suricata

Commit Graph

Author	SHA1	Message	Date
Victor Julien	91f28afef4	Add option to PF_RING to have multiple reader threads. Improve general performance of the PF_RING module.	15 years ago
Eric Leblond	8330747234	Add multi queue support to NFQ run mode This patch adds support for multiple Netfilter queue in the NFQ run mode. Suricata can now be started on multiple queue by using a comma separated list of queue identifier on the command line. The following syntax: suricata -q 0 -q 1 -c /opt/suricata/etc/suricata.yaml will start a suricata listening to Netfilter queue 0 and 1. Signed-off-by: Eric Leblond <eric@regit.org>	15 years ago
Eric Leblond	d0faa6c96e	Fix some spacing. This trivial patch fixes some indentation problems. Signed-off-by: Eric Leblond <eric@regit.org>	15 years ago
Eric Leblond	88fb3a641e	Delete some commented code in runmodes This patch simply suppress some commented code in runmodes.c. Signed-off-by: Eric Leblond <eric@regit.org>	15 years ago
Eric Leblond	f9e453e14c	affinity: Use configured 'threads' value if set This patch modifies runmodes to make them use the new 'threads' variable. Signed-off-by: Eric Leblond <eric@regit.org>	15 years ago
Eric Leblond	a11e40dedf	Pcapfile mode: support for cpu affinity settings This patch adds support for cpu affinity setting in the pcapfile runmode. Signed-off-by: Eric Leblond <eric@regit.org>	15 years ago
Eric Leblond	9d5f08e0d9	Pcap mode: use CPU affinity setting This patch adds support for CPU affinity settings in pcap mode. Signed-off-by: Eric Leblond <eric@regit.org>	15 years ago
Eric Leblond	51df6beb26	Convert RunModeIpsNFQAuto to new affinity mode. The default NFQ run mode is now using the new affinity system. It thus can be configured via suricata.yaml. Signed-off-by: Eric Leblond <eric@regit.org>	15 years ago
Eric Leblond	77f2b6a7a9	Make runmode parse affinity settings. This patch modifies runmode to parse configuration file related to affinity settings. It also prepare the export of the set_cpu_affinity which was previously local. It is now used in the affinity and tm-threads files. Signed-off-by: Eric Leblond <eric@regit.org>	15 years ago
Eric Leblond	2011366429	Include affinity in runmodes and threadvars. This small patch add inclusion of util-affinity.h in the files that will have to use affinity related features. Signed-off-by: Eric Leblond <eric@regit.org>	15 years ago
Victor Julien	878d3d87db	Add (experimental) support for using multiple pcap devices to acquire packets from. Just passing multiple -i <dev> options on the commandline will activate this. Windows not yet supported.	15 years ago
Victor Julien	3d60e9bfeb	Clean up output.	15 years ago
Anoop Saldanha	05adf2de41	fix live runmode decode TM for cuda	15 years ago
Victor Julien	dec4218d62	Layout updates to NFQ runmode.	15 years ago
Victor Julien	7e49aa7f76	Simplify NFQ runmode reducing the number of threads and thus queues.	15 years ago
Victor Julien	e7cb7c6b97	Make outputs part of the flowpinned threads in the AutoFp runmode.	15 years ago
Victor Julien	1bd2d59253	Merge decode and stream threads in RunModeIdsPcapAuto like in the file runmode. Fix these runmodes not adhering to the cpu affinity setting if CUDA is compiled in.	15 years ago
Victor Julien	b4db93fa94	Remove leftover printf.	15 years ago
Victor Julien	8d737310aa	Use 'simple' queue for cuda too. Fix hanging in cuda mode.	15 years ago
Victor Julien	3c1ae607cf	Fix cuda compilation.	15 years ago
Anoop Saldanha	33f4beb0bc	batching of packets support for cuda b2g mpm. Supported for both 32 and 64 bit platforms	15 years ago
Victor Julien	ec277b292c	Fall back to the old mutex based queue's to see if that fixes an obscure lockup at higher optimization levels in gcc in file pcap mode.	15 years ago
Victor Julien	b67fb5229b	Fix pcap file auto flow pinned runmode (disabled by default).	15 years ago
Victor Julien	6519a86ec7	Move packet pool to ringbuffer, update packet pool api and ringbuffer api. Remove memset usage from PACKET_RECYCLE, add proper cleanup macros.	15 years ago
Victor Julien	c7a744c937	Split ringbuffer queue handler into multiple, for mrsw, srsw, srmw modes.	15 years ago
Victor Julien	012e602c3f	Add a (disabled by default) flow pinned runmode for file pcap.	15 years ago
Anoop Saldanha	bbb5bf5c51	allow counters clubbing for detect TM	15 years ago
