5702 Commits (d98060410cec5fd1793a6eca056cc53577033630)

 

All Branches   

Search

Author	SHA1	Message	Date
Victor Julien	a095694945	host: register unittests ... Host unittests were not registered so they wouldn't run.	10 years ago
Victor Julien	60b50e1ca5	packet-pool: free pending packets	10 years ago
Victor Julien	8b2dd81628	stats: stats threads don't need packet pools	10 years ago
Victor Julien	ffd2248459	flow manager: destroy packet pool on close	10 years ago
Victor Julien	c4e1324690	flow-timeout: use packet pool ... Use packet pool for pseudo packets on flow timeout. Wait for a packet if necessary. For shutdown, alloc a new pool as the 'main()' thread calls this.	10 years ago
Victor Julien	cef609bb73	threading: lock TmThreadKillThreadsFamily	10 years ago
Victor Julien	3499d682c4	flow timeout: cleanups ... Rename FlowForceReassemblyForFlowV2 to just FlowForceReassemblyForFlow as there is no V1.	10 years ago
Victor Julien	6e69b51123	flow timeout: cleanup ... Remove now unused old flow timeout code.	10 years ago
Victor Julien	de4bda14e6	stream: handle flow timeout stream end packets ... Handle flow timeout packets in the stream engine. Previously the flow timeout code would call reassembly code directly.	10 years ago
Victor Julien	0ffaad66eb	flow-time: disable remainder of the old timeout code ... Disable registration code that was looking for threadvars and slots as timeout handling is now done in a live engine.	10 years ago
Victor Julien	8e86f387a6	flow-time: use live threads at shutdown ... Update pktacq loop to process flow timeouts in a running engine. Add a new step to the shutdown phase of packet acquisition loop threads (pktacqloop). The shutdown code lets the pktacqloop break out of it's packet acquisition loop. The thread then enters a flow timeout loop, where it processes packets from it's tv->stream_pq queue until it's empty _and_ the KILL flag is set. Make sure receive threads are done before moving on to flow hash cleanup (recycle all). Without this the flow recycler could start it's unconditional hash clean up while detect threads are still running on the flows. Update unix socket to match live modes.	10 years ago
Victor Julien	c6ec92d9b1	flow-timeout: use live threads ... Use live threads. Disable old timeout code.	10 years ago
Victor Julien	48eccf7d91	Assign thread_id to flow on first packet stream engine	10 years ago
Victor Julien	8c51b23e94	Thread registration: id's start at 1 ... Start thread id's at 1, so that in flow's we can use 0 to indicate a thread id hasn't been set in it yet.	10 years ago
Victor Julien	7f80516563	Introduce Flow timeout injection api ... Add function TmThreadsInjectPacketById that is to be used to inject flow timeout packets into the threads stream_pq queue. TmThreadsInjectPacketById will also wake up listening threads if applicable. Packets are passed all packets together in an NULL terminated array to reduce locking overhead.	10 years ago
Victor Julien	51a782fd8c	Define FlowThreadId and add it to the flow ... 16 bits id should be enough for threads for a while.	10 years ago
Victor Julien	a260cba32b	Give easy access for thread stream packet queue ... Access it from ThreadVars. This allows for easy injection of packets into the stream engine.	10 years ago
Victor Julien	489ee20560	Thread Registration API for ID's ... Create thread registration and unregistration API for assigning unique thread id's. Threadvars is static even if a thread restarts, so we can do the registration before the threads start. A thread is unregistered when the ThreadVars are freed.	10 years ago
Duarte Silva	e586644c25	Fix and improvements ... - Added/removed missing/superfluous util-memrchr.h include - Improved the extraction of a IP from the XFF chain of IPs	10 years ago
Duarte Silva	68f43ffffb	Implemented the diferent behaviour depending on the proxy deployment ... - In forward deployment mode the first IP will be returned - In reverse deployment mode the last IP will be retuned	10 years ago
Duarte Silva	496200dd08	Prepared everything for the proxy deployment configuration ... - Added the suricata.yaml configurations and updated the comments - Renamed the field in the configuration structure to something generic - Added two new constants and the warning codes	10 years ago
Duarte Silva	4e04cd2d1b	Adding XFF support to EVE alert output ... - Created app-layer-htp-xff.c and app-layer-htp-xff.h - Added entries in the Makefile.am - Added the necessary configuration options to EVE alert section - Updated Unified2 XFF configuration comments and removed unnecessary whitespace - Created a generic function to parse the configuration - Release the flow locks sooner and remove debug logging - Added XFF support to EVE alert output	10 years ago
DIALLO David	0bdf494b54	fix Cygwin build fails: array subscript has type char	10 years ago
DIALLO David	bacbe113d0	Add a warning in Modbus section of YAML file to remind user to modify stream depth (unlimited)	10 years ago
