Eric Leblond
d292004880
Add some missing checks of SCStrdup return.
13 years ago
Eric Leblond
a3465fb971
Rename 'worker' running mode to 'workers'
...
This patch renamed the 'worker' running mode into 'workers'. Thus,
there is only one name in Suricata for the same thing. Backward
compatibility is ensured by replacing "worker" by "workers" when
the old name is used. A warning is printed in the log when the old
name is used.
13 years ago
Victor Julien
79d5ef3707
Improve warning if prelude output is selected but support not compiled in. #320 .
13 years ago
Anoop Saldanha
32183faa82
free flowvar entries in flow after live rule swap. Sync flowbits entries into packet struct to be used by alert debuglog when alert debuglog is enabled
13 years ago
Nikolay Denev
139768dd58
Do not use underscored config vars internally.
14 years ago
Victor Julien
1d9f6ff8f2
Initial Napatech support by Randy Caldejon / nPulse.
14 years ago
Eric Leblond
ef3951d914
runmode: export running mode
...
This will permit to put some optimisation in different components.
This is done via the RunmodeGetActive() function.
14 years ago
Victor Julien
1df3304655
Clean up for unittests code: only compile unittest api code when unittests are enabled. Fix unittest code that wasn't wrapped in the proper UNITTESTS ifdefs.
14 years ago
Eric Leblond
24f15fa321
Don't warn about non enable non existing output module
...
This patch modifies output module loading to only trigger alert
message for non existing modules when they are loaded. It also
warn about unified1 removal.
14 years ago
Eric Leblond
391d813c82
Remove unified1 output module.
14 years ago
Eric Leblond
c45d898572
af-packet: basic support for AF_PACKET socket
...
This patch provides basic support for AF_PACKET socket. It is
completed by a subsequent patches prodiding extended features
and bugfixes.
14 years ago
Anoop Saldanha
4f7df1029d
Unify the use of slots to a single struct for threading API. Remove separate slot append functions for 1slot and varslot
14 years ago
Jason Ish
7257fed0f3
Fix bug 288, accept true in output configuration.
...
Refactor a bit to run checks for truth through a common function
that takes yes, true, on and 1 as true values.
14 years ago
Victor Julien
169104a803
Slightly clean up --list-runmodes output.
14 years ago
Anoop Saldanha
e4d890e186
modify runmode api to accept conf runmode paramter as a char string, instead of an interger id
14 years ago
Anoop Saldanha
229f7281ea
list runmodes. Allow specification of runmode id from cof file. Also allow for command line override
14 years ago
Anoop Saldanha
6fceeda8c5
move erf dag runmode into its own file runmode-erf-dag.[ch]
14 years ago
Anoop Saldanha
f51cf34210
move erf file runmode into its own file runmode-erf-file.[ch]
14 years ago
Anoop Saldanha
86eabbc2f5
move ipfw runmode into its own file runmode-ipfw.[ch]
14 years ago
Anoop Saldanha
036015d6b9
move nfq runmode into its own file runmode-nfq.[ch]
14 years ago
Anoop Saldanha
9affa39b29
move pfring runmode into its own file runmode-pfring.[ch]
14 years ago
Anoop Saldanha
e7ac1d7c4c
move pcap file runmode into its own file runmode-pcap-file.[ch]
14 years ago
Anoop Saldanha
f6af567ce0
move pcap live runmode into its own file runmode-pcap.[ch]
14 years ago
Victor Julien
07776c113b
Fix valgrind error on pfring_recv, rename threads from RecvPfring to RxPfring so the name still looks right for 100+ threads. Add --pfring commandline option that just enables pfring, then takes interface from config.
15 years ago
Victor Julien
1c9e48ae98
Fix compilation error on non-pfring systems.
15 years ago
Victor Julien
91f28afef4
Add option to PF_RING to have multiple reader threads. Improve general performance of the PF_RING module.
15 years ago
Eric Leblond
8330747234
Add multi queue support to NFQ run mode
...
This patch adds support for multiple Netfilter queue
in the NFQ run mode. Suricata can now be started on
multiple queue by using a comma separated list of
queue identifier on the command line. The following syntax:
suricata -q 0 -q 1 -c /opt/suricata/etc/suricata.yaml
will start a suricata listening to Netfilter queue 0 and 1.
