Commit Graph

966 Commits (cb8aaa5968453f06c85846c5a6ab72d13b62716a)

Author SHA1 Message Date
Victor Julien 51f2bc1d81 Fix compilation on Linux, add error checking to Win32 SCFmemopen and properly indent. 17 years ago
Jan Jezek 4e72ccf987 Fixed Win32 compilation, unit tests now compile. 17 years ago
Victor Julien d6c53b68bf Fix two separate segv's in the http logging code. 17 years ago
Victor Julien e462364e68 Use snprintf instead sprintf 17 years ago
Gurvinder Singh 8ff242beff bug 98 patch 17 years ago
Victor Julien 045eaec95b Fix file permissions. 17 years ago
William Metcalf 260d0d7673 Steve Grub fixes... Thanx Steve! 17 years ago
William Metcalf 0fe4373b67 Rolled back to 0.2.x branch renamed htp to libhtp 17 years ago
Victor Julien dc11247511 Change the way we replace contents by http_method and http_cookie, fixing #90. 17 years ago
Victor Julien 45b85c063a Fix segv in http log module. 17 years ago
Victor Julien 60685f8b3c Make unittests run more quiet. 17 years ago
Jason Ish 7537013e16 Fix bug 99.
- Handle the case where the parent node already exists in ConfSet.
- Deal with allow_override properly when a node has already been
  set with ConfSet.
17 years ago
Jan Jezek c1cbdf6ae9 Win32 build fixed. 17 years ago
Pablo Rincon 7719216575 Setting thread priorities with nice 17 years ago
Jason Ish 73700af92b afaik integer increments are not atomic, so put inside the lock 17 years ago
Gurvinder Singh 50f7d0a887 app layer htp logging and better htp request handling. removed recent_in_tx. 17 years ago
Victor Julien aa1564791d Disable thread priority code until we understand it better. 17 years ago
William Metcalf f7111f3847 import of integrated htp lib and small libnet fixes 17 years ago
Gurvinder Singh 4768e42159 bug 95 patch 17 years ago
Jason Ish ea277a0b36 Cleanup of configuration internals. Use an n-ary type tree for everything instead of a first level hash branching off into n-ary type trees.
Reduces the code and uses a uniform internal data structure.
17 years ago
Pablo Rincon 38dc7ffebc Adding settings for detect engine group config 17 years ago
Jason Ish fbdf1baf1c - rebase
Provide limits to the unified outputs.
17 years ago
Victor Julien 16b6f536a0 Fixup Linux compilation after applying win32 patches. 17 years ago
Jan Jezek bff652d2f3 Added missing win32 files. 17 years ago
Jan Jezek fe6a72befc Code is now compilable on the Win32 platform 17 years ago
Victor Julien f0b9ad3f1f Update version to 0.8.1 17 years ago
Victor Julien b28488508b Cleanup threading cpu affinity and prio output. 17 years ago
Victor Julien c1e2e53809 Mhz->MHz 17 years ago
Anoop Saldanha 903b24667b Some more formating changes for cuda startup device info logs 17 years ago
Anoop Saldanha 07034d0d85 Updated cuda device information logs with some minor formatting changes 17 years ago
Anoop Saldanha 1a5ee37bd3 Added cuda logs for the engine, which shows device info and memory usage 17 years ago
Anoop Saldanha 30940c9a94 pack all the packet pattern scan and search packet setup for cuda into a function inside util-cuda-handlers.[ch] 17 years ago
Victor Julien 963691387a Disable unused uri scanning code. 17 years ago
Anoop Saldanha 8cf60d6645 Changed the way cuda dispatcher passes back results. Now each detection thread has it's own queue to which the dispatcher can pump packets back to the detect thread. Also, with cuda enabled and a non-cuda mpm being used, we won't create a dispatcher and instead call the b2g scan/search funtions directly instead of using the dispatcher. 17 years ago
Anoop Saldanha c26e92733d handle the cuda cleanup at shutdown. should get rid of any errors from the call to SigGroupCleanup 17 years ago
Victor Julien d281a6b8ac CUDA build system support & compile fixes
- add configure support for CUDA
- make sure all code compiles if CUDA is disabled
- fix compiler warnings
17 years ago
Anoop Saldanha a2948fc25c valgrind fixes for b2g cuda mpm 17 years ago
Anoop Saldanha 41e6735b92 mpm b2g cuda support added 17 years ago
Anoop Saldanha 84df26d3fd cuda interface 17 years ago
Pablo Rincon 985d565cfd Change priorities only if we are EUID == 0 17 years ago
Pablo Rincon 80f5008728 Adding default priority for all the threads 17 years ago
Pablo Rincon b482471a7d Adding auto runmodes based on available core/cpu's. Setting thread priorities 17 years ago
Pablo Rincon 34216fd3e2 bug87 Fix IPOnly veredicts on flows 17 years ago
Victor Julien d3244e51eb Fix big endian iponly handling. 17 years ago
Victor Julien 59ccef9a11 Handle ip only matching correctly on big endian systems. Thanks to Yao-Min Chen for figuring this out. 17 years ago
Pablo Rincon cef12d30b5 Unified output fixes: alert count per module (not per thread), fix timestamps on pcap mode, write *all* the alerts of a packet, write the log header once also on unified alert 17 years ago
Breno Silva b02bb6b6b4 VLAN Support 17 years ago
Pablo Rincon 29d51a6182 Using the loggin API in source-pcap and source-pcap-file 17 years ago
Gurvinder Singh 5293681860 b86 17 years ago
Victor Julien 4f3a04a410 Disable htp cleanup code as I'm not yet convinced it does what it should. 17 years ago