DIALLO David	bfc871ce85	Update AppLayerProtoDetectPrintProbingParsers with Modbus protocol	10 years ago
DIALLO David	83d9834e77	fix CID 1257762: Logically dead code(DEADCODE)	10 years ago
Eric Leblond	e564ac77fd	suricatasc: exit with error if command returns NOK	10 years ago
Eric Leblond	55ccd3b17d	suricatasc: now python 2 and 3 compatible ... Update code to support both python 2 and python 3.	10 years ago
Victor Julien	84e8217fd8	unix-socket: allow socked in custom locations ... Allow the socket to be set in any location. This allows for easy setting up of a socket as a non-root user.	10 years ago
Victor Julien	b978730486	unix-socket: fix restart/shutdown cycle ... When cleaning up after a pcap was processed, the stats api was cleaned up before the stats threads were killed, leading to a BUG_ON triggering.	10 years ago
Ken Steele	3f3481e4d2	Fix indentation	10 years ago
Ken Steele	3f86c5a83f	Fix memory leak in ac-tile ... Incorrectly reallocing the goto table after it was freed by calling SCACTileReallocState() when really only want to realloc the output table. This was causing a large goto table to be allocated and never used or freed.	10 years ago
Ken Steele	b9e20ab4b8	Clean up memory leaks in ac-tile code ... Free some memory at exit that was not getting freed. Change pid_pat_list to store copy of case-strings in the same block of memory as the array of pointers.	10 years ago
Ken Steele	1faa94c314	Make bad copy-mode be an error in runmode-tile.	10 years ago
Victor Julien	c779065d35	Bug 1329: error out on invalid rule protocol ... Due to a logic error in AppLayerProtoDetectGetProtoByName invalid protocols would not be detected as such. Instead of ALPROTO_UNKNOWN ALPROTO_MAX was returned. Bug #1329	10 years ago
Eric Leblond	9f22c878e8	unix-manager: fix cppcheck errors ... This patch fixes the following errors: [src/unix-manager.c:306]: (error) Memory pointed to by 'client' is freed twice. [src/unix-manager.c:313]: (error) Memory pointed to by 'client' is freed twice. [src/unix-manager.c:323]: (error) Memory pointed to by 'client' is freed twice. [src/unix-manager.c:334]: (error) Memory pointed to by 'client' is freed twice. Unix manager was treating the packet after closing the socket if message was too long.	10 years ago
Victor Julien	096b85ab68	stream: don't send EOF to AppLayer too soon ... Sending EOF too soon results in the AppLayer cleaning up prematurely.	10 years ago
Victor Julien	0bb2b15491	ipv6: check for MLD messages with HL not 1 ... MLD messages should have a hop limit of 1 only. All others are invalid. Written at MLD talk of Enno Rey, Antonios Atlasis & Jayson Salazar during Deepsec 2014.	10 years ago
Ken Steele	68e6c4e94b	Correct flow memory usage bookkeeping error ... Fix bug 1321 where flow_memuse was incremented more on allocation than free.	10 years ago
Victor Julien	d951de2f19	Bug 977: -T / --init-errors-fatal to process all rules ... Have -T / --init-errors-fatal process all rules so that it's easier to debug problems in ruleset. Otherwise it can be a lengthy fix, test error cycle if multiple rules have issues. Convert empty rulefile error into a warning. Bug #977	10 years ago
Victor Julien	e951afb911	afpacket: only check offloading once per iface ... Instead of once per thread per iface.	10 years ago
Victor Julien	fa10811585	ioctl: make all string args const pointers	10 years ago
Victor Julien	c3c144d504	http: don't crash when normalizing uri on low memory	10 years ago
Victor Julien	f8f2ff49de	defrag: don't crash when out of memory ... Handle memory allocation errors in defrag better. Could lead to crashes if malloc errors happened.	10 years ago
Eric Leblond	56373e5b34	af-packet: no more threads than RSS queues ... If we manage to read the number of RSS queues from an interface, this means that the optimal number of capture threads is equal to the minimum of this number and of the number of cores on the system. This patch implements this logic thanks to the newly introduced function GetIfaceRSSQueuesNum.	10 years ago
Eric Leblond	123c58af4b	util-ioctl: add message in case of failure	10 years ago
Eric Leblond	b4bb6e67ba	util-ioctl: Add function to get number of RSS queues on iface ... The number of RSS queues can be fetched via a standard ioctl which is independant of hardware.	10 years ago
Victor Julien	c174c9d779	af-packet: threads: auto, default to workers ... Add a new default value for the 'threads:' setting in af-packet: "auto". This will create as many capture threads as there are cores. Default runmode of af-packet to workers.	10 years ago
Victor Julien	7b4987abc3	Runmode: handle value 'auto' ... Auto now selects the default runmode for the capture method.	10 years ago
Victor Julien	234d18ab68	threading: remove '1slot' functions ... No longer in use after the 'auto' runmode removal. All runmodes now use either varslot or pktacqloop support.	10 years ago