Jason MacLulich	835630efbd	Add initial support for reading packets from a DAG card, we only support reading from a single stream at this time. Use the --dag <dagname> cmd line option to specify from which DAG card to read pkts from. Issue at the moment with pkts being ejected during shutdown -- at the moment we ignore any packets that are not of link type Ethernet.	15 years ago
Victor Julien	49d68169ea	Allow the user to disable setting cpu affinity and allow configuring the number of detect threads relative to the number of CPU's/CPU cores.	15 years ago
Victor Julien	2fe77bf65e	Use ringbuffers in the pcap live auto runmode as well.	15 years ago
Victor Julien	53acf08996	Add multi packet reading for pcap live mode. Add a partly lock free multi writer, multi reader ringbuffer.	15 years ago
Victor Julien	4e7df60b2f	Make pcap file mode read multiple packets per 'read'. Update threading model to deal with this.	15 years ago
Victor Julien	a48a767efc	Lockfree ringbuffer wip.	15 years ago
Jason Ish	a93b2e6b84	Support for reading ERF files.	15 years ago
Gerardo Iglesias Galvan	9f4fae5b1a	Fix inconsistent use of dynamic memory allocation	15 years ago
Victor Julien	42c4b5d53c	Use one less thread in pcap file mode. Reduces locking overhead.	15 years ago
William Metcalf	ce01927515	Import of GPLv2 Header 050410	15 years ago
Victor Julien	070ed778b8	Libcap-ng support by Gurvinder Singh and myself. Basic support for per thread caps is added, but not activated as it doesn't seem to work yet. Work around for incompatibility between libnet 1.1 and libcap-ng added.	15 years ago
Jason Ish	40f9653c06	Have output plugs use an OutputCtx which is a little more generic than LogFileCtx. The OutputCtx provides a place for module private data to avoi overriding the LogFileCtx.	16 years ago
Pablo Rincon	25a3a5c6d8	Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.	16 years ago
Victor Julien	b28488508b	Cleanup threading cpu affinity and prio output.	16 years ago
Pablo Rincon	80f5008728	Adding default priority for all the threads	16 years ago
Pablo Rincon	b482471a7d	Adding auto runmodes based on available core/cpu's. Setting thread priorities	16 years ago
Pablo Rincon	ad2c136e8f	Renaming errors (naming conventions)	16 years ago
Victor Julien	e0aacac4c6	Move bpf string retrieval to it's own function. Clean up pcap sourcres a bit.	16 years ago
Pierre Chifflier	4515ae13e4	Add Prelude output plugin Add support for reporting alerts to the Prelude SIEM system, using libprelude to send IDMEF (RFC4765) messages. Each message contains the alert description and reference (using the SID/GID), and a normalized description (assessment, impact, sources etc.) libprelude handles the connection with the manager (collecting component), spooling and sending the event asynchronously. It also offers transport security (using TLS and trusted certificates) and reliability (events are retransmitted if not sent successfully). This modules requires a Prelude profile to work (see man prelude-admin and the Prelude Handbook for help). Signed-off-by: Pierre Chifflier <chifflier@edenwall.com>	16 years ago
Gurvinder Singh	cf5266094d	bug 66 patch	16 years ago
Nick Rogness	2b7b78f1bf	Intial IPFW support FreeBSD and OSX	16 years ago
Jason Ish	0a5bc2d600	Fix issue 74. separate initialization of run modes from adding them to a thread. - fixes issues with multiple output threads.	16 years ago
William Metcalf	82978f9f27	new pfring runmode for quad core, other small pfring fixes	16 years ago
Jason Ish	e204d07717	Have output modules register themselves so run mode configurator becomes aware of them for purposes of being configured from the config file.	16 years ago
Jason Ish	cf95fa7c74	configurable outputs for nfq and pcap file.	16 years ago
Jason Ish	a05436af8c	Configurable alert outputs for PF_RING modes.	16 years ago
Jason Ish	844c444af1	Use the configuration file to setup alert logging (and http logging). Only setup for the live pcap modes at the moment.	16 years ago
Victor Julien	ecf86f9c23	Rename to Suricata.	16 years ago
Gurvinder Singh	7ff38a7081	fixed thread issue	16 years ago
Victor Julien	970db6fdd8	Fix merge artifact and add new logging init code to pfring runmodes as well.	16 years ago
Pablo Rincon Crespo	a84cc38bc9	Preparing multithreading support for alert modules and logfilectx	16 years ago
William Metcalf	04b0f177fc	native PF_RING support with fixes	16 years ago
Victor Julien	bff8ae299f	Fix pcap file mode	16 years ago
Breno Silva	a5e386ce52	Unified2 Signed-off-by: Breno Silva <breno.silva@gmail.com>	16 years ago
Victor Julien	cfb605aa8a	Put the precooked runmodes in a separate file.	16 years ago

1 2 3

112 Commits (c27304451e30c67b6b370974c89948ab7e115b51)