Gurvinder Singh bf236e4567 better htp memory handling & flow valgrind error fixed 17 years ago
Jason Ish 763fb4a583 Fix threading issues with unified-log. - Only write the header once, on opening, not per thread init. - Track the size in the log file ctx, not per thread. 17 years ago
Victor Julien defc6595c6 Make pcre P have it's own sm type. 17 years ago
Pablo Rincon 0165b3f0d8 pcre P modifier support (pcre match over http body requests) 17 years ago
Gerardo Iglesias Galvan ba6d807a6e Improve information about errors on signature failure 17 years ago
Jason Ish cc28284598 Set the ethernet header pointer. Without this, alert-unified-log will add an extra ethernet header to every alert logged. 17 years ago
Kirby Kuehl 565eab1f54 fix bug88 17 years ago
Kirby Kuehl a334a87109 smb safety checks 17 years ago
Kirby Kuehl bea30a6db6 bug 88 validate dcerpc header 17 years ago
Jason Ish 9e4da4f8e7 supply pcre_get_substring with the proper start of the string. 17 years ago
Kirby Kuehl a8c3718b56 signed unsigned comparision fix for 64 bit 17 years ago
William Metcalf 7099da431b small fix for source-pfring.c after stat err rename 17 years ago
Jason Ish e87d4f8a28 Split the defrag counters into ipv4 and ipv6. 17 years ago
Victor Julien 2cb2989ad8 Apply configurable max pending packets to nfq and ipfw 17 years ago
Jason Ish 7142fdb780 quick way to make max_pending configurable. 17 years ago
Victor Julien 187949b9ad Make urilen inspect the normalized uri, cleanup uri (error) handling. 17 years ago
Jason Ish 6b562f7aa6 Issue 82 - fragment counters. - number of fragments - number reassembled - number of timeouts 17 years ago
Victor Julien 3d0355bae8 Compile fix. 17 years ago
William Metcalf c3e70accd2 pcap and pfring exit stats 17 years ago
Victor Julien b99e10236c Fix a endless loop condition in the smb parser and make dcerpc parser more quiet. 17 years ago
Victor Julien 16aebe5add Fixup smb tests. 17 years ago
Kirby Kuehl 957b43b3d6 signed unsigned comparision cleanup 17 years ago
Kirby Kuehl 40a0fd5e97 fix warning 17 years ago
Kirby Kuehl 4b05bc281d fix padding bug 17 years ago
Kirby Kuehl 6aac8d55a6 reset smb bytesprocessed when complete 17 years ago
Kirby Kuehl 4dd2f621ac smb writeandx dcerpc over smb 17 years ago
Pablo Rincon 583c686170 Allowing no case options for flow keyword. Adding unittests for this 17 years ago
Victor Julien 194015c6cf Fix reject code to not send resets for all alerts. 17 years ago
William Metcalf f925ac9351 printf to logging subsys conversion for src/detect-bytejump.c 17 years ago
Gurvinder Singh 999a200bc9 pattern matcher options support 17 years ago
Pablo Rincon d0404d8447 Renaming errors with naming conventions 17 years ago
Pablo Rincon ad2c136e8f Renaming errors (naming conventions) 17 years ago
Jason Ish 8f618b2121 - actually re-inject ipv6 re-assembled packets. - set the next header. 17 years ago
Jason Ish 8570976ee0 Fix for lists that are children of another list. Fix memory leak by only setting the sequence index value to the first item found. 17 years ago
Victor Julien 501c8814b6 fix crash in urilen 17 years ago
Victor Julien ed7762e843 Disable unused jabber proto detection as it made the proto detection code look way more into the stream than without it. 17 years ago
Jason Ish 6f73aca1e8 I know Snort defaults to syslog in daemon mode, but should we?
Stick to the logging configuration defined in the config file
in daemon mode.
17 years ago
Jason Ish c72d6be58b Making logging configurable. If no logging outputs are defined the default will be used. - Currently per output log formatting is not available. 17 years ago
Breno Silva a857fa7170 FragOffset Rule Keyword 17 years ago
Breno Silva 7e299834d2 FragOffset Rule Keyword 17 years ago
Victor Julien f96511a8b1 Check reassembly limits against correct stream direction. Set proper direction flag in stream msgs. 17 years ago
Gurvinder Singh ed99e73622 bug 78 17 years ago
Kirby Kuehl 58c8103a4b fix unittest 17 years ago
Victor Julien 53c9276d51 Cleanup pcap output. 17 years ago
Victor Julien e0aacac4c6 Move bpf string retrieval to it's own function. Clean up pcap sourcres a bit. 17 years ago
William Metcalf ba46c16aac bpf support for pcap modes 17 years ago
Pierre Chifflier 4515ae13e4 Add Prelude output plugin
Add support for reporting alerts to the Prelude SIEM system, using
libprelude to send IDMEF (RFC4765) messages.

Each message contains the alert description and reference (using
the SID/GID), and a normalized description (assessment, impact,
sources etc.)

libprelude handles the connection with the manager (collecting component),
spooling and sending the event asynchronously. It also offers transport
security (using TLS and trusted certificates) and reliability (events
are retransmitted if not sent successfully).

This modules requires a Prelude profile to work (see man prelude-admin
and the Prelude Handbook for help).

Signed-off-by: Pierre Chifflier <chifflier@edenwall.com>
17 years ago
Gurvinder Singh cf5266094d bug 66 patch 17 years ago
Victor Julien 148883cedf Work around for unsupported CONNECT support handling. 17 years ago
Victor Julien 7deb4e9f09 Cleanup AppLayerDetectGetProto a bit. 17 years ago