Signed-off-by: Eric Leblond <eric@regit.org>
15 years ago
Eric Leblond
d0faa6c96e
Fix some spacing.
...
This trivial patch fixes some indentation problems.
Signed-off-by: Eric Leblond <eric@regit.org>
15 years ago
Eric Leblond
88fb3a641e
Delete some commented code in runmodes
...
This patch simply suppress some commented code in runmodes.c.
Signed-off-by: Eric Leblond <eric@regit.org>
15 years ago
Eric Leblond
f9e453e14c
affinity: Use configured 'threads' value if set
...
This patch modifies runmodes to make them use the new 'threads'
variable.
Signed-off-by: Eric Leblond <eric@regit.org>
15 years ago
Eric Leblond
a11e40dedf
Pcapfile mode: support for cpu affinity settings
...
This patch adds support for cpu affinity setting in the pcapfile
runmode.
Signed-off-by: Eric Leblond <eric@regit.org>
15 years ago
Eric Leblond
9d5f08e0d9
Pcap mode: use CPU affinity setting
...
This patch adds support for CPU affinity settings
in pcap mode.
Signed-off-by: Eric Leblond <eric@regit.org>
15 years ago
Eric Leblond
51df6beb26
Convert RunModeIpsNFQAuto to new affinity mode.
...
The default NFQ run mode is now using the new affinity system. It
thus can be configured via suricata.yaml.
Signed-off-by: Eric Leblond <eric@regit.org>
15 years ago
Eric Leblond
77f2b6a7a9
Make runmode parse affinity settings.
...
This patch modifies runmode to parse configuration file related
to affinity settings. It also prepare the export of the
set_cpu_affinity which was previously local. It is now used
in the affinity and tm-threads files.
Signed-off-by: Eric Leblond <eric@regit.org>
15 years ago
Eric Leblond
2011366429
Include affinity in runmodes and threadvars.
...
This small patch add inclusion of util-affinity.h in the
files that will have to use affinity related features.
Signed-off-by: Eric Leblond <eric@regit.org>
15 years ago
Victor Julien
878d3d87db
Add (experimental) support for using multiple pcap devices to acquire packets from. Just passing multiple -i <dev> options on the commandline will activate this. Windows not yet supported.
15 years ago
Victor Julien
3d60e9bfeb
Clean up output.
15 years ago
Anoop Saldanha
05adf2de41
fix live runmode decode TM for cuda
15 years ago
Victor Julien
dec4218d62
Layout updates to NFQ runmode.
15 years ago
Victor Julien
7e49aa7f76
Simplify NFQ runmode reducing the number of threads and thus queues.
15 years ago
Victor Julien
e7cb7c6b97
Make outputs part of the flowpinned threads in the AutoFp runmode.
15 years ago
Victor Julien
1bd2d59253
Merge decode and stream threads in RunModeIdsPcapAuto like in the file runmode. Fix these runmodes not adhering to the cpu affinity setting if CUDA is compiled in.
15 years ago
Victor Julien
b4db93fa94
Remove leftover printf.
15 years ago
Victor Julien
8d737310aa
Use 'simple' queue for cuda too. Fix hanging in cuda mode.
15 years ago
Victor Julien
3c1ae607cf
Fix cuda compilation.
15 years ago
Anoop Saldanha
33f4beb0bc
batching of packets support for cuda b2g mpm. Supported for both 32 and 64 bit platforms
15 years ago
Victor Julien
ec277b292c
Fall back to the old mutex based queue's to see if that fixes an obscure lockup at higher optimization levels in gcc in file pcap mode.
15 years ago
Victor Julien
b67fb5229b
Fix pcap file auto flow pinned runmode (disabled by default).
15 years ago
Victor Julien
6519a86ec7
Move packet pool to ringbuffer, update packet pool api and ringbuffer api. Remove memset usage from PACKET_RECYCLE, add proper cleanup macros.
15 years ago
Victor Julien
c7a744c937
Split ringbuffer queue handler into multiple, for mrsw, srsw, srmw modes.
15 years ago