suricata

Commit Graph

Author	SHA1	Message	Date
Jason Ish	d809b0959b	dns: cleanup: move DnsGetRcode (Lua) to rust Move the implementation of Lua DnsGetRcode to Rust.	6 years ago
Philippe Antoine	23f796a021	kerberos: fix against packet split in record size	6 years ago
Victor Julien	76dd951523	krb5/tcp: remove notice logging on failed records	6 years ago
Sascha Steinbiss	11912bd715	sip: address trailing space parsing	6 years ago
Victor Julien	74305c0486	rust/nfs: minor code cleanups	6 years ago
Victor Julien	576e92983e	rust/rpc: add partial data tests	6 years ago
Pierre Chifflier	442500678b	rust: use the streaming version of combinators to fix incomplete reads	6 years ago
Pierre Chifflier	df9a4fd635	rust/rdp: use the streaming version of combinators to fix incomplete reads	6 years ago
Pierre Chifflier	2561da89c0	rust/rdp: fix regression introduced during nom 5 upgrade	6 years ago
Pierre Chifflier	f3ddd7127c	rust: Add types annotation when required Unfortunately, the transition to nom 5 (and functions instead of macros) has side-effects, one of them being requiring lots of types annotations when using a parsing, for ex in a match instruction.	6 years ago
Pierre Chifflier	62e31396ae	rust/ftp: upgrade to nom 5 CompleteByteSlice type has been removed, and replaced by combinators under the nom::character::complete namespace.	6 years ago
Pierre Chifflier	1a505ccd11	rust/rdp: add custom error handling	6 years ago
Pierre Chifflier	d1bf34a427	rust/smb: add custom error handling	6 years ago
Pierre Chifflier	1ab8c5763c	rust: add SecBlobError custom error type for the Kerberos parser	6 years ago
Pierre Chifflier	030c9a3d86	rust: add take_until_and_consume replacement function	6 years ago
Pierre Chifflier	8664a55ee7	rust/dns: remove unneeded calls to closure!	6 years ago
Pierre Chifflier	5b809f77f1	rust: upgrade all parsers to nom 5	6 years ago
Philippe Antoine	6663246563	parser: make rust probing parsers optional	6 years ago
Victor Julien	f68c255f09	nfs: implement post-GAP transaction cleanup Close all prior transactions in the direction of the GAP, except the file xfers. Those use their own logic described below. After a GAP all normal transactions are closed. File transactions are left open as they can handle GAPs in principle. However, the GAP might have contained the closing of a file and therefore it may remain active until the end of the flow. This patch introduces a time based heuristic for these transactions. After the GAP all file transactions are stamped with the current timestamp. If 60 seconds later a file has seen no update, its marked as closed. This is meant to fix resource starvation issues observed in long running SMB sessions where packet loss was causing GAPs. Due to the similarity of the NFS and SMB parsers, this issue is fixed for NFS as well in this patch. Bug #3424. Bug #3425.	6 years ago
Victor Julien	d41aeccea4	smb: handle file transactions post-GAP After a GAP all normal transactions are closed. File transactions are left open as they can handle GAPs in principle. However, the GAP might have contained the closing of a file and therefore it may remain active until the end of the flow. This patch introduces a time based heuristic for these transactions. After the GAP all file transactions are stamped with the current timestamp. If 60 seconds later a file has seen no update, its marked as closed. This is meant to fix resource starvation issues observed in long running SMB sessions where packet loss was causing GAPs.	6 years ago
Jason Ish	80cafb2979	flow: expose last time as a function This function returns the individual components of the timeval in output pointers making it suitable for use over Rust FFI.	6 years ago
Jason Ish	1e741641a6	rust: make clean fixups For make clean, only remove gen/ if cbindgen is available. This prevents make clean from remove gen when the headers were bundled, but cbindgen is not available to remove them. Unconditionally remove gen and vendor in maintainerclean.	6 years ago
Jason Ish	53aaa82deb	rust: set edition to 2018	6 years ago
Jason Ish	e68dfa46a6	rust: cargo fix for Rust 2018 edition	6 years ago
Jason Ish	5fbe020585	rust/cbindgen: Revert Makefile to a more pre-cbindgen state The modifications as part of the cbindgen commit caused issues with distcheck, revert the Makefile to how it was with the Python generator, but still using cbindgen. Also always assume we'll include the generated headers in the distribution archive to fix make distcheck from distribution archives with headers included, but no cbindgen.	6 years ago
