19 Commits (be5a5df1f7bf14d0f81122c6d1bd75e95d9588b7)

Author	SHA1	Message	Date
maxtors	9d3fd82849	Removed duplicate include statements.	9 years ago
maxtors	69863f7b1c	Corrected and unified debugmessages for init data errors in *ThreadInit.	9 years ago
Victor Julien	609cdff540	json-drop-log: clean up memory at shutdown	10 years ago
Victor Julien	c446abeb47	jansson: include in suricata-common.h	10 years ago
Victor Julien	8bb1cf08ef	eve: fix mishandling of big messages ... When the string representation of a JSON message grew bigger than 64k, the JSON record would just be truncated. This lead to errors in the parser(s) of the JSON stream. This patch changes the buffer logic to grow the buffer on demand.	10 years ago
Victor Julien	64017cd29b	ips/drop-log: fix crash on logging drops ... When logging drops for fragmented UDP packets, triggered by detection in the reassembled packet, a missing check could lead to access of the packets UDP header pointer when it was NULL.	10 years ago
Victor Julien	8673801ea3	multi-detect: add tenant id to alert json output ... Add a integer field "tenant_id" to the JSON alert output.	10 years ago
Jason Ish	b512580bbe	logging: integrate rotation into SCConfLogOpenGeneric. ... Addresses issue 1492, and will make it harder to omit rotation on new outputs.	10 years ago
Victor Julien	2d7f79a62b	drop json log: log out 'drop' signature ... If no normal sig was logged as the 'drop' reason, try the stored drop signature instead, this will also log out 'noalert' sigs.	11 years ago
Victor Julien	2e754ca6fa	drop json: make alerts logging optional ... Make logging out alerts that caused the drop optional.	11 years ago
Victor Julien	6b172bb010	drop json: add sids (if applicable) ... If a drop is caused by a SID match, add it to the drop record.	11 years ago
Ken Steele	8f1d75039a	Enforce function coding standard ... Functions should be defined as: int foo(void) { } Rather than: int food(void) { } All functions where changed by a script to match this standard.	11 years ago
Victor Julien	96adcf6829	refactor IDS/IPS engine mode logic ... Instead of error phrone externs with macro's, use functions with a local static enum var instead. - EngineModeIsIPS(): in IPS mode - EngineModeIsIDS(): in IDS mode To set the modes: - EngineModeSetIDS(): IDS mode (default) - EngineModeSetIPS(): IPS mode Bug #1177.	11 years ago
Victor Julien	34069054ce	drop-json: fix cleanup ... Use proper function for sub-module cleanup. LogFileCtx is not managed by the sub-module, so don't clean it.	12 years ago
Victor Julien	f96a54535c	drop loggers: call disable func ... Call OutputDropLoggerDisable() on cleanup.	12 years ago
Victor Julien	a3b0577a1f	output: add TM_FLAG_LOGAPI_TM thread module flag ... The TM_FLAG_LOGAPI_TM flag indicates that a module is run by the log api, not by the 'regular' thread module call functions. Set flag in all all Log API users' registration code. Purpose of this flag is in profiling. In profiling output it will be used to list log api thread modules separately.	12 years ago
Eric Leblond	6fd9b4b255	json: add event_type key ... This patch adds an event_type key to the generated events. Current value is one of "dns", "alert, "file", "tls", "http", "drop". It is then easy to differentiate in log analysis tools the events based on source inside Suricata.	12 years ago
Victor Julien	9950427466	output: check for multiple instances of drop and tls ... Both the drop and tls logs are currently not designed to have multiple instances running. So until that is changed, error out if more than one instance is started.	12 years ago
Victor Julien	870bb23ff6	json drop log: rename to output-json-drop	12 years ago