675 Commits (c7fb7fa26a1f7f69e141f6f3733759c833153106)

Author	SHA1	Message	Date
Gurvinder Singh	85f054cac2	changed to DetectHttpCookieData	17 years ago
Gurvinder Singh	a0f184866c	http_cookie keywork support	17 years ago
Victor Julien	18fe3818dc	Remove need_lock from app layer parsers.	17 years ago
William Metcalf	7e2408d273	FreeBSD correct arch specific gettid defs	17 years ago
Gurvinder Singh	7ce586bc77	updated htp error info	17 years ago
Victor Julien	ba7e8012af	Add some debugging and simplify locking for app layer slightly.	17 years ago
Gurvinder Singh	fc2f7f29fa	app layer htp error handling and fixes for memory leaks and segv	17 years ago
Victor Julien	aa653157bf	Convert stats printing in nfq to logging api.	17 years ago
Victor Julien	e5301effe6	Make nfq module use logging api.	17 years ago
Pablo Rincon	a67bd2457b	Loading rules from config support	17 years ago
Victor Julien	3233888c65	Disable noisy debugging statements	17 years ago
Kirby Kuehl	73bdc8a5c3	fix unittests	17 years ago
Kirby Kuehl	c20bc68367	readandx and writeandx parsing for smb	17 years ago
Kirby Kuehl	57331ea2a2	add smb2 proto and smb, smb2, dcerpc unit tests	17 years ago
Jason Ish	0d92f0018b	First cut at IPv6 re-assembly. Only BSD policy for now, packets don't actually get passed to it yet though.	17 years ago
Pablo Rincon	c816af822e	Adding support to load rule files from config	17 years ago
Gerardo Iglesias Galvan	7642e53f06	Fix warnings from previous patch. Add info to usage output.	17 years ago
Gerardo Iglesias Galvan	b254719ffc	Add fatal failures on unittest and siginit failure (using Conf API)	17 years ago
Pablo Rincon	658eac2825	Adding max pattern length for bidirectional operator. Please, use DetectEngineAppendSig() at the unittests. Look at the bidirectional operator unittests for a usage reference.	17 years ago
Pablo Rincon	1ad6d75dfe	Added rpc keyword support at packet level	17 years ago
Victor Julien	d388444ac3	Use updated mutex calls.	17 years ago
Gurvinder Singh	ad3e463974	updated error info ouput	17 years ago
Anoop Saldanha	cd0de89bd4	Fix for handling negated content "\!CONTENT"	17 years ago
William Metcalf	16d2bf6b8e	unit test showing flags:0 alerting when it shouldn't	17 years ago
Breno Silva	0acf472392	Flags Issue	17 years ago
William Metcalf	ec1cb9c0db	more invalid netmask fixes and unittest	17 years ago
Victor Julien	d5c11f7abd	Make engine initialization a bit more quiet.	17 years ago
Victor Julien	eaaf0bd61c	Use correct mutex call in flow-vars code.	17 years ago
Pablo Rincon	43a1ae9a4b	Changing some printf to SCLogDebug at flow vars	17 years ago
Pablo Rincon	c6c7742464	Added support at Flowints for keywords isset and notset	17 years ago
Pablo Rincon	a8d7b71490	First version of flowints	17 years ago
Gurvinder Singh	1b39e602d0	fixed port info	17 years ago
Gerardo Iglesias	991d421394	Changed printf's to logging API functions	17 years ago
Pablo Rincon	e26833be3f	Changing mutex/spinlocks/conditions naming types	17 years ago
Victor Julien	406ee2ce70	Use new threading calls in htp code.	17 years ago
Pablo Rincon	769022f4be	Adding support for Mac OS X, FreeBSD, centrailizing mutex/spins/conditions in a macro API, and some unittests	17 years ago
Victor Julien	4cae27522d	Fix http module warnings.	17 years ago
Gurvinder Singh	2d6cf71d37	added htp unit test	17 years ago
Gurvinder Singh	07f7ba55b8	initial support for HTP module init	17 years ago
Victor Julien	6e9b582be6	Fixup rebase typo.	17 years ago
Gurvinder Singh	c1e485cc44	app layer error handling	17 years ago
