Commit Graph

280 Commits (aa87f7047038c54f1c062c85f7a1d903c0c8b005)

Author SHA1 Message Date
Gurvinder Singh 0a32b6491f Handling of IDS missed packets and its unitests 16 years ago
Gurvinder Singh b267d4072a test the bug in freeing memory 16 years ago
Gurvinder Singh bcebbebdfd Handling IDS missed packets 16 years ago
Victor Julien 7715e8f0fc Work around some Tcp session free issues in the app layer parsers. 16 years ago
Victor Julien 391e69e699 Fix tunnel packet handling. 16 years ago
Victor Julien e7f8a02484 Improve GRE counting. Actually use the GRE decoder. Register the GRE counter. 16 years ago
Breno Silva 9528e02e46 GRE support 16 years ago
Victor Julien f5fe190b45 Fix a ipv4 compiler warning. Improve TCP opt decoding error handling logic. 16 years ago
Brian Rectanus 74cb73fc1d Decode IPv4 options. 16 years ago
Victor Julien d7de22d0f0 Removing GPLv2 license info as our bylaws aren't final yet and we will redist code non-GPL as well. Rename struct conf_node to ConfNode to comply with engine coding style. 16 years ago
Victor Julien efdd952eb5 Remove noisy debugging output. 16 years ago
Victor Julien 6a1acba1ab Fix missing conf include. 16 years ago
Jason Ish e3b538c7d7 Simple configuration API.
Allow the log directory to be changed.
16 years ago
Victor Julien c73f4334d0 Fix compiler warning. 16 years ago
Victor Julien 4369816cdd Improvements to content keyword memory handling.
First version of a simple pattern based L7 proto detection engine. Currently just works by matching a single pattern in the initial data. Implemented HTTP, SSL, MSN, JABBER, SMTP and a few more.

Couple of pattern matcher cleanups.
16 years ago
Victor Julien 0242fad770 Fix error in freeing the ctx of a SigMatch. 16 years ago
Victor Julien 97854cf4bb Fixup some rule parser memleaks 16 years ago
Victor Julien 25aa05fdb2 use C99 int's. 16 years ago
Gurvinder Singh 6393b6778c unittests for gap handling 16 years ago
Victor Julien 57f71f7e4b Pass the DecodeThreadVars to all Decoder functions properly. Improve the error handling. 16 years ago
Victor Julien 63bc68ee90 Unify all counter registration code on uint16_t counter id's. 16 years ago
Anoop Saldanha 244f5d547a new registration functions for the stats api, with local thread storage for counter ids 16 years ago
Victor Julien d67eec918f Adapted flow comments to doxygen style. 16 years ago
Victor Julien 0a9fca7e57 Fix compilation without unittests enabled. 16 years ago
Victor Julien 451adaff34 Small name support code update for flowbits, flowvars and pktvars. 16 years ago
Victor Julien 522efdcf03 Small reshuffle of the free funcs in the Stream code. 16 years ago
Gurvinder Singh 6824eddb0f New function for task3 16 years ago
Victor Julien 5b946443d8 Use finer grained locking for app layer parsing. 16 years ago
Victor Julien 2d406555a8 Fix compiler warning about 'mode'. 16 years ago
Jamie 698e9c0699 fix incorrect offset in decode-ethernet for PPPoE, more debug statements 16 years ago
Victor Julien 4ec31e0445 Fix short IPv4 packets not getting detected in the decoder. Set decode event on short ipv6 packets. 16 years ago
Victor Julien 265038a75a Fix a memory read error in the BDNM search algorithms. Also (hopefully) fix a 64bit error. 16 years ago
Victor Julien f6a8454232 Layout fixes. 16 years ago
Jamie fdbd09db6c add perfcounter to pppoe 16 years ago
Jamie afa8a6766e test cases for PPPoE, ICMPv4 16 years ago
Victor Julien e31563f61c Fix nfq compilation. 16 years ago
Victor Julien 720ac9efe8 Improve unittest error message if unittests are not compiled in. 16 years ago
Victor Julien 5501212e62 Fix sizeof printf related compiler warnings. 16 years ago
Brian Rectanus fa5939ca91 64 bit cleanup part2 16 years ago
Brian Rectanus 9a9b506c34 64 bit cleanup 16 years ago
Victor Julien 2a6aa00cd8 Use double for the avg counter. 16 years ago
Victor Julien 2e4cc2ad3d Convert tabs to spaces in PPPoE code. 16 years ago
Jamie 8817364ef6 initial PPPoE decoder commit 16 years ago
Victor Julien 3cf7e2e94e Add two counters: avg_pkt_size and max_pkt_size. 16 years ago
Victor Julien 1c3c13c7eb Fix missing limits.h include. 16 years ago
Anoop Saldanha 8af9f902e8 additional support for type qualifier for the stats api 16 years ago
Victor Julien 630a58b719 Fix unittests -u commandline option. 16 years ago
William Metcalf dd86b51dbc added optional option to specify signature file to load 16 years ago
Victor Julien 73217d60b9 Fix compiler warning in binsearch fix. 16 years ago
Victor Julien 9f78d47c2a Further work on the stream L7 parser, it's api and the http stub implementation. 16 years ago
Victor Julien 08ae4482a2 Fix 1 byte searching in BinSearch function. 16 years ago
Victor Julien 9b7ee312e3 Small update. 16 years ago
Victor Julien 5a9a23f9bb Update to the parsers. 16 years ago
Victor Julien 8e10844f95 Initial code of Application Layer parsing framework. Rename of L7* to AppLayer*. 16 years ago
Victor Julien 95f4706549 Merge branch 'victor_local' 16 years ago
Victor Julien 4f358c5a07 Fix list handling in reassembly 16 years ago
William Metcalf 413efe8668 fix regression in detect-parse.c 16 years ago
Jason Ish fed12be6c0 Add some usage. 16 years ago
Jason Ish f28ffebf0e Basic command line support for pcap (file, network), nfq and unit test modes.
Just some basic command line support I had in my tree for setting the
run-mode, including unit tests.  Seems fine for simple setups, but I
think we'll want to make things setup in the config file.  Anyways, I
like to switch from file to real device without a recompile :)

