properly.	15 years ago
Victor Julien	326047eec1	Add unittests for debugging a libhtp issue.	15 years ago
Jason Ish	7257fed0f3	Fix bug 288, accept true in output configuration. ... Refactor a bit to run checks for truth through a common function that takes yes, true, on and 1 as true values.	15 years ago
Anoop Saldanha	b819643635	coverity - logging system buffer overrun fix	15 years ago
Victor Julien	6dba98f277	Remove dead code from flowbits parsing.	15 years ago
Victor Julien	e866aa3e15	Fix TAG removal in certain conditions.	15 years ago
Victor Julien	f4aad76bb4	Make sure we don't process TAG records from the flow multiple times and outside the flow lock.	15 years ago
Victor Julien	6384b39f18	Remove unused and broken htp code.	15 years ago
Victor Julien	e1d4e16645	Simplify packet decoding macro's.	15 years ago
deltay	e3270f20b2	#277 Add -F option to load bpf filter from file	15 years ago
Victor Julien	b73939bcef	Clean up & better check includes to allow Windows to build.	15 years ago
Victor Julien	be5ad4402d	Fix stream reassembly engine compilation on Windows.	15 years ago
Victor Julien	40bf422453	Fix log-pcap compilation on Windows.	15 years ago
Victor Julien	5d9c093d65	Don't compile alert-syslog module on Windows, it doesn't work anyway.	15 years ago
Victor Julien	da086894e5	Remove unnecessary include that breaks windows builds.	15 years ago
Victor Julien	95387b2297	Include <windows.h> to get access to THREAD_PRIORITY_* defines.	15 years ago
Victor Julien	dd97d136a9	Rearrange syslog.h including so we won't fail to build on win32.	15 years ago
Victor Julien	e16a566a96	Account for distance when checking within. Bug #285.	15 years ago
Victor Julien	7f88158fb3	Remove a debug statement from single pcap file runmode.	15 years ago
Victor Julien	52eb8d2be0	Convert mutex protected tunnel counters to lockless atomic counters.	15 years ago
Victor Julien	54cd3552e1	Remove tunnel_proto field from Packet structure.	15 years ago
Victor Julien	3d22713b09	Convert Packet tunnel variables to bit flag checks.	15 years ago
Victor Julien	75439863ed	Shrink PacketAlerts structure so that Packet structure is a lot smaller. Reduce max events per packet from 256 to 15.	15 years ago
Victor Julien	d3f19a3851	Fix memcmp checks that prevent reading past buffer boundary.	15 years ago
Victor Julien	4a2d4eef5a	Properly reset IPv6 extension headers structure.	15 years ago
Victor Julien	962462e470	Fix SSE memcmp functions reading beyond the buffer. Add tests to bench them.	15 years ago
Victor Julien	ece8e5444b	Minor profiling fix: don't close stdout.	15 years ago
William	d74fe520e5	Experimental support for PCRE-sljit enable via --enable-pcre-sljit	15 years ago
William	85643fe780	Convert to logging perf stats to file by default. Add a few columns to output avg ticks per match, avg ticks non match, allow sorting on based on them.	15 years ago
Victor Julien	36917c7d66	Fix not using new htp callback when using the bundled htp. Add indication to --build-info. Fix valgrind warning in test and further improve test.	15 years ago
Victor Julien	a3e2b35536	Add configure check for new htp 0.2.5 uri normalize hook.	15 years ago
Victor Julien	15ce850387	Add support for new libhtp htp_config_register_request_uri_normalize callback.	15 years ago
Anoop Saldanha	6e0d98d9c4	fix valgrind issue for SMB test. Small restructuring. probing_parsers global variable now part of AlpProtoDetectCtx	15 years ago
Anoop Saldanha	7f8fb0f00d	fix bounds checking in smb probing parser	15 years ago
Victor Julien	149ee6b648	Disable to_client http detection. Libhtp expects to_server data first.	15 years ago
Victor Julien	8999de2f93	Add proper RST handling to all TCP states.	15 years ago
Victor Julien	9a58a02559	Wrap HTP code that is only used in debug mode in debug ifdefs.	15 years ago
Victor Julien	a5d9c86dd3	Shrink Flow structure with 20 bytes (on 32 bit) and reorder it. Clean up init, recycle, destroy macro's.	15 years ago
Anoop Saldanha	61635f302c	indentation changes in app-layer-smb.c	15 years ago
Anoop Saldanha	a40fdc794e	Added probing parser for nbss/smb on port 139	15 years ago
Anoop Saldanha	b7b7bbec37	code indentation changes in app-layer-smb.c	15 years ago
Anoop Saldanha	7c31a2327e	Add support for port based probing parsers for alproto detection	15 years ago
Anoop Saldanha	fe6e41e3ef	Removed FLOW_AL_NO_APPLAYER_INSPECTION. Moved it as FLOW_NO_APPLAYER_INSPECTION in Flow->flags. Turned Flow->flags into uint32_t and removed Flow->alflags	15 years ago
Anoop Saldanha	0c94d910e4	Removed FLOW_AL_STREAM_TOSERVER and FLOW_AL_STREAM_TOCLIENT. Use STREAM_TOSERVER and STREAM_TOCLIENT instead	15 years ago
Anoop Saldanha	ac5584a863	Removed FLOW_AL_PROTO_DETECT_DONE. Replaced it with FLOW_ALPROTO_DETECT_DONE, stored it in Flow->flags	15 years ago
Anoop Saldanha	49e2b580cb	Removed FLOW_AL_PROTO_UNKNOWN. We don't need this flag	15 years ago
