Victor Julien
dfac5276b8
detect: remove unused SIGMATCH_PAYLOAD flag
9 years ago
Victor Julien
775e182531
detect: remove AppLayerMatch API call
9 years ago
Victor Julien
8bd1422948
detect: detect engine registration cleanup
9 years ago
Victor Julien
d2f77978ec
detect-parse: content modifier cleanup
9 years ago
Victor Julien
6f867c3c73
http_raw_uri: dynamic buffer
9 years ago
Eric Leblond
a2e2f50fb9
documentation: fix list keywords URLs
...
Update URLs in keyword definition to point to sphinx documentation.
9 years ago
Victor Julien
fc857c5455
http_raw_uri: register inspect engine from keyword
9 years ago
Victor Julien
960461f4db
fast_pattern: register app layer mpms automatically
...
Allow for duplicate registrations for the same list. After the first
registration new calls will be ignored.
9 years ago
Victor Julien
38e018e2d3
http_raw_uri: register mpm from keyword
9 years ago
Victor Julien
9030e89c94
detect: don't set alproto while registering keyword
...
The field is not used except for some printing, and is wrong for
many keywords.
9 years ago
Jason Ish
796dd5223b
tests: no longer necessary to provide successful return code
...
1 pass, 0 is fail.
9 years ago
Ken Steele
923a77e952
Change Match() function to take const SigMatchCtx*
...
The Match functions don't need a pointer to the SigMatch object, just the
context pointer contained inside, so pass the Context to the Match function
rather than the SigMatch object. This allows for further optimization.
Change SigMatch->ctx to have type SigMatchCtx* rather than void* for better
type checking. This requires adding type casts when using or assigning it.
The SigMatch contex should not be changed by the Match() funciton, so pass it
as a const SigMatchCtx*.
11 years ago
Victor Julien
02529b13a8
rule parser: set flag for optionless keywords
...
If a keyword doesn't have an argument, it should set the SIGMATCH_NOOPT
flag so the parser knows.
11 years ago
Anoop Saldanha
4c6efa2d40
Update content id assignment.
...
All fp id assignment now happens in one go.
Also noticing a slight perf increase, probably emanating from improved cache
perf.
Removed irrelevant unittests as well.
13 years ago
Anoop Saldanha
f8ae53ac02
Further customize content modifier buffer registration.
...
Allow modifier setups functions to have CustomCallbacks to enable their
internal conditions.
13 years ago
Anoop Saldanha
a304a98d1d
http_* setup unified.
13 years ago
Anoop Saldanha
0b5d277254
code cleanup for all content based keywords.
13 years ago
Anoop Saldanha
a308d718ae
Allow the use of relative without the presence of a related previous keyword.
13 years ago
Last G
8ae11f73b2
Added parentheses to fix Eclipse static code analysis
...
Fixed bug in action priority (REJECT_DST had lowest prio)
13 years ago
Eric Leblond
6842545331
Add documentation url in list-keyword output.
...
The output of the list-keyword is modified to include the url to
the keyword documentation when this is available. All documented
keywords should have their link set.
list-keyword can be used with an optional value:
no option or short: display list of keywords
csv: display a csv output on info an all keywords
all: display a human readable output of keywords info
$KWD: display the info about one keyword.
13 years ago
Victor Julien
472e061c6d
build: more checking for includes
13 years ago
Anoop Saldanha
059ee217ff
All http_http_raw_uri modified patterns now are DETECT_CONTENT and not DETECT_AL_HTTP_RAW_URI
14 years ago
Anoop Saldanha
ab35b98f76
code cleanup - remove DetectContentGetLastPattern. Replace it with SigMatchGetLastSMFromLists
14 years ago
Anoop Saldanha
dcb2afb02f
Use sm_list to differentiate between different content types while retrieving pattern ids instead of sm_type
14 years ago
Anoop Saldanha
420befb180
Changed my email address to anoopsaldanha at gmail dot com from my current one
14 years ago
Eric Leblond
60a99915c1
doc: create http support group
...
This patch create an httplayer group and adds related files to
it. It also fixes some typo in documentation string and format.
14 years ago
Anoop Saldanha
ed3b44b3b5
fix parsing content keywords. We are more strict now. All content keywords need to be enclosed in double quotes. Better validation for sid, priority and rev keywords
14 years ago
Anoop Saldanha
966119b6aa
support for http_raw_uri keyword + mpm engine
14 years ago