Also want to check with you if the patch is formatted correctly.. I
use git format-patch then used it as a template into mutt, which seems
easier than the git send-email command.

Thanks
-- Jason
16 years ago
Victor Julien e147b87d5f Fix small error in thread creation. 16 years ago
Victor Julien 8c0a5269c0 Fix pcap returning out of it's loop every time. 16 years ago
Anoop Saldanha 53c21410b6 improve the threading api for the ids 16 years ago
Anoop Saldanha d0e70309c0 Implements counters for the decode module 16 years ago
Victor Julien fb68d1c658 Merge branch 'de' 16 years ago
Victor Julien 63d32f723f Fix decode event compiler warning. 16 years ago
Victor Julien b7ad199c97 Fix broken test. Fix content keyword parsing not escaping properly. 16 years ago
William Metcalf ebd569ca4a Added unit tests to detect-content.c to show problems with escaped chars ; " \ : in snort rule lang 16 years ago
Victor Julien b6d55f84ac Revert default runmode change. Fix running decode event unittests twice. 16 years ago
Breno Silva c90b4e6fcd Decode event rule 16 years ago
Victor Julien 54ae12b1f9 Fixes for the stream reassembly. It turned out that using both a prev_seg pointer and a list_seg->prev pointer at the same time was not the best of ideas. So removed the prev_seg ptr. Cleaned up some copy functions too. Added some more debug statements. Made sure the L7 stuff doesn't kick in when running the unittests for reassembly. 16 years ago
Victor Julien e40495e31d Fix git merge artifact. 16 years ago
Victor Julien 387472185d Small reshuffling of the unittests, fix of a buffer overflow, hide some dbg output in the stream reassembly. 16 years ago
Victor Julien 1f995361dd Switch to pthread_cond_timedwait in streammsg queue. 16 years ago
Victor Julien b7c42d55f5 Fix setting l7 thread name. 16 years ago
Victor Julien 4dc8ebac0c Fix locking error causing deadlocks. 16 years ago
Gurvinder Singh 994473cea0 Target Based Stream Reassembly with comments 16 years ago
Victor Julien 25f696106c valgrind memcheck: fix a b3g mem leak at shutdown. 16 years ago
Victor Julien c5b2b8c082 valgrind memcheck: fix small pool memory leaks in the unittests. 16 years ago
Victor Julien dbe2a86ffe valgrind drd: fix flow mutex reinitialization in the flow subsystem when called by unittests. 16 years ago
Victor Julien f5eeea5b0b Make sure flow isn't freed while stream msgs are still in use. 16 years ago
Victor Julien ad093e3021 Add doxygen syntaxed comments to the threadvars structure. 16 years ago
Victor Julien f9227969b0 Add some dbg output to the counters. 16 years ago
Victor Julien 28ad13c7f4 Small output fix for counters. 16 years ago
Anoop Saldanha 7dcd0252ca perf task bugs fixed v3 16 years ago
Victor Julien ae2535c960 Small counter output fixes. 16 years ago
Anoop Saldanha ed820e22cf perf task bugs fixed v2 16 years ago
Anoop Saldanha fc8bb6c934 perf_task_bugs_fixex_v1 16 years ago
Anoop Saldanha a5fb240a4a Changes added for the Performance Counter API 16 years ago
Victor Julien 175eaeca93 Slightly moved around the NFQ define a bit. 16 years ago
Victor Julien e6400bf456 --enable-unittests now controls compilation of unittest code. Added crude commandline support for running unittests: ./eidps runtests 16 years ago
Victor Julien 462a346bf6 Fix printf formatting error in a pool unittest. 16 years ago
William Metcalf a3510f2025 Made NFQ optional via --enable-nfqueue, --enable-logsigs will now load local.rules in the path other fixes 16 years ago
Victor Julien 646262a755 Small cleanups. 16 years ago
William Metcalf 3046cf391d Small printf fixes to detect-flow 16 years ago
William Metcalf 9b4c0d057f Updated flow parsing code for validation, added unit tests, fixed statless check 16 years ago
Victor Julien 1dc2916c3a Add debug output to SetupPkt. 16 years ago
Victor Julien 7c36b315fd Kill the engine if one of the threads fails to initialize. 16 years ago
Victor Julien 051f21e797 Output more info about sequence gaps. 16 years ago
Victor Julien 9854c19a88 Adapt Flow subsys init function to be able to initialize quietly for us in unit tests. Add flow to PPP unit tests. Fixes a floating point exception error. 16 years ago
Victor Julien 416bdd543a Add unit test to pool for the bug from yesterday. 16 years ago