122 Commits (d11e8a8ee7fb2cb2da0567de16bde344e1313f36)

Author	SHA1	Message	Date
Victor Julien	d11e8a8ee7	doc/userguide: document TCP urgent policy	8 months ago
Philippe Antoine	f426ee3ee2	detect: rename stream_log variables ... to better reflect their true meaning	8 months ago
Victor Julien	278dc24cd0	doc/userguide: document smb cache size limit options ... Ticket: #5672.	9 months ago
Philippe Antoine	bb714c9178	http: have a headers limit ... Ticket: 7191 So as to avoid quadratic complexity in libhtp. Make the limit configurable from suricata.yaml, and have an event when network traffic goes over the limit.	10 months ago
Juliana Fajardini	d1d1c8cdac	doc/conf/yaml: replace underscore with dashes ... Use sed + regex to replace all occurrences of suricata.yaml terms that used underscore for their up-to-date dash version. Also search for such terms in the eve-log.yaml partials file, as that is referenced in the configuration section. commands used: sed -i 's/\(^ *[a-z]*\)_\([a-z]*:\)/\1-\2/g' sed -i 's/\(^ *[a-z]*\)_\([a-z]*\)_\([a-z]*:\)/\1-\2-\3/g' Some other instances were found manually. Task #7260	10 months ago
Juliana Fajardini	ef63aa50e2	doc/configuration: improve emergency-recovery docs ... When removing mentions to `prune-flows` a few inconsistencies for how we write and refer to `emergency-recovery` were left behind, still.	10 months ago
Philippe Antoine	de9413c654	detect: safety for app-layer logging of stream-only rules ... If a stream-only rule matches, and we find a tx where we want to log the app-layer data, store into the tx data that we already logged, so that we do not log again the app-layer metadata Ticket: 7085	10 months ago
Juliana Fajardini	1420c83a87	doc/configuration: remove mention to prune-flows ... Although the `prune-flows` option was removed with a5587fec2e, when documentation for the suricata.yaml config file was added with b252b0d, this option was also included - as has remained until now.	10 months ago
Juliana Fajardini	682b199ea0	userguide: expand documentation for rule profiling ... The page about performance and rule profiling showed the table generated by rules profiling but didn't inform how to achieve nor find it. Task #4359	11 months ago
Jason Ish	15fe844ae7	syslog: deprecate ... The standalone syslog output is now deprecated for Suricata 8. Display a warning on use and add notes to the userguide. Ticket: #6544	11 months ago
Jason Ish	5853fb922d	tls-log: deprecate ... tls-log is now deprecated and will be removed in Suricata 9.0. Display a deprecation notice on use, and add notes to the user guide. Ticket: #6542	11 months ago
Jason Ish	ab26323a96	http-log: deprecate ... http-log is now deprecated and will be removed in Suricata 9.0. Display a deprecation notice on use, and add notes to the userguide. Issue: #6543	11 months ago
Victor Julien	fa9cae3899	doc/userguide: document logging changes from 6 to 7 ... Minor other logging related improvements like clarifying language and improving formatting for pdf output.	12 months ago
Victor Julien	e362a01f8d	doc/userguide: document new threshold config options	1 year ago
Philippe Antoine	82c03f72c3	enip: convert to rust ... Ticket: 3958 - transactions are now bidirectional - there is a logger - gap support is improved with probing for resync - frames support - app-layer events - enip_command keyword accepts now string enumeration as values. - add enip.status keyword - add keywords : enip.product_name, enip.protocol_version, enip.revision, enip.identity_status, enip.state, enip.serial, enip.product_code, enip.device_type, enip.vendor_id, enip.capabilities, enip.cip_attribute, enip.cip_class, enip.cip_instance, enip.cip_status, enip.cip_extendedstatus	1 year ago
Jo Johnson	ba6a976e06	doc: Initial doc for lua sandbox	1 year ago
Jo Johnson	712496bb3f	lua: Remove luajit support ... lua 5.4 support is not available in luajit Ticket: #4776	1 year ago
Juliana Fajardini	514e8b8b04	userguide: document exception policy stats ... Configuration options and defaults, existing counters etc. Related to Task #5816	1 year ago
Giuseppe Longo	add95002b9	suricata.yaml: define SIP_PORTS	1 year ago
Lukas Sismis	356f9ffa13	doc: mention the limited number of RX/TX descriptors on Intel NICs ... Ticket: 6748	1 year ago
jason taylor	e891ef3d4e	doc: add pcap file logging variable details ... Signed-off-by: jason taylor <jtfas90@gmail.com>	1 year ago
Philippe Antoine	8f73a0ac55	smtp: config limit maximum number of live transactions ... Ticket: #6477	1 year ago