Danny Browning	b573c16dd5	build: cbindgen Rust headers are now generated using cbindgen. If cbindgen is present, they can be generated during dist, otherwise they will be available for builds.	6 years ago
Victor Julien	ce0ae81d95	rust: fix vendor use on MinGW	6 years ago
Jason Ish	57b683233d	rust: Don't use --frozen during build. If sources are vendored, we get the same effect of using frozen with a lock file, and the Cargo.lock is generated based on the vendored sources. This also removes the need to ship a Cargo.lock. Fixed out of source builds with vendored sources.	6 years ago
Jason Ish	c6f168eb98	rust/Makefile: Don't include Cargo.toml There is no need to include Cargo.toml in the distribution, it is always generated from Cargo.toml.in during ./configure.	6 years ago
Jason Ish	5ee8323028	rust: remove unnecessary parentheses (Rust 1.40 fixup) Rust 1.40 in strict mode will now fail the build on the presence of unnecessary parentheses. warning: unnecessary parentheses around type --> src/smb/smb2_ioctl.rs:41:12 \| 41 \| -> (&mut SMBTransaction) \| ^^^^^^^^^^^^^^^^^^^^^ help: remove these parentheses \| = note: `#[warn(unused_parens)]` on by default	6 years ago
Victor Julien	f5b33a070a	smb1: allow empty trans records	6 years ago
Victor Julien	40fe29de96	smb1: fix 'event' txs not getting closed If the only reason we created a request side TX was to set an event, we would not close it. This patch always looks up the TX from the response side.	6 years ago
Victor Julien	129cd28058	smb/dcerpc: close request tx sooner	6 years ago
Victor Julien	44ac3e30dd	smb: post-GAP handling update Close all prior transactions in the direction of the GAP, except the file xfers. Those use their own logic.	6 years ago
Victor Julien	a7ee2ffbde	smb: winreg is a DCERPC facility	6 years ago
Ciprian	c9cd7559fd	configure: fixing rust/cargo cross compile command adding --target argument to cargo command line when cross compiling	6 years ago
Jason Ish	e2c846d01f	snmp: add tx detect flags	6 years ago
Jason Ish	fa4b9d37c2	krb5: register tx detect flags Related ticker #3345: https://redmine.openinfosecfoundation.org/issues/3345	6 years ago
Jason Ish	8a232be77e	rust: define TxDetectFlag struct and binding macros Define a TxDetectFlag type and macros to generating C bindings for getting and settings the tx detect flags.	6 years ago
Jason Ish	cde49ec246	rust: add tx detect flags function to registration struct	6 years ago
Victor Julien	f9155aa121	files: simplify pruning logic Since `ebcc4db84a` the flow worker runs file pruning after parsing, detection and loging. This means we can simplify the pruning logic. If a file is in state >= CLOSED, we can prune it. Detection and outputs will have had a final chance to process it. Remove the calls to the pruning code from Rust. They are no longer needed.	6 years ago
Victor Julien	b4318a11e3	rust: remove build system HAVE_RUST guards	6 years ago
Jason Ish	a3cdef2b4d	rust: run tests with same features as build Cargo check wasn't being passed --features so could have a different configuration than the build.	6 years ago
Jason Ish	389272f4c7	rustup: handle rustup for sudo and su If rustup is in use, and a user uses sudo or su for the make install, the install may fail with a "no default toolchain" error. To prevent this, detect at configure if rustup is being used, then set RUSTUP_HOME for all calls to cargo.	6 years ago
Jason Ish	6e981fd15a	rust: fix build when source directory has spaces in it Redmine issue: https://redmine.openinfosecfoundation.org/issues/2668	6 years ago
Jason Ish	f9c9548b74	configure: detect lua integer size Lua 5.1 and 5.3 use a different integer size. Run a test program to set the integer size used in the Rust FFI layer to Rust.	6 years ago
Jeff Lucovsky	bd691778eb	rust/ftp: add parser for active mode port handling	6 years ago
Jason Ish	517ecd68a9	sip: rustfmt As this is new Rust code, format with rustfmt using default styling.	6 years ago
Jason Ish	a45a2fa1fc	sip: disable by default in 5.0	6 years ago
Jason Ish	fdbc2fe49c	sip rust fixup: remove unused import in tests	6 years ago

1 2 3 4 5 ...

385 Commits (d809b0959b2466de38f171cd1ab0ea9173eef0b7)