17890 Commits (b00788af8b6241ce5ff43b9837beb1ce2e995d73)

 

All Branches   

Search

Author	SHA1	Message	Date
Philippe Antoine	b00788af8b	rust: bindgen SCAppLayerParserTriggerRawStreamInspection ... Ticket: 7667	1 year ago
Philippe Antoine	c52121586a	rust: move AppLayerEvents funcs out of RustContext ... Ticket: 7667 just use it directly, with bindgen, and cfg not test	1 year ago
Philippe Antoine	2b419a5a26	src: clean includes for app-layer-events.h	1 year ago
Philippe Antoine	bf6b8510fe	rust: move DetectEngineStateFree out of RustContext ... Ticket: 7667 just use it directly, with bindgen, and cfg not test	1 year ago
Philippe Antoine	573dd2367e	rust: bindgen SCFileFlowFlagsToFlags ... Ticket: 7667	1 year ago
Philippe Antoine	6fa85d18f0	rust: reenable lint unused_doc_comment ... With just local exceptions	1 year ago
Philippe Antoine	b59086210f	rust: bindgen flow ffi API ... Ticket: 7667	1 year ago
Philippe Antoine	bbf1424371	rust: bindgen MpmAddPatternCI ... Ticket: 7667	1 year ago
Philippe Antoine	c391451f19	rust: begin to bindgen app-layer-register.h ... Ticket: 7667	1 year ago
Philippe Antoine	95483228d2	detect: list-keywords cli shows integers with bitflags ... Ticket: 7875	1 year ago
Philippe Antoine	53d9569dfb	detect: list-keywords cli shows integers with enums ... Ticket: 7875	1 year ago
Philippe Antoine	da486af881	detect: list-keywords cli shows integers ... Ticket: 7875	1 year ago
Philippe Antoine	68017d3fe1	detect: grow SigTableElmt flags to u32 ... to be later able to store information about keywords being about integers	1 year ago
Philippe Antoine	b298bce0e7	detect: list-keywords cli shows multi-buffers ... Ticket: 7571	1 year ago
Andreas Dolp	37d748d441	doc: fix typo duplicate 'of' ... Thanks to catenacyber	1 year ago
Andreas Dolp	375b5dd306	doc: fix typo /var/run/suricata in file permissions docs.	1 year ago
Andreas Dolp	cc590b54c7	doc: fix typo and missing newline in rules/ssh_keywords.	1 year ago
Andreas Dolp	228abb7da0	doc: fix doc syntax error in rate_filter example.	1 year ago
Juliana Fajardini	21b27597d6	doc/rules/internals: minor fixes ... Fix typo and add a reference about the classtype keyword effect. Related to Task #5449	1 year ago
Fupeng Zhao	e79d735374	decode/etag: ETag 802.1BR decoder ... Ticket: #3953.	1 year ago
Philippe Antoine	cb9ab951b9	detect/integers: subslice for multi-integers	1 year ago
Philippe Antoine	82f0e725a2	detect/integers: index or_absent and or_oob ... To match if array is empty, or index is out of bounds	1 year ago
Philippe Antoine	1480cf47ab	detect/integers: nb index to match a specific number of times ... For example dns.rrtype: !A,nb>3 will match if we have more than 3 dns records which are not A	1 year ago
Philippe Antoine	6f848eeaaf	detect/integers: all1 index to match only on non-empty arrays	1 year ago
Philippe Antoine	dd81cfa733	detect/uint: wait for end of progress to match on all ... As is done for absent keyword for instance	1 year ago
Philippe Antoine	5add185f22	http2/detect: http2.window can now use index ... Ticket: 7480	1 year ago
Philippe Antoine	83868778b9	http2/detect: http2.priority can now use index ... Ticket: 7480	1 year ago
Philippe Antoine	9fc407fd75	mqtt/detect: mqtt.type can now use index ... Ticket: 7480	1 year ago
Philippe Antoine	dad424d74a	doc: multi-integers section for rules ... Ticket: 7480 Describing the usage of index	1 year ago
Philippe Antoine	c0988252ba	dns/detect: rrtype can now use index ... Ticket: 7480	1 year ago
Philippe Antoine	d8c1f8e7be	rust/detect: generic detect_uint_match_at_index ... and make ldap use it Ticket: 7480 No behavior change, just code restyling	1 year ago
Philippe Antoine	7effcb7835	rust/ldap: use Vec instead of Vecdeque ... as we do not pop Ticket: 7480 May have a behavior change, but only in terms of performance	1 year ago
Philippe Antoine	f555f02ed4	rust/detect: generic detect_parse_array_uint_enum ... And make ldap use it Ticket: 7480 No behavior change, just code restyling	1 year ago
