Commit Graph

8570 Commits (cba41207b3f2d8251f7e0f7944683134d9cf8233)
 

Author SHA1 Message Date
Victor Julien b56c0b524b detect: error out on invalid detect.profile option
Bug #891.
7 years ago
Victor Julien 3e868188e6 yaml: add 'append' to stats-log entry
Bug #798
7 years ago
Victor Julien 207595396e changelog: update for 4.0.1 release 7 years ago
Jason Ish 7eead7dfbc autotools: fix distcheck with rust enabled 7 years ago
Sascha Steinbiss d9c7f9bb17 stats: use unshortened interface names in counters 7 years ago
Sascha Steinbiss 4d25593b4a json: skip over double dots in output tokenizing
Interface name shortening introduces double periods ('..') as spacers,
which cause issues during JSON stats serialization as there '.'
characters are also used as separators to define nesting of the JSON
output. This commit makes sure that '..' are skipped during tokenizing.
Fixes Redmine bug #2208.
7 years ago
Victor Julien d9e5dfa1f0 rust/file: improve truncation handling 7 years ago
qiangbei ce0fb39219 detect/state: fix offset mask logic
changed 0xef to 0x7f
7 years ago
Victor Julien 78486b1979 runmodes: fix 'threads' option parsing
Don't cast int to uint8_t for no reason. Add warning that upper
limit for threads is 1024.

Small code cleanups.

Bug: #2228
7 years ago
Victor Julien 3f6fbf94db output: harden output deinit
If thread setup fails allow output deinit code to be called with
NULL data without crashing.
7 years ago
Victor Julien 2577a64e44 stream: improve error handling of ssn/segment pools
With large number of threads the default memcaps lead to pool setup
failures. Make sure these are reported properly so that the user
knows what is going on.

Bug: #2226
7 years ago
Victor Julien e023ce9aad rust/dns: fix new warning in rustc 1.21 7 years ago
Victor Julien fd38e5e82b rust/nfs: fix new warnings in rustc 1.21 7 years ago
Victor Julien 1180687574 doc/file_data: add note on negated matching
Explain issue #2216 and how to avoid it.
7 years ago
Victor Julien 456af8faa8 doc/napatech: formatting fixes 7 years ago
Victor Julien e7428b321d profiling: fix app-layer profiling and csv output 7 years ago
Victor Julien 62b8431fdd debug: free pcre memory used for output filtering 7 years ago
Victor Julien c0d8def0e5 tls: don't set event on small input data
On very small data the max loop count could be 0. Make sure
it's always at least 1.
7 years ago
Eric Leblond 7ee989a3ab prscript: update urls to use OISF repo 7 years ago
Jason Ish eb5193c5b4 travis: hook check-setup.sh into the build
Only do it for one build, for now use the one that also
enables Rust.
7 years ago
Jason Ish 40a1a972d6 template: script to check the setup scripts
This script applies the setup scripts one by one followed
by a make distcheck.
7 years ago
Jason Ish d1ac839333 template scripts: allow to be called from top or src
Allow the template setup script to be called from the top source
directory or from ./src to unify where they can be executed
from.
7 years ago
Jason Ish ea2ef1b51a templates: rename scripts to use - instead of _
Use "-" consistently instead of a mix of - and _.

setup_decoder.sh -> setup-decoder.sh
setup_simple_detect.sh -> setup-simple-detect.sh
7 years ago
Victor Julien 21231fd198 github: codeowners syntax fixes 7 years ago
Victor Julien cfed351149 github: add codeowners file
Initial version.

See https://help.github.com/articles/about-codeowners/
7 years ago
Victor Julien 499afaba4b template: fix decoder setup script 7 years ago
Victor Julien 7783847467 template: fix setup detect script 7 years ago
Victor Julien 05d3a4db90 template: minor updates
Merge inspect engine into keyword
7 years ago
Derek d9a7a6d3e5 dns: fix last timestamp handling
Fixes incorrect variable in ticket #2207

In app-layer-dns-tcp.c in the DNSTCPResponseParse function
a variable is set to last_req when it should be last_resp.
This makes it consistent with UDP DNS response parsing.
7 years ago
Eric Leblond 8fa6e065bc af-packet: free bpf program
This fixes a small memory leak when Suricata is running with a
BPF filter.
7 years ago
Eric Leblond 7127ae2b44 af-packet: call thread deinit function 7 years ago
Eric Leblond 620f2540c6 prscript: update docker code
Update docker code to latest docker python API. This patch
preserves backwrd compatibility with older versions.
7 years ago
Andreas Herz c048ee6505 doc: reflect most recent cpu affinity settings
Some settings like output-cpu-set never been used and detect got renamed
to worker. This reflects those changes already present in the yaml also
within the documentation.
7 years ago
Mats Klepsland d363a165c1 app-layer-ssl: fix bug with >255 records in one stream 7 years ago
Andreas Herz a59390e8de rule-parser: bump sids within siggroup test 7 years ago
Andreas Herz a0ec5fe9b7 rule-parser: detect duplicate rev keyword 7 years ago
Andreas Herz ea02541913 rule-parser: detect duplicate sid keyword 7 years ago
Andreas Herz 0210d70550 rule-parser: detect duplicate classtype keyword 7 years ago
Victor Julien f47df5a671 afpacket: free ring mem on error 7 years ago
Alexander Gozman 39807b47cb Bug #2201: af_packet - treat BPF filter error as fatal
There is no need to try to set erroneous BPF filter again and again. Such attempts
lead to constant mmap() calls without corresponding munmap() when 'use-mmap' is enabled.
7 years ago
Julian f27b4fc8fe redis: support for rpush in list mode
This adds a new redis mode rpush. Also more consistent config keywords orientated at the redis command: lpush and publish.
Keeping list and channel config keywords for backwards compatibility
7 years ago
Mats Klepsland 23f8cc4a03 app-layer-tls: don't decode client certificates
Decoding client certificate overwrites the validity dates from the
server certificate, so we therefore don't decode it, since we don't
do anything with it (right now) anyway.

Fixes Bug #2050
7 years ago
Pierre Chifflier e4129c1568 Rust/Lua: cast value to arch-dependant type (fix build on x86, #2197) 7 years ago
Phil Young 17d9616fde napatech: Implementation of packet counters
added util-napatech module which contains implementation threads
for processing statistics.  And modified source-napatech and
runmode-napatech to instantiate the threads.

napatech: Implementation of packet counters

napatech: implementation of statistics counters

napatech: Implementation of packet counters.

napatech: added util-napatech module

napatech: added utils-napatech module.

added include declaration and napatech specific structure when HAVE_NAPATECH
is defined.

Added util-napatech module to project.
7 years ago
Phil Young 01801c6d7c napatech: configuration changes.
Added comments describing parameter usage.
Changed example to use range formatting of streams.
7 years ago
Phil Young 5f613e6e7d napatech: Added section describing packet counters. 7 years ago
Phil Young f6838f9085 napatech: Added description of hba usage. 7 years ago
Victor Julien ac12c04f11 detect-msg: cleanup error message 7 years ago
Andreas Herz 88a3ba52d6 rule-parser: ignore duplicated msg keyword 7 years ago
jason taylor 0f41172cc6 updated fedora libevent package names
Signed-off-by: jason taylor <jtfas90@gmail.com>
7 years ago