root	43fb771268	smb2 work	17 years ago
root	0f5f82efee	smb2 work	17 years ago
root	74667e697a	better smb parsing	17 years ago
Victor Julien	2213ff933f	Compile fix.	17 years ago
Brian Rectanus	44083b6505	Fixed warning in detect-content.	17 years ago
Gurvinder Singh	91407e0938	fixed DetectByteTest bug	17 years ago
Pablo Rincon	6206ffb530	Adding bidirectional operator support and unittests	17 years ago
Breno Silva	c552ccbd93	PCRE O Modifier	17 years ago
Victor Julien	574bcea09d	initial version of better error checking/handling in the app layer code	17 years ago
Victor Julien	09dd7889a1	TLS: small updates to the tls parser ... - small updates to the TLS parser after merging Gurvinders TLS work with my work.	17 years ago
Victor Julien	2cfa284999	Fix app layer detect to actually work.	17 years ago
Victor Julien	a1d33e2d0b	Compilation fixes after merge.	17 years ago
Victor Julien	7cda445c49	Add unitttest.	17 years ago
Victor Julien	f1f7df0766	First iteration of doing app layer detection.	17 years ago
Victor Julien	f31d8e0444	TLS no inspect: fixes and cleanups ... - use byte extraction functions for getting the msg length - cleanup the parsing routines for multiple msgs - add unittests for multimsg payloads	17 years ago
Gurvinder Singh	a16e7b7455	tls no reassembly support	17 years ago
Victor Julien	54b9663cd1	TCP streams: support falling back to 3WHS when we were led to believe we were in 4WHS mode. Add unittests.	17 years ago
Victor Julien	2af6ed0c8c	Support newly reported 4WHS TCP setup.	17 years ago
William Metcalf	af13665684	failing unit test where fast_pattern rule and non-fast_pattern rule inspect same payload	17 years ago
Anoop Saldanha	45acb64a61	Bug fix for fast_pattern - bug #8	17 years ago
Victor Julien	5c3bbb8d61	Time handling: improve time handling in unittests ... - make sure before each unittest is run the time is reset - add functions to set the time to current time and increment the time - convert alert-unified* Rotate tests to use them - convert time based counters to use them - use GetTime instead of gettimeofday for creating the unified* filenames	17 years ago
Pablo Rincon	a64af4adca	Forgot to add this file	17 years ago
Pablo Rincon	15855e11f3	Fixing alert unified log file rotation. Adding unittests	17 years ago
Victor Julien	746d12071e	Fix merge artifacts.	17 years ago
William Metcalf	0db1d01b0c	port space negation notification	17 years ago
Gurvinder Singh	3f23f52c52	Fixed FlowTest01 and StreamReassemblyTest30	17 years ago
Gurvinder Singh	d2765511ce	async stream handling support	17 years ago
William Metcalf	88497ec539	detect-dsize regex doxygen logging subsys changes	17 years ago
Anoop Saldanha	bb8a84d967	todo comment update for address and port parsing	17 years ago
Victor Julien	621c8dd921	Make sure we don't sleep to test time lapses, we can modify the engine's time internally for that.	17 years ago
Anoop Saldanha	30a7ea2141	adapted counters to use util-time.[ch]	17 years ago
Anoop Saldanha	c8b423578a	Updates for counters time based patch	17 years ago
Anoop Saldanha	8beef4a9fc	stats upgrade. Added interval counters to the decoder module	17 years ago
Anoop Saldanha	ceb7e495ae	refactoring perf stats code	17 years ago
Victor Julien	fdf8943dfb	Remove a few commented out code lines.	17 years ago
Anoop Saldanha	8c9df4cd6b	modifications to PatternMatchPreprarePopulateMpm to fasten fast_pattern processing	17 years ago
Anoop Saldanha	bb5bd91045	Support to get the last sigmatch of a particular type. To be used for content and its modifiers	17 years ago
