Juliana Fajardini
f16d428fd1
userguide/upgrade: link to exception policy FAQ
...
With the release of 7, people are starting to have issues with traffic
being blocked. While we don't add a more expansive documentation for
this, add a link to the FAQ covering possible fixes for drops caused by
the fail closed default behavior of the exception policies.
2 years ago
Andreas Herz
24bcaf07ae
doc/upgrade: add more 6 to 7 changes and minor improvements
...
Issue: #5473
2 years ago
Jason Ish
0b5dc58e15
doc/userguide: more eve http upgrade notes
...
Add more information with a examples of how the changes to EVE HTTP
logging may affect users.
2 years ago
Jeff Lucovsky
ac8f91f44f
config: Document cluster_rollover deprecation
...
Issue: 6128
cluster_rollover is no longer permitted; using it will generate a
warning message and it'll be replaced with cluster_flow
2 years ago
Jeff Lucovsky
29621c7f0d
doc/afpacket: Document rollover deprecation
2 years ago
Jason Ish
14daa42e0b
doc/userguide: dataset upgrade notes
2 years ago
Philippe Antoine
656554f293
http2: rename http2.header to http.request_header
...
Or http.response_header based on the direction
http2.header had a different behavior than http.header and this was
confusing.
Ticket: #5780
2 years ago
Philippe Antoine
5c419b79b7
doc: upgrade guide for logging http custom headers
...
Ticket: #5320
2 years ago
Jason Ish
5af73b3879
doc/userguide: document include files
...
Document how to use include files, plus add a deprecation notice on
the use of multiple "include" statements.
2 years ago
Jason Ish
a71dee5516
doc/userguide: merge logging changes in 7.0 upgrade notes
...
Two "Logging changes" sections existed, merge.
2 years ago
Victor Julien
0903536fd6
doc: spelling
...
Thanks to Josh Soref.
2 years ago
Philippe Antoine
8f9cd8ff1a
doc: security.limit-noproc upgrade note
...
Ticket: #5621
2 years ago
Victor Julien
f4fa51986e
doc: warn IPS users on new exception policy default
2 years ago
Juliana Fajardini
0d9289014b
exceptions: add master switch config option
...
This allows all traffic Exception Policies to be set from one
configuration point. All exception policy options are available in IPS
mode. Bypass, pass and auto (disabled) are also available in iDS mode
Exception Policies set up individually will overwrite this setup for the
given traffic exception.
Task #5219
2 years ago
Todd Mortimer
15c77be937
swf-decompression: Disable by default.
...
Add an entry to the upgrade guide noting the change.
Ticket: #5632
2 years ago
Philippe Antoine
a003640ecf
security: prevents process creation
...
with setrlimit NPROC.
So that, if Suricata wants to execve or such to create a new process
the OS will forbid it so that RCE exploits are more painful to write.
Ticket: #5373
2 years ago
Jason Ish
6ceeb08351
doc/userguide: updates for eve dns v1 removal
...
Ticket: #4157
3 years ago
Jason Ish
7d6bc60abb
doc/userguide: document ftp max-line-length
3 years ago
Philippe Antoine
cfcade58ad
http: move xff logging to alert object
...
Ticket: 4860
instead of root field
3 years ago
Jason Ish
cda11b8d97
doc/update: mention change of default rule path
3 years ago
Juliana Fajardini
de0ce26e3f
userguide: update references to Suricata website
...
Many places were still referencing the old Suricata page.
Used git grep with replace to update them. Checked that new links work.
Left old references when they were only documentation examples (for
output or unittests).
Task#4915
3 years ago
Philippe Antoine
27dd0c6b3d
eve/ftp-data: log alert metadata in ftp-data object
...
Ticket: 4860
instead of directly in root
3 years ago
Philippe Antoine
fae7389ae2
pcre2: document the behavioral changes
3 years ago
Jason Ish
2cff811609
doc: remove prelude and document as removed
4 years ago
Jason Ish
3e9d1e813a
doc/upgrade: move ike logging changes to 7.0 changes
...
Was mistakenly put in 6.0 changes.
4 years ago
Jason Ish
f56634ac46
doc/upgrade: mention that nss is no longer required
4 years ago
Jeff Lucovsky
fcd1ae3bf1
doc: Protocol name/case change for upgrade doc
...
This commit adds a one-liner to the upgrade document for 7.0 stating
that protocol names/values are now builtin to Suricata and that names
and their casing may change.
4 years ago
frank honza
ab59ef0d79
ikev1: add documentation for ikev1
4 years ago
Jason Ish
7d44e80a50
doc: document removal of unified2
...
And suggest an alternate tool, Meer if compatibility with
Barnyard2 style databases is required.
Redmine ticket:
https://redmine.openinfosecfoundation.org/issues/3497
5 years ago
Jason Ish
e71f2b22fa
doc: add removal of individual json loggers
...
Add link to multiple eve instances as a replacement for this
feature.
5 years ago
Jeff Lucovsky
06f41f608c
doc: Improve grammar, spelling and clarifications
...
This commit improves the overall documentation's grammar, spelling, and
adds clarifications where needed.
5 years ago
Jeff Lucovsky
b116a56a32
doc: Correct typos
5 years ago
Jason Ish
8997a114cb
userguide: RDP now enabled by default
...
Redmine issue:
https://redmine.openinfosecfoundation.org/issues/3255
5 years ago
Jason Ish
3eb0461abd
userguide: SIP now enabled by default
...
Redmine issue:
https://redmine.openinfosecfoundation.org/issues/3256
5 years ago
Jason Ish
6b8320d1c0
doc: document file-store v1 to v2 configuration changes
5 years ago
Victor Julien
1c27a99827
doc: add upgrade page
5 years ago