10855 Commits (c862e84c01d59b71cd44b57998936c48b4d142b2)

Author	SHA1	Message	Date
Philippe Antoine	018fef5ef8	quic: ja3 computation and logging and detection ... Logging as is done in TLS. Detection using the generic generic ja3.string keyword Ticket: #5143	4 years ago
Juliana Fajardini	5f4bcfe313	detect/engine: fix typos in assorted files	4 years ago
Juliana Fajardini	58928b249d	commandline: add alert-queue expand failure option ... For testing purposes. Meant to simulate a reallocation failure when dynamically growing the alert queue in DetectEngineThreadCtx, so we can check that Suri's behavior doesn't break under such circumstances. Task #5319	4 years ago
Victor Julien	ebc2714e07	nflog: fix missing util-time include; cleanups	4 years ago
Victor Julien	09c0128138	nflog: update copyright years	4 years ago
Jeff Lucovsky	e566563875	classification/config: Propagate validation errors ... Issue: #4554 This commit modifies the workflow to propagate classification parsing errors when in test mode. When not in test mode, errors continue to be displayed but they do not halt Suricata execution.	4 years ago
Jeff Lucovsky	2621c90ea1	classification/config: Raise error on validation errors ... This commit adds logic which raises an error if parse errors occur while loading classification.config Issue: 4554	4 years ago
Philippe Antoine	83a8cd80b2	detect: remove wrappers around DetectEngineInspectGenericList	4 years ago
Scott Jordan	7eaf1688b5	stream: fix StreamTcpSegmentForSession missing segments ... Bugfix, segment traversal was being initialized at root node, but should have been started at the min node. Bug resulted in captures missing segments left of root node.	4 years ago
Victor Julien	ad3e68f378	detect/file: minor cleanups	4 years ago
Victor Julien	af145ad125	detect/file: reduce scope of keyword data structures	4 years ago
Victor Julien	73eb7744d8	detect/file: update copyright years	4 years ago
Victor Julien	6f8ca41eb3	detect/cip: cleanup includes	4 years ago
Philippe Antoine	16fc78645d	dnp3: do not log empty objects array ... Ticket: #5167	4 years ago
Philippe Antoine	da0be16d36	output: do not log empty arrays for sid ... Ticket: #5167	4 years ago
Philippe Antoine	adeb1fdfc3	threads: cleaner code with one instruction per line ... As reported by Shchelk	4 years ago
Victor Julien	9fa0033966	detect: reduce datatype scope for various keywords	4 years ago
Victor Julien	ad76502df0	detect/cip: remove dead code	4 years ago
Victor Julien	08e349a8bb	detect: update copyright years	4 years ago
Victor Julien	0ec9379db9	includes: minor cleanups	4 years ago
Victor Julien	21f76773c7	profiling: minor code cleanups	4 years ago
Philippe Antoine	36b1344680	util: fix integer warnings in profiling	4 years ago
Philippe Antoine	4411ef785d	src: remove unused header files	4 years ago
Philippe Antoine	02f2602dde	src: rework includes as per cppclean	4 years ago
Jufajardini Reichow	93c2c9743d	detect/engine: init alert queue counters on reload ... alert_queue_overflow and alerts_suppressed were not being reinitialized when there was a reload of Suricata rules, leading to non-valid stats counters if that happened. Bug #5457	4 years ago
Philippe Antoine	f8bf581775	output: skip files logging for ICMP packets ... Ticket: #5408	4 years ago
Philippe Antoine	5781631f85	output: use flow's proto for file loggers ... As there can be an ICMP packet which gets related to a TCP flow. Ticket: #5408	4 years ago
Philippe Antoine	7f9d25fa86	fuzz: use forced file store ... to find bugs such as 5408	4 years ago
Philippe Antoine	a2f857ed90	threshold: fix regex to accept by_both and by_rule ... As is done in detect-threshold.c or in DETECT_RATE_REGEX and is expected by switch (rule_type) which makes the same for THRESHOLD_TYPE_THRESHOLD and THRESHOLD_TYPE_RATE Ticket: #5327	4 years ago
Philippe Antoine	1621f5e453	detect/nfs: use inclusive ranges	4 years ago
Philippe Antoine	8dbb07e4fe	detect: use generic integer functions for itype ... Ticket: #4112	4 years ago
Philippe Antoine	2817f1a6ed	detect: use generic integer functions for snmp.version ... Ticket: #4112	4 years ago
Philippe Antoine	c72571ea28	detect: use generic integer functions for rfb.sectype ... Ticket: #4112	4 years ago
Philippe Antoine	6c9091c86f	detect: use generic integer functions for nfs.version ... Ticket: #4112	4 years ago
Philippe Antoine	ddac6165c9	detect: use generic integer functions for nfs.procedure ... Ticket: #4112	4 years ago
Philippe Antoine	ed6955ee98	detect: use generic integer functions for iprep ... Ticket: #4112	4 years ago
Philippe Antoine	bdc359bed3	detect: use generic integer functions for bsize ... Ticket: #4112	4 years ago
Philippe Antoine	cfb60d0fce	detect: use generic integer functions for urilen ... Ticket: #4112	4 years ago
Philippe Antoine	e87c53bb55	defrag: use util function for timeout ... To fix timestamp overflow as found by oss-fuzz https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44608 fixu	4 years ago
jason taylor	d600a1603c	detect: update text for nocase used with http.host ... Signed-off-by: jason taylor <jtfas90@gmail.com>	4 years ago
Philippe Antoine	c7214be99b	snmp: adds usm keyword ... as is logged Ticker: #5416	4 years ago
Philippe Antoine	5a31b3508d	ftp: optimized tx iterator ... To be more efficient with larger number of transactions. Ticket: #5314	4 years ago
Victor Julien	6d3140bc01	mime: remove unused length fields	4 years ago
Victor Julien	816bbeb7dc	fuzz/mime: fix call conditions and args ... The SMTP parser should not supply lines w/o EOL chars to the mime parser unless its in the BODY parsing stage. Mimic this in the fuzz target by testing the state for inputs that have no EOL. Additionally, make sure the delim cnt reflects the missing EOL.	4 years ago
Victor Julien	d81582c4a2	mime: fix corner case ... Fix a corner case where a base64 sequence including a space was followed by a newline in the input data.	4 years ago
Victor Julien	5805ed47f5	mime: add base64 related debug messages	4 years ago
Victor Julien	41c2c1ed5a	mime: improved empty line handling ... Make sure a new body is not set up on empty lines unless it is a body that is not encoded as base64/quoted printable.	4 years ago
Victor Julien	074cfb5c68	mime: fix and cleanup tests ... Line count check was failing after recent delim handling updates.	4 years ago
Victor Julien	6e2c066ce1	smtp: fix passing a wrong delim len around	4 years ago
Victor Julien	b82b8825e7	mime: properly pass full lines to non-decoded body ... Use actual delim count and make sure we also pass on empty lines (so delim(s) only).	4 years ago