Anoop Saldanha	38fe2b9070	Removed FLOW_AL_STREAM_START, EOF and GAP flags. We don't need these. Just use STREAM_* flags	15 years ago
Anoop Saldanha	000ce98cd1	push all proto detection code into their respective app parser register functions for every alproto	15 years ago
Anoop Saldanha	aab4a43145	Add C and E flags to flags keyword. We still support 1 and 2 for backward compatibility	15 years ago
Anoop Saldanha	78bf2579aa	move pseudo packet creation outside defragreassemble loop	15 years ago
Victor Julien	f303f3f523	Fix a logic error in the SACK list cleanup causing a memleak and invalid memory access at the same time.	15 years ago
Victor Julien	1578ef1e3e	Make sure that the stream engine fully reassembles both sides of the session upon receiving a valid RST.	15 years ago
Victor Julien	83c3f15812	Minor fixes in defrag engine, shrink DefragTracker_ structure.	15 years ago
Jason Ish	0385f72669	Use separate frag decoder events for IPv4 and IPv6.	15 years ago
Jason Ish	de1c40c44f	Set decoder event on fragment overlaps.	15 years ago
Jason Ish	7f5e120d60	Cleanup assignment of the default defrag policy.	15 years ago
Jason Ish	6da9c64a28	Set decoder event when re-assembled fragments would exceed max IP packet size.	15 years ago
Victor Julien	96c2f2c877	Fix 2 stream reassembly unittests	15 years ago
Victor Julien	14ad853b94	Process a stream end pseudo packet when going from TIME_WAIT to CLOSED.	15 years ago
Victor Julien	3b40b02a1b	Stream reassembly fixes.	15 years ago
Victor Julien	c88630639e	Fix setting libhtp personality.	15 years ago
Victor Julien	6aa551c558	Small optimizations to IPV4 and TCP header parsing.	15 years ago
Victor Julien	d0374ced38	Implement SACK in the stream engine.	15 years ago
Victor Julien	6fc075d4ae	Add TCP packet SACK option decoding.	15 years ago
Victor Julien	dbe291bc50	Allow for 0 (unlimited) HTTP request_body_limit, fix option parsing.	15 years ago
Victor Julien	136f55efc7	Fix a memory leak in flow recycle code causing the detection engine state not to be fully freed (recycled) but reference to memory removed anyway.	16 years ago
Victor Julien	38a7d1777f	Bump version to 1.1beta2	16 years ago
Victor Julien	a0799f0ff9	Wait longer at shutdown before concluding it's taking too long. Hopefully enables our slow QA boxes to complete in time.	16 years ago
Anoop Saldanha	d245f15f14	disable mpm pattern's retest skipping in detection engine for uri, hcbd, hmd, hrhd, hhd, hmd, hcd	16 years ago
Victor Julien	681f8329a6	Make error on <- direction operation use more explicit.	16 years ago
Victor Julien	cd75201dc7	Fix pfring commandline handling.	16 years ago
Victor Julien	778b92ef40	Make sure to only alloc a new pseudo packet once during ip defrag.	16 years ago
Victor Julien	5f2a0653b4	If engine shutdown (processing in-engine packets) times out, exit Suricata with EXIT_FAILURE.	16 years ago
Victor Julien	9ca0658a6e	Clear pcap_cnt variable on packet recycle.	16 years ago
Victor Julien	03ea563e93	Don't set ip{4,6} header on reassembled ip packet until we know for sure what buffer the packet is stored in.	16 years ago
Victor Julien	f5674eff74	Fix a copy issue in PacketCopyDataOffset.	16 years ago
Victor Julien	8978266a91	If shutdown doesn't complete processing all packets that are already in the engine within 30 seconds, force quit.	16 years ago
Victor Julien	5d2f633c48	Properly initialize pfring runmode before using it. Fix malformed conf api calls.	16 years ago
Anoop Saldanha	966119b6aa	support for http_raw_uri keyword + mpm engine	16 years ago
Victor Julien	169104a803	Slightly clean up --list-runmodes output.	16 years ago
Anoop Saldanha	e4d890e186	modify runmode api to accept conf runmode paramter as a char string, instead of an interger id	16 years ago
Anoop Saldanha	fb4ffc9aef	fixed runmode name changes that was missed in the previous changes to the runmode api	16 years ago
Anoop Saldanha	229f7281ea	list runmodes. Allow specification of runmode id from cof file. Also allow for command line override	16 years ago
Anoop Saldanha	05686e70a5	fix coding indentation + neaten runmode code	16 years ago
Anoop Saldanha	d7c707e656	modify runmodes to take all arguments from the conf API	16 years ago
Anoop Saldanha	a165d45da9	naming changes for runmodes	16 years ago
Anoop Saldanha	6fceeda8c5	move erf dag runmode into its own file runmode-erf-dag.[ch]	16 years ago
Anoop Saldanha	f51cf34210	move erf file runmode into its own file runmode-erf-file.[ch]	16 years ago
Anoop Saldanha	86eabbc2f5	move ipfw runmode into its own file runmode-ipfw.[ch]	16 years ago
Anoop Saldanha	036015d6b9	move nfq runmode into its own file runmode-nfq.[ch]	16 years ago
Anoop Saldanha	9affa39b29	move pfring runmode into its own file runmode-pfring.[ch]	16 years ago
Anoop Saldanha	e7ac1d7c4c	move pcap file runmode into its own file runmode-pcap-file.[ch]	16 years ago