suricata

Commit Graph

Author	SHA1	Message	Date
Victor Julien	76c8c077c5	tcp: fix alignment issues with tcp timestamps	9 years ago
Jason Ish	796dd5223b	tests: no longer necessary to provide successful return code 1 pass, 0 is fail.	9 years ago
Jason Ish	52983bf314	tests: convert all test to return 0 on failure, 1 on success	9 years ago
Victor Julien	38f67d88ea	tcp: reduce TCP options storage in packets Until now, the TCP options would all be stored in the Packet structure. The commonly used ones (wscale, ts, sack, sackok and mss) then had a pointer to the position in the option array. Overall this option array was large. About 360 bytes on 64bit systems. Since no part of the engine would every access this array other than through the common short cuts, this was actually just wasteful. This patch changes the approach. It stores just the common ones in the packet. The rest is gone. This shrinks the packet structure with almost 300 bytes. even though mss wasn't actually used	9 years ago
Victor Julien	1c0b4ee0ae	counters: s/SCPerfCounterIncr/StatsIncr/g	10 years ago
Victor Julien	e9b067c1eb	counters: make increment call take threadvars This hides the implementation from the caller.	10 years ago
Victor Julien	9a8bff7d96	counters: threadvars s/sc_perf_pca/perf_private_ctx/g	10 years ago
Victor Julien	de034f1867	flow: prepare flow forced reuse logging Most flows are marked for clean up by the flow manager, which then passes them to the recycler. The recycler logs and cleans up. However, under resource stress conditions, the packet threads can recycle existing flow directly. So here the recycler has no role to play, as the flow is immediately used. For this reason, the packet threads need to be able to invoke the flow logger directly. The flow logging thread ctx will stored in the DecodeThreadVars stucture. Therefore, this patch makes the DecodeThreadVars an argument to FlowHandlePacket.	11 years ago
Eric Leblond	b2c58b8d14	Set packet invalid flag during decoding. This patch set a new value in pkt->flag to signal that a packet is invalid during decoding. The patch has been obtained via a coccinelle transformation.	12 years ago
Eric Leblond	d4b7ecfbe3	decode: update API to return error In some cases, the decoding is not possible and some really invalid packet can be created. This is in particular the case of tunnel. In that case, it is more interesting to forget about the tunneled packet and only consider the original packet. DecodeTunnel function is maked as warn_unused_result because it is meaningful for the decoder to know if the underlying data were not correct. And in this case, only focus detection on the content.	12 years ago
Victor Julien	49087f21e4	Optimizations to reduce branch misses	12 years ago
Eric Leblond	c5bd04f102	unittest: recycle packet before exit To avoid an issue with flow validation, we need to recycle the packet before cleaning the flow.	12 years ago
Ken Steele	9c7b411a5d	More PacketGetFromMalloc() to allocate packets.	12 years ago
Eric Leblond	e176be6fcc	Use unlikely for error treatment. When handling error case on SCMallog, SCCalloc or SCStrdup we are in an unlikely case. This patch adds the unlikely() expression to indicate this to gcc. This patch has been obtained via coccinelle. The transformation is the following: @istested@ identifier x; statement S1; identifier func =~ "(SCMalloc\|SCStrdup\|SCCalloc)"; @@ x = func(...) ... when != x - if (x == NULL) S1 + if (unlikely(x == NULL)) S1	13 years ago
Victor Julien	06b1d71032	Small optimizations to IPV4 and TCP header parsing.	14 years ago
Eric Leblond	acf10525f6	doc: add decode group and related documentation.	14 years ago
Eric Leblond	7425bf5ca6	Rename some decode event structure and macro. This patch renames DECODER_SET_EVENT, DECODER_ISSET_EVENT and some other structures to ENGINE equivalent to take into account the fact the event list is now related to all engines and not only to decoder.	14 years ago