Philippe Antoine	4175680a8a	http1: configurable max number of live tx per flow ... Ticket: #5921 Co-authored-by: Jason Ish <jason.ish@oisf.net>	1 year ago
Lukas Sismis	6e4cc79b39	doc: remove references to prehistoric versions ... Remove references that are mentioning Suricata 3 or less As a note - only one Suricata 4 reference found: (suricata-yaml.rst:"In 4.1.x") Fast pattern selection criteria can be internally found by inspecting SupportFastPatternForSigMatchList and SigTableSetup functions. Ticket: #6570	2 years ago
Jeff Lucovsky	58f882db94	doc/pcap-log: Remove squil documentation ... Issue: 6347	2 years ago
Victor Julien	4a02a14df1	doc/userguide: document host table yaml settings	2 years ago
Andreas Herz	26130d903f	doc: add note about cpu prio overwrite behavior	2 years ago
jason taylor	19a0b2b0d2	userguide: add details about tcp flow pass ... Signed-off-by: jason taylor <jtfas90@gmail.com>	2 years ago
Shivani Bhardwaj	aeb408dd9d	doc: fix typo encryption-handling	2 years ago
liaozhiyuan	a748164d58	dpdk: support multiple same EAL arguments ... DPDK apps can specify multiple arguments of the same type. YAML format only allows unique keys within a single node. This commit adds support for multiple EAL arguments of the same type to be used within suricata.yaml. Ticket: #5964	2 years ago
Jason Ish	4a97461f9a	doc/userguide: notes about Lua rules being disabled by default	2 years ago
Juliana Fajardini	f83c67bbb5	doc: add missing rule to engine-analysis section ... The first report didn't have an example rule to go with.	2 years ago
Lukas Sismis	1c3cb1e8cc	docs: refactor DPDK docs and add performance tuning section ... Ticket: #5857 Ticket: #5858	2 years ago
Lukas Sismis	03319263db	docs: wrap DPDK doc section at 80 chars	2 years ago
Lukas Sismis	d0bf3ba638	dpdk: add configure option ... Ticket: #5859	2 years ago
Victor Julien	0903536fd6	doc: spelling ... Thanks to Josh Soref.	2 years ago
Philippe Antoine	9bd2b72e2b	doc: explain where tls.store stores certificates ... By adding a reference/link to the doc about the suricata.yaml config section pecifying the directory where the certificates are stored	2 years ago
Victor Julien	c0d9b3c078	doc/userguide: spelling	2 years ago
Morris Chan	b9aac6dd18	yaml: grammar fixup	2 years ago
Jeff Lucovsky	0ad6d4358f	add to doc/pfring: Document additional cluster types	2 years ago
Jeff Lucovsky	b1918168f9	doc/pfring: Document additional cluster types ... This commit adds brief discussion for additional cluster types for use with the pf-ring packet source. Newly added: - cluster_inner_flow - cluster_inner_flow_2_tuple - cluster_inner_flow_4_tuple - cluster_inner_flow_5_tuple Issue: 5975	2 years ago
Juliana Fajardini	31066c7c3b	docs: clarify exception policy's supported values ... As flow.memcap-policy and defrag.memcap-policy do not support flow actions, clarify that in the documentation. Also fix some typos, and add missing values in some places where the exception policies were explained. Related to Bug #5940	2 years ago
Philippe Antoine	b52293b609	dcerpc: config limit maximum number of live transactions ... As is done for other protocols Ticket: #5779	3 years ago
Juliana Fajardini	918bd7435c	userguide/config: update log format symbols list ... There were some possible format options missing after the recent changes in the log format.	3 years ago
Philippe Antoine	55c4834e4e	smb: configurable max number of transactions per flow ... Ticket: #5753	3 years ago
Jason Ish	48f0fd3c74	doc/userguide: update logging section for time formats ... - Update fragment of configuration file to match suricata.yaml with new default-log-format. - Document new %z format specifier.	3 years ago
Philippe Antoine	a003640ecf	security: prevents process creation ... with setrlimit NPROC. So that, if Suricata wants to execve or such to create a new process the OS will forbid it so that RCE exploits are more painful to write. Ticket: #5373	3 years ago
Lukas Sismis	a4a69c3e71	doc/dpdk: add IPS setup docs for DPDK mode ... Ticket: #5511	3 years ago
Juliana Fajardini	6f294f2f2d	userguide: minor rewording and typo fixes ... Some of these were recently introduced, some were highlited after the applayer sections got merged. Some paragraphs seem to have been changed due to trying to respect character limits for lines. Also includes a typo pointed out by one of our community members via Discord.	3 years ago
Philippe Antoine	af40873127	pgsql: config limit maximum number of live transactions ... As is done for other protocols Ticket: #5527	3 years ago