Philippe Antoine	c6d3857793	rust/detect: create generic DetectUintArrayData ... And make ldap use them Ticket: 7480 No behavior change, just code restyling	1 year ago
Philippe Antoine	e01d19889e	rust/detect: move DetectUintIndex definition to generic file ... Ticket: 7480 No behavior change, just code restyling	1 year ago
Philippe Antoine	ef6ce7d701	detect: rename LdapIndex to something generic ... to be able to use it outside of ldap Ticket: 7480 No behavior change, just code restyling	1 year ago
Philippe Antoine	2ed7a85356	rust: rustfmt detect uint	1 year ago
Fupeng Zhao	7a04a032b9	decoder/vxlan: fix VXLAN port detection per RFC 7348 ... Simplify DecodeVXLANEnabledForPort() to only check destination port to avoids false positives when identifying VXLAN traffic. Per RFC 7348 §5, VXLAN identification is based solely on the outer UDP destination port (4789), regardless of inner packet direction. The outer UDP source port is used for load balancing via inner packet hash and should not be considered for VXLAN detection. This ensures correct VXLAN identification for all encapsulated traffic patterns. Checking both source and destination ports could incorrectly classify non-VXLAN UDP traffic as VXLAN when the source port happens to be 4789, leading to false positives in VXLAN detection and potential decode errors.	1 year ago
Fupeng Zhao	4f68cb026f	decoder/vxlan: add configurable reserved bits validation for VXLAN ... Add support for two VXLAN reserved bits check modes: - strict: validate all reserved bits for standard VXLAN format - permissive: skip all reserved bits validation (allows extensions) Configuration added to suricata.yaml.in with 'strict' as default. Includes comprehensive unit tests and documentation updates. Ticket: 7753	1 year ago
Philippe Antoine	b7056cd2dc	src: remove some unused functions	1 year ago
Philippe Antoine	26b3f901cb	detect: remove unused PrefilterStoreGetName	1 year ago
Alice Akaki	8e0b0ef35f	detect: add email.body_md5 keyword ... email.body_md5 matches on md5 hash generated from email body This keyword maps to the EVE field email.body_md5 It is a sticky buffer Supports prefiltering Ticket: #7587	1 year ago
Alice Akaki	6c88cc1e0c	detect/mime: fix detect mime nits ... Return 0 if .to_str() fails in functions SCDetectMimeEmailGetData and SCDetectMimeEmailGetDataArray Fixes: 431822c ("detect: add email.from") 96e461f ("detect: add email.received keyword")	1 year ago
Alice Akaki	4f1cc19f25	mime/smtp: Change md5_result type from GenericArray<u8, U16> to String	1 year ago
Victor Julien	96ae693b44	version: start work on 9.0.0	1 year ago
Philippe Antoine	dae9264120	doc: really enforce more the completeness of json schema ... Completes commit f1f32a39ee End better describe exception_policy	1 year ago
dependabot[bot]	cf4a86185d	github-actions: bump codecov/codecov-action from 5.5.0 to 5.5.1 ... Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.5.0 to 5.5.1. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](fdcc847654...5a1091511a) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-version: 5.5.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 year ago
dependabot[bot]	5aa30fccc8	github-actions: bump actions/github-script from 7.0.1 to 8.0.0 ... Bumps [actions/github-script](https://github.com/actions/github-script) from 7.0.1 to 8.0.0. - [Release notes](https://github.com/actions/github-script/releases) - [Commits](60a0d83039...ed597411d8) --- updated-dependencies: - dependency-name: actions/github-script dependency-version: 8.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	1 year ago
dependabot[bot]	f18c8883cf	github-actions: bump github/codeql-action from 3.30.0 to 3.30.3 ... Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.0 to 3.30.3. - [Release notes](https://github.com/github/codeql-action/releases) - [Commits](https://github.com/github/codeql-action/compare/v3.30.0...v3.30.3) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 3.30.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 year ago
Shivani Bhardwaj	0d65d35c92	version: start development towards 8.0.2	1 year ago