Anoop Saldanha	7a10ddc07b	Fixes for the fast-pattern tests and a couple of other minor changes	17 years ago
Anoop Saldanha	6ca5dbc9e9	Support fast_pattern modifier keyword for content	17 years ago
Victor Julien	07bcc8cc9a	Fix signatures with ports and/or addresses but without sigmatches.	17 years ago
Victor Julien	50b2e381e0	Set the DETECT_CONTENT_WITHIN_NEXT and DETECT_CONTENT_DISTANCE_NEXT flags on content chunks if appropriate.	17 years ago
Victor Julien	a004724aea	Add some debugging code	17 years ago
Victor Julien	dd232fcd6e	Fix debug compilation	17 years ago
Anoop Saldanha	1c7ac13c25	Support for negated content	17 years ago
Victor Julien	6346d1ddcf	Add function name printing to the default output while we're still in development.	17 years ago
Victor Julien	0aaf603317	Fix another case where distance/within checks didn't fully work as expected.	17 years ago
Pablo Rincon	ce3abca399	Adding some unittests (one of them dodoesn't work but should)	17 years ago
Pablo Rincon	84411f73c3	Commeting out a unittest.	17 years ago
Pablo Rincon	9a3c21fbf3	Updating real unittests. Small fix on TestWithinDistanceOffsetDepth to skip to the next DETECT_CONTENT SigMatch. Adding some checks on within/distance setups.	17 years ago
Victor Julien	241db64dd7	Fix a few memory issues.	17 years ago
Pablo Rincon	7e4377224a	Small fix at detect-parse.c, need to continue with MatchTest05	17 years ago
Pablo Rincon	f233f9fa31	Adding detect_content chunks handling for max_pattern_length and unittests. Updating modifiers to use it.	17 years ago
Victor Julien	981ca859cb	Fixes for distance and within content modifiers.	17 years ago
William Metcalf	884b1034b4	failed unittest for within distance	17 years ago
Victor Julien	171edda02a	Fix compilation of address and port error messages in debug mode.	17 years ago
Anoop Saldanha	dc44700ce5	Support vars lookup from conf file. Current patch support address and port group vars lookup	17 years ago
Victor Julien	951b4d5cf4	Fix within in some corner cases and add some more tests.	17 years ago
Anoop Saldanha	204aca4431	Support host os flavour retrieval functions with raw network addresses	17 years ago
Anoop Saldanha	96614c60f2	change the netmask to uint8_t for the ip handling part of the radix tree and also use 255 instead of -1 to indicate the absence of a netblock	17 years ago
Anoop Saldanha	3f91af89a2	Added comments to the the Host OS API test	17 years ago
Anoop Saldanha	22771d5f52	Updated doxygen comment for host os function	17 years ago
Anoop Saldanha	7dbc117b37	Host OS Table API. Modifications also make to the radix tree to handle netblocks	17 years ago
Victor Julien	4f2164677a	- Fix pattern matchers b2g and b3g not being able to deal with a single pattern of the max pattern length (32 bytes by default). ... - Fix the setting of the correct pattern matcher when it was set in the detection ctx. - Add tests for the fixes.	17 years ago
Victor Julien	f2a388ac8d	Cleanup comments.	17 years ago
Victor Julien	34d44266fd	Create reputation.h	17 years ago
William Metcalf	258cac889a	silence pfring compiler warning	17 years ago
Victor Julien	d6be6ceb19	Fixup artifact from automatic renames: rename DetectAddresssHead to DetectAddressHead.	17 years ago
Victor Julien	e5b990a8ab	Fixup siggroup merge artifacts.	17 years ago
Anoop Saldanha	78db80ea15	Unittests and style fix for detect-engine-siggroup.[ch]	17 years ago
Victor Julien	83d1e283bb	Improve message on test expected to fail at this point.	17 years ago
