Commit Graph

114 Commits (b8211e8c04f25947ee3bbb1473e8ff75920c9c46)

Author SHA1 Message Date
Anoop Saldanha 00f21252fa support fragmented pdus in dce + unittest 16 years ago
Anoop Saldanha ebc1f62050 some additional indentation changes in DCERPCParser 16 years ago
Anoop Saldanha c2bc8ca252 fix mem leak in tailq that holds dce uuids 16 years ago
Anoop Saldanha 1c443677b2 fix indentation in DCERPCParser 16 years ago
Victor Julien f081577fe4 Revert yesterday's dcerpc commits as there were to many corner cases for it to go into 1.0.1. 16 years ago
Anoop Saldanha 526a782002 temporary fix for dcerpc so that we don't loop endlessly, till we cover all cases with fragged pdus 16 years ago
Anoop Saldanha 361cf14f50 fix endless loop. Change dce parser to accept ctx ids that always start with a ctx with a 0 ctx id 16 years ago
Anoop Saldanha 8c774a1e2a fix 206. Keep a count of uuids that don't belong to the first frag. Change dce_iface to match against uuids based on any_frag setting 16 years ago
Anoop Saldanha 52bb4c0670 fix endless loop in dce parser. fix parsing error of secondaryaddrlen for bindack 16 years ago
Anoop Saldanha cda1efff29 fix mem leak in tailq that holds dce uuids 16 years ago
Anoop Saldanha 154a48fada parse fragmented dce rpc headers correctly. Also some other minor fixes 16 years ago
Anoop Saldanha c7fdc5ebda do not reset dce stub buffer, if we are dealing with fragmented pdus(holds good only for first frag request pdus) 16 years ago
Anoop Saldanha 73241fc86c support fragmented puds in dce + unittest 16 years ago
Anoop Saldanha 3ae45e5bbc fix indentation in DCERPCParser 16 years ago
Kirby Kuehl e8ecc94d6a fix multiple dcerpc fragments in one packet 16 years ago
Anoop Saldanha b7a57c5210 fix setting the right value for parsed bytes in case of fragmented BIND dce PDUs 16 years ago
Kirby Kuehl 18840bd96e properly handle bytecount of 0 16 years ago
Victor Julien 718fecb6fc Better handle low memory conditions. 16 years ago
William Metcalf 0e4235cc94 FLOW_DESTROY added to clean-up UT's that init flow 16 years ago
Anoop Saldanha 015385c6bd changes to the dce parser stub data processed var. changed to stub data fresh var to indicate if the stub is fresh or not 16 years ago
Anoop Saldanha 98433f407c dce rpc stub data held in separate buffers for request and response pdus 16 years ago
Pablo Rincon 8cc525c939 UDP support at AppLayer message handling 16 years ago
William Metcalf cc76aa4bc6 properly init flows inside of unit-tests caused lock-up when falling back to using mutex locks 16 years ago
Victor Julien 70b32f7380 First stab at creating a stateful detection engine.
Stateful detection for app layer detection keywords, except uricontent. Stores it's partial results in the flow structure. Other modifications:

- Generalize transaction tracking, logging and inspection.
- Adapt http and dcerpc to use the new transaction handling.
- Stream engine now always notifies app layer of a stream eof.

This commit fixes bug #124.
16 years ago
root 73c6fb16ba Return 0 instead of -1 when SMB and DCERPC encounter non fatal errors to clean up errors emitted in AppLayerParse. 16 years ago
William Metcalf ce01927515 Import of GPLv2 Header 050410 16 years ago
Gurvinder Singh 074b896879 fixed typo in dcerpc (bug 137) 16 years ago
Victor Julien e6ba571c0b Rename structures that don't adhere to our naming conventions. 17 years ago
Victor Julien 449205cfeb Remove wrong copyright info, cleanup headers. 17 years ago
Kirby Kuehl afb08d388d make sure we have input_len 17 years ago
Pablo Rincon 25a3a5c6d8 Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks. 17 years ago
Kirby Kuehl 565eab1f54 fix bug88 17 years ago
Kirby Kuehl bea30a6db6 bug 88 validate dcerpc header 17 years ago
Victor Julien b99e10236c Fix a endless loop condition in the smb parser and make dcerpc parser more quiet. 17 years ago
Kirby Kuehl 4b05bc281d fix padding bug 17 years ago
Kirby Kuehl 4dd2f621ac smb writeandx dcerpc over smb 17 years ago
Victor Julien 6a53ab9c5a Stream engine memory handling update
The stream engine memory handling needed updating as it didn't scale. Changes:

- pools can now be initialized to size 0, meaning unlimited
- stream engine uses a memcap setting. Sessions, segments and aldata is part
  of this, app layer state isn't.
- memory is accounted using a global int that is spinlocked.
- a counter for sessions that have not been picked up because of memcap was
  added.
- all reassembly errors are converted to debug msgs.
17 years ago
Kirby Kuehl 298bf4cc88 dcerpc over smb for transact 17 years ago
Kirby Kuehl 8efbe491a1 dcerpc refactoring 17 years ago
Kirby Kuehl 008de4321b refactor dcerpc in prep for dcerpc over smb 17 years ago
Kirby Kuehl f15ca04889 fix padding calculation and stubdata parser for dcerpc 17 years ago
Victor Julien c352bff6fb Remove unused conditional locking code from the app layer parsing code. 17 years ago
Kirby Kuehl 08915649f3 fix double free 17 years ago
Victor Julien 0d34990d7f Add OpenBSD's strlcpy and strlcat and replace all strcat/strcpy/strncat/strncpy by those calls. 17 years ago
Pablo Rincon 705471e4ee Adding single pattern matcher algorithms. If you cannot store a context for the patterns, use SpmSearch() macro. Adding unittests and stats 17 years ago
Victor Julien 34e11e4784 Fixup unused variable compiler warning in the dce code. 17 years ago
root ddf5995049 endianness handling update 17 years ago
Kirby Kuehl 3d59f40640 style patch 17 years ago
root 706bb95209 fix bug 61 17 years ago
Kirby Kuehl 90b42232fa dcerpc request smb transact and fix for dcerpc bindack 17 years ago
root 9b74a2765e 64 bit portability 17 years ago
root 5113636744 bind and bind_ack tracking 17 years ago
Anoop Saldanha f684989f98 dce_iface, dce_opnum, dce_stub_data keyword support 17 years ago
Victor Julien f0be69dcd0 Fixup smb/smb2/dcerpc wrt loops, debug printing, style. 17 years ago
Victor Julien e2376948dd Clean up smb/dcerpc code 17 years ago
root 48cdc8e0fd DCERPC BIND work 17 years ago
Victor Julien ecf86f9c23 Rename to Suricata. 17 years ago
Victor Julien 18fe3818dc Remove need_lock from app layer parsers. 17 years ago
Gurvinder Singh fc2f7f29fa app layer htp error handling and fixes for memory leaks and segv 17 years ago
Gurvinder Singh c1e485cc44 app layer error handling 17 years ago
root 43fb771268 smb2 work 17 years ago
root 74667e697a better smb parsing 17 years ago
root f3e3d3873f fix smb and dcerpc unit tests 17 years ago
Kirby Kuehl ecaa701bdf smb and dcerpc work 17 years ago