Victor Julien	6aa551c558	Small optimizations to IPV4 and TCP header parsing.	14 years ago
Victor Julien	6fc075d4ae	Add TCP packet SACK option decoding.	14 years ago
Victor Julien	778b92ef40	Make sure to only alloc a new pseudo packet once during ip defrag.	14 years ago
Eric Leblond	1db4aadd16	Supress usage of Packet declaration in tests. For convenience, a massive usage of 'Packet p;' declaration has been done in the tests function. Although this was completely legal, this is not possible anymore because of the new Packet allocation structure. This massive patch modifies all suricata files to use a SCMalloc allocated pointer to Packet instead. This patch has been done using coccinelle (http://coccinelle.lip6.fr) which is a semantic patching tool. This ensures that things like call to SCFree() should have not been forget because the semantic patch explicitly forces the call to SCFree(p) before each return. With this patch all unittests are running fine with a small and a big default packet size.	15 years ago
Eric Leblond	dd038c1906	Modify files to avoid direct pckt payload access This patch implements the needed modification of payload access in a Packet structure to support the abstraction introduced by the extended data system.	15 years ago
Victor Julien	fc248ca7a1	Many small performance updates.	15 years ago
William Metcalf	2eef905c07	GPL and Copyright header updates.	15 years ago
William Metcalf	ce01927515	Import of GPLv2 Header 050410	15 years ago
Pablo Rincon	b334036d75	Moving inline functions to the .h files, so gcc can inline them correctly	15 years ago
Victor Julien	ecf86f9c23	Rename to Suricata.	16 years ago
Anoop Saldanha	ceb7e495ae	refactoring perf stats code	16 years ago
Breno Silva	c43319c337	Regular expression for UnitTests Signed-off-by: Brian Rectanus <brectanu@gmail.com>	16 years ago
Victor Julien	91bc83e5c6	More logging API usage changes.	16 years ago
Victor Julien	3a28171fbd	Another round of logging api usage updates.	16 years ago
Victor Julien	301522f316	Add TCP_GET_WSCALE macro for easy access to wscale. Update StreamTcp to use it. Default to wscale 14 (max) in case of midstream as there seems to be no reliable way to predict wscale if we missed it.	16 years ago
Anoop Saldanha	22c0ec2bc5	Added support for the csum-<protocol> rules keyword to the detection engine. Keywords added are ipv4-csum, tcpv4-csum, tcpv6-csum, udpv4-csum, udpv6-csum, icmpv4-csum and icmpv6-csum	16 years ago
Anoop Saldanha	401a0313d4	checksum calculation functions for icmpv6, udp over ipv6 and tcp over ipv6	16 years ago
Anoop Saldanha	41dd0f8e62	checksum calculation functions for ipv4, tcp, udpv4, icmpv4	16 years ago
Victor Julien	f5fe190b45	Fix a ipv4 compiler warning. Improve TCP opt decoding error handling logic.	16 years ago
Brian Rectanus	74cb73fc1d	Decode IPv4 options.	16 years ago
Victor Julien	57f71f7e4b	Pass the DecodeThreadVars to all Decoder functions properly. Improve the error handling.	16 years ago
Anoop Saldanha	244f5d547a	new registration functions for the stats api, with local thread storage for counter ids	16 years ago
Brian Rectanus	fa5939ca91	64 bit cleanup part2	16 years ago
Anoop Saldanha	d0e70309c0	Implements counters for the decode module	16 years ago
Victor Julien	657be002d1	Big detection engine update: scan improvements, b2g/b3g updates, bloom fixes, iponly detection implementation, dsize/flow grouping.	16 years ago
Victor Julien	ebf41c3b1e	Remove obsolete decode-http files.	16 years ago
Victor Julien	3df4b7da2b	Set p->proto and add TCP, UDP, etc macros.	16 years ago
Victor Julien	bab4b62376	Initial add of the files.	16 years ago

45 Commits (ae7aae81dc25271f30d4c26f0588f65ad8f44c09)