Pablo Rincon	0df58406ee	Adding Unittests, doxygen comments, coding style, logging support	17 years ago
Victor Julien	cc442f1772	Fixup flow bits sig tests to work with the changes to the pattern matchers.	17 years ago
Breno Silva	6d1eb3e728	FlowBits Unit Tests	17 years ago
Breno Silva	2dee4cec13	FlowBits Unit Tests	17 years ago
Victor Julien	c5dd31868d	Small detect engine proto cleanups.	17 years ago
Gurvinder Singh	34e526d853	TTL macros suppport	17 years ago
Gurvinder Singh	90fea03af5	added comments and some minor changes	17 years ago
Gurvinder Singh	cacbf31aad	support for ttl keyword	17 years ago
Victor Julien	deb511f51a	Fix a compiler warning on Ubuntu 9.10 gcc 4.4.1 in the pattern matchers where the size of the thread ctx can be optimized to 0.	17 years ago
Victor Julien	8b8e2fef2d	Fix msg parsing.	17 years ago
William Metcalf	e458b2a26e	detct-msg changes and unittests	17 years ago
William Metcalf	f217370ac7	fixed for invalid netmask being set to 0	17 years ago
Victor Julien	de8caa7964	Rename DetectAddressGroup* to DetectAddress*	17 years ago
Victor Julien	13dca5e8ce	Cleanup of address functions.	17 years ago
Victor Julien	3c7a038477	Further memory cleanups. Split out init only vars out of the sig group head.	17 years ago
Victor Julien	32e51e5e5a	Replace sgh refcnt by a flag.	17 years ago
Victor Julien	91d14964b6	Fixup formatting on the smb code.	17 years ago
William Metcalf	5fc3005103	added check for full al_parser_table	17 years ago
root	f3e3d3873f	fix smb and dcerpc unit tests	17 years ago
Kirby Kuehl	ecaa701bdf	smb and dcerpc work	17 years ago
Victor Julien	bf72331849	Fix compilation warning in conf test.	17 years ago
Jason Ish	ec9fa7b0a7	Files missed in last commit. ... Update Conf API to allow direct access to nodes. A configuration node is now a tailq head and a tailq entry. This allows us to build n-ary type trees to build something DOM like. Properly process lists so a list of rule files (for example) can be loaded.	17 years ago
Jason Ish	d39a291427	Refactor yaml loader so we can load strings or files.	17 years ago
William Metcalf	4175206417	unittest regex changes and fixes	17 years ago
Victor Julien	2d0e9658f8	Speed up per sgh content maxlen calc. Remove mpm ptrs from mpm ctx. Add unittests testing the detection engine internals.	17 years ago
Victor Julien	e4c98c562c	Merge DetectAddressData and DetectAddressGroup	17 years ago
Victor Julien	15ab5d7003	More engine init memleaks fixed. HashListTable remove function fixed.	17 years ago
Victor Julien	7a7bb7a390	Get rid of global mpm_ctx.	17 years ago
Victor Julien	fbe87a3ad5	Bunch of mostly unittest related memleak fixes.	17 years ago
Victor Julien	227cc082a1	Fix small memleak at engine init.	17 years ago
Gurvinder Singh	02fb39b913	detect-engine-proto unit tests and comments	17 years ago
Gurvinder Singh	f2213b066f	fast track stream handling and its unitests	17 years ago
Brian Rectanus	b796541e57	Ack/Seq Keywords part 2	17 years ago
Brian Rectanus	ed30067bd7	Ack/Seq Keywords	17 years ago
Victor Julien	56e45e0c16	Fix warning free compilation of defrag. Fix a missing variable initialization that cause a segv in the unittests.	17 years ago
Jason Ish	e0b9e85230	Break out checksum fixup code to make the license separation more clear.	17 years ago
Victor Julien	97c991f75b	Remove unused var and fix compilation with DEBUG enabled.	17 years ago
Jamie	0dc471db9c	looking inside ICMP packets	17 years ago
Brian Rectanus	ec6c5258b6	Sameip Keyword	17 years ago