Victor Julien
070ed778b8
Libcap-ng support by Gurvinder Singh and myself. Basic support for per thread caps is added, but not activated as it doesn't seem to work yet. Work around for incompatibility between libnet 1.1 and libcap-ng added.
16 years ago
Victor Julien
79a780ffe4
Improve a number of error and info messages.
16 years ago
Victor Julien
18e00dc6d0
Add warning about needing a patch for Barnyard 0.2.0 on 64-bit. Rename sc_timeval32 to SCTimeval32.
16 years ago
Jason Ish
12962c5969
./configure option, --enable-unified-native-timeval to have unified outputs use a native timeval to be compatible with unpatched barnyard 1 on 64 bit systems.
16 years ago
Jason Ish
2c6dd6b8fa
Be compatible with Snort. Stick with a 32 bit style of timeval for the unified outputs.
16 years ago
Victor Julien
eeb98c6900
Move SCSetThreadName to proper functions.
16 years ago
Gerardo Iglesias Galvan
9f35a24a1f
Set threads name. Fix bug #83
16 years ago
Gurvinder Singh
cf2d254cc6
fixed the memory leaks and buffer overflows reported by parfait
16 years ago
Gurvinder Singh
4879045c6f
bug 102 patch
16 years ago
Jason Ish
37bb733929
Looks like something happened in a previous merge: - Don't set the limit here, its already set. - Don't write the log file header here, its also been written.
16 years ago
Jason Ish
40f9653c06
Have output plugs use an OutputCtx which is a little more generic than LogFileCtx. The OutputCtx provides a place for module private data to avoi overriding the LogFileCtx.
16 years ago
Pablo Rincon
25a3a5c6d8
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
16 years ago
Jason Ish
73700af92b
afaik integer increments are not atomic, so put inside the lock
16 years ago
Jason Ish
fbdf1baf1c
- rebase
...
Provide limits to the unified outputs.
16 years ago
Pablo Rincon
cef12d30b5
Unified output fixes: alert count per module (not per thread), fix timestamps on pcap mode, write *all* the alerts of a packet, write the log header once also on unified alert
16 years ago
Jason Ish
763fb4a583
Fix threading issues with unified-log. - Only write the header once, on opening, not per thread init. - Track the size in the log file ctx, not per thread.
16 years ago
Steve Grubb
f6653752c5
memory leak cleanup in alerts
...
Hello,
I ran the code through an analysis program and found several memory leaks
in the alert code.
*In src/alert-fastlog.c at line 178, aft was not being freed
*In src/alert-debuglog.c at line 205, aftwas not being freed
*In src/alert-unified-log.c at lines 234 and 243, aun was not being freed
*In src/alert-unified-alert.c at lines 219 and 230, aun was not being freed
*In src/alert-unified2-alert.c at line 505, aun was not being freed
The patch below fixes this.
-Steve
16 years ago
Gurvinder Singh
fea277b2aa
memory leak fixes
16 years ago
Gurvinder Singh
5c8d90afc8
memory leak fixes
16 years ago
Jason Ish
095f2cf6ef
Consistency fix.. Xxxlog -> XxxLog.
16 years ago
Jason Ish
e204d07717
Have output modules register themselves so run mode configurator becomes aware of them for purposes of being configured from the config file.
16 years ago
Jason Ish
4c83652ad3
initialize vars
16 years ago
Jason Ish
844c444af1
Use the configuration file to setup alert logging (and http logging).
...
Only setup for the live pcap modes at the moment.
16 years ago
Anoop Saldanha
8189f4d88e
Change error log messags to debug ones in the log modules
16 years ago
Anoop Saldanha
4d430060d2
fix for unclear error messages bug 15
16 years ago
Anoop Saldanha
2c0345f55e
Fix for Unified Alert Test Bug #14
16 years ago
Pablo Rincon
459a823a09
Reutilize the filename buffer and avoid malloc's
16 years ago
Pablo Rincon
5f59def86a
Force reset size_current to 0 after rotate
16 years ago
Victor Julien
ecf86f9c23
Rename to Suricata.
16 years ago
Pablo Rincon
e26833be3f
Changing mutex/spinlocks/conditions naming types
16 years ago
Pablo Rincon
769022f4be
Adding support for Mac OS X, FreeBSD, centrailizing mutex/spins/conditions in a macro API, and some unittests
16 years ago
Victor Julien
5c3bbb8d61
Time handling: improve time handling in unittests
...
- make sure before each unittest is run the time is reset
- add functions to set the time to current time and increment the time
- convert alert-unified* Rotate tests to use them
- convert time based counters to use them
- use GetTime instead of gettimeofday for creating the unified* filenames
16 years ago
Pablo Rincon
15855e11f3
Fixing alert unified log file rotation. Adding unittests
16 years ago
Gurvinder Singh
40b8afdd56
support for thread exit constants
16 years ago
Pablo Rincon Crespo
a84cc38bc9
Preparing multithreading support for alert modules and logfilectx
16 years ago
Victor Julien
bcc5bbef93
Yet more logging api usage changes.
16 years ago
Victor Julien
0d0ffb9963
Reorganize header inclusions.
16 years ago
Victor Julien
a39108843e
Small tm module API rename to reflect that Init/Deinit/ExitPrintStats are per thread calls.
16 years ago
Victor Julien
3636ca9703
Adding a "flow" queue handler. This queue handler passes packets of the same flow to the same queue. Changed the default IDS mode to use this.
...
Some output cleanups, shutdown should be cleaner now.
16 years ago
Jason Ish
e3b538c7d7
Simple configuration API.
...
Allow the log directory to be changed.
16 years ago
Brian Rectanus
fa5939ca91
64 bit cleanup part2
17 years ago
Victor Julien
7c36b315fd
Kill the engine if one of the threads fails to initialize.
17 years ago
Victor Julien
689bbfdc45
Rename all structure definitions in the "typedef struct _SomeStruct" format to "typedef struct SomeStruct_" to make the Doxygen output more useful.
...
Remove the Trie multi pattern matcher code. It wasn't used anymore.
17 years ago
Victor Julien
51a9e36e10
Remove vips references. Rename to eidps.
17 years ago
Victor Julien
9c7f5afa79
Large update: pcap support, threading fixes, initial stream tracking, time handling, pool support, runmodes, decoders added, autojunk update.
17 years ago
Victor Julien
5df5b35e90
Put all globals in the detection engine ctx. Add HashList type, a hash that also stores the items ina list to it can be traversed. Many cleanups.
17 years ago
Victor Julien
edf8650a7e
Tunnel update.
17 years ago
Victor Julien
6c1f2071be
Add unittest registration to the threading modules api.
17 years ago
Victor Julien
bab4b62376
Initial add of the files.
17 years ago