Shivani Bhardwaj
0f3e7761da
doc: add dataset examples
2 years ago
Lancer Cheng
6142593a69
doc: add version filed in NTLMSSP documentation
...
Bug OISF#5783
2 years ago
Haleema Khan
609df1776e
userguide: update tls keywords information
...
Ticket #5544
2 years ago
jason taylor
8e5b1fe8e6
userguide: add DHCP EVE log information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
Victor Julien
f4fa51986e
doc: warn IPS users on new exception policy default
2 years ago
Philippe Antoine
e3105a6614
ftp: adds a config option ftp-hash for autofp-scheduler
...
This allows ftp-data and ftp flows to be processed by the same
thread. Otherwise, there may be a concurrency issue where the
would-be ftp-data flow is first processed, and thus not recognized
as such. And the ftp flow gets processed later and the expectation
coming from it is never found.
To do so, the flow hash gets used as usual, except for flows that
may be either ftp or ftp-data, that is either one port is 21, or
both ports are high ones.
Ticket: #5205
2 years ago
Jason Ish
1b844cd7f7
doc/userguide: document --include command line option
2 years ago
Philippe Antoine
b52293b609
dcerpc: config limit maximum number of live transactions
...
As is done for other protocols
Ticket: #5779
2 years ago
Juliana Fajardini
918bd7435c
userguide/config: update log format symbols list
...
There were some possible format options missing after the recent changes
in the log format.
2 years ago
Juliana Fajardini
0d9289014b
exceptions: add master switch config option
...
This allows all traffic Exception Policies to be set from one
configuration point. All exception policy options are available in IPS
mode. Bypass, pass and auto (disabled) are also available in iDS mode
Exception Policies set up individually will overwrite this setup for the
given traffic exception.
Task #5219
2 years ago
jason taylor
0632233791
userguide: update http.cookie description
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
Philippe Antoine
55c4834e4e
smb: configurable max number of transactions per flow
...
Ticket: #5753
2 years ago
Jason Ish
48f0fd3c74
doc/userguide: update logging section for time formats
...
- Update fragment of configuration file to match suricata.yaml with
new default-log-format.
- Document new %z format specifier.
2 years ago
Juliana Fajardini
4c7ca2c367
devguide/install: add note about ubuntu version
...
We want to make it clear with which system the instructions for
installing from were tested with.
2 years ago
Juliana Fajardini
377885f420
exception-policies: fix typos
2 years ago
Bazzan Don
6e4a5cee7a
devguide: add page on installing suricata from git
...
As part of the process of moving documentation from redmine
to "Read the Docs", this commit moves installing Suricata using git
page from redmine wiki into Suricata Developer Guide section.
It also updates the necessary steps.
Ticket: #5585
2 years ago
Jason Ish
0a4e3d0f82
doc/userguide: ubuntu: install software-properties-common
...
This package likely needs to be installed when starting with an Ubuntu
container or other minimal Ubuntu install.
Ticket: #5616
2 years ago
Richard McConnell
b39a4c63fe
doc: document AF_XDP feature
2 years ago
Todd Mortimer
15c77be937
swf-decompression: Disable by default.
...
Add an entry to the upgrade guide noting the change.
Ticket: #5632
2 years ago
Jeff Lucovsky
197ad51138
doc: Update bsize documentation
...
This commit updates the bsize documentation
1. Describe what happens when "content" immediately precedes "bsize"
2. Include the operators and
3. Include examples using the operators.
2 years ago
jason taylor
9dc8fffe05
userguide: update tos keyword information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor
1d9b91a987
userguide: update fragoffset keyword information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor
7c73144988
userguide: update fragbits information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor
4be9793e36
userguide: update geoip information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor
e8eba6e4a1
userguide: update id keyword information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor
cfd0da133e
userguide: update ipv6.hdr keyword information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor
150a04b597
userguide: update ipv4.hdr keyword information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor
298f59c2ba
userguide: update ip_proto keyword information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor
6226492976
userguide: update sameip keyword information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor
f97ba44339
userguide: update ipopts keyword information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor
9b4e6e5802
userguide: update ttl keyword information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
Philippe Antoine
ce710181f6
doc: update doc for HTTP file.data to server
...
Ticket: #4144
Completes e587f6792a
2 years ago
Jeff Lucovsky
5a6e68285b
doc/netmap: Describe Netmap IPS usage
...
Issue: 5512
This commit summarizes Netmap usage with Suricata's IPS mode.
2 years ago
Jason Ish
9d653512f9
doc/userguide: update bittorrent-dht eve examples
...
Update the bittorrent-dht examples using real log records with peers
and nodes broken down into objects.
2 years ago
Jason Ish
065f3ab9f1
doc: rename bittorrent-dht to bittorrent_dht in eve output
2 years ago
Jason Ish
0ea9ba66d1
userguide/eve-log: remove mentions of requiring Rust
...
Rust is required to build now.
2 years ago
Aaron Bungay
d166c48d28
docs: update for bittorrent-dht app-layer
2 years ago
Philippe Antoine
a003640ecf
security: prevents process creation
...
with setrlimit NPROC.
So that, if Suricata wants to execve or such to create a new process
the OS will forbid it so that RCE exploits are more painful to write.
Ticket: #5373
2 years ago
Richard McConnell
7f4c1d5e2f
doc/systemd: add documentation for sd_notify
2 years ago
Eric Leblond
9fb0137d9d
doc: add reference to ipaddr in IP matching
2 years ago
Eric Leblond
3bd48d9336
detect: doc link for ip.src and ip.dst
2 years ago
Eric Leblond
da8b16eaeb
doc: add ip.dst and ip.src doc
2 years ago
Eric Leblond
3599cbf1c4
doc: document new dataset types
...
Feature: #5383
2 years ago
Eric Leblond
a1a22cccd2
doc: document dataset-lookup
...
Ticket: #5184
2 years ago
Eric Leblond
20973e9e6b
doc: add dataset-clear command
...
Ticket: #5184
2 years ago
Eric Leblond
c5559cb68f
doc: document dataset-dump command
...
Ticket: #5184
2 years ago
Victor Julien
2f6c014f70
doc/devguide: update packet (de)alloc in unittests
2 years ago
Lukas Sismis
37cf365e19
docs: remove outdated constraint of negation support for ssl_state
...
Commit 487cdda93d
adds negation support for the SSL state.
2 years ago
Juliana Fajardini
e4b46e0763
doc/acknowledgements: add a few more names
...
Added some names of known contributors to the documentation
2 years ago
Juliana Fajardini
3c25185e0b
devguide: add section about stale tickets policy
...
Just to set the right expectations, and to have it registered for us,
too.
2 years ago