3 Commits (cc35a5b81ffde8cdb15d2ada7aea96587a853462)

Author	SHA1	Message	Date
Jason Ish	9b1d268071	filestore2: warn once for file errors ... Track each type of error warning and only log it once. Also create a new stat, file_store.fs_errors to count each file system type error (open, rename, unlink). Also remove exit stats, they are of limited value.	9 years ago
Jason Ish	f7c3f30186	filestore v2: use fileinfo records as metadata ... As fileinfo records are logged to the main eve log, disable metadata by default. But when enabled, just use the fileinfo record. Metadata is stored in a file named: <sha256>.<seconds>.<file_id>.json where the sha256 is the same as the file logged, the seconds is the unix timestamp in seconds for the fileinfo record, and the file_id is an atomically incremented integer per Suricata instance. This should allow for each occurrence of the same file to have its own metadata file. But a collision is expected when running Suricata repeatedly over the same pcap, as that would be the exact same occurrence of a file.	9 years ago
Jason Ish	4a97315057	filestore v2 - initial version ... Filestore v2 is starts as a copy of log-filestore with the following changes. - NSS is required as file names as based on the SHA256. - Work/tmp files are stored in a temp. directory, then moved into a directory tree where the directory names are the first 2 characters of the hex SHA256. - Removes the need for a waldo file or pid in the filenames.	9 years ago