Jeff Lucovsky
aa8871a5be
rust/default: Enable Default usage
5 years ago
Jeff Lucovsky
6028ca7827
nfs: Rework constructs to use Self/Default
5 years ago
Jeff Lucovsky
aafb0a60b7
dhcp: Rework constructs to use Self/Default
5 years ago
Jeff Lucovsky
1ef0bd580b
dcerpc: Rework constructs to use Self/Default
5 years ago
Jeff Lucovsky
00167121dc
dns: Rework constructs to use Self/Default
5 years ago
Jeff Lucovsky
02dccb1529
smb: Rework constructs to use Self/Default
...
This commit modifies the constructors to use Self and/or
Default::default() when feasible
5 years ago
Jeff Lucovsky
f502f21f9e
rust/default: Enable Default usage in SMB
5 years ago
Philippe Antoine
95f225e8fb
doc: update sphinx api to use add_css_file
...
instead of deprecated add_stylesheet
5 years ago
Shivani Bhardwaj
581cb6223d
dcerpc/udp: Add rust registration function
...
Get rid of the C glue code and move registration completely to Rust.
5 years ago
Shivani Bhardwaj
d7007424bd
dcerpc/udp: Change fn sign as per rust registration requirement
...
Registering parsers in Rust requires signatures to be a certain way and
compatible with C. Change signatures of all the functions.
5 years ago
Shivani Bhardwaj
bac69af7e4
dcerpc: Add rust registration function
...
Get rid of the C glue code and move registration completely to Rust.
5 years ago
Shivani Bhardwaj
a0a09a102b
dcerpc: Change fn sign as per rust registration requirement
...
Registering parsers in Rust requires signatures to be a certain way and
compatible with C. Change signatures of all the functions.
5 years ago
Shivani Bhardwaj
dee972b863
rust/core: Make AppProto type u16
5 years ago
Shivani Bhardwaj
d66ad96f0d
applayer/rust: add extern AppLayerProtoDetectPMRegisterPatternCSwPP
5 years ago
Victor Julien
533c6ff274
github: work around rustc mingw issue
...
https://github.com/msys2/MINGW-packages/issues/8732#issuecomment-845079799
5 years ago
Jason Ish
65809be8ec
suricata-plugin.h: don't include autoconf.h
...
It is not required here and just creates double inclusion in some
scenarios.
5 years ago
Victor Julien
d7c3ecb6f9
http2: remove dead code
5 years ago
Philippe Antoine
b3c502d572
http2: remove assertion which can be wrong
...
Brotli decoder stops consuming input it it reaches the
end of its input
5 years ago
Simon Dugas
c2720fc2fb
modbus: fix quantity and count calculation
...
The [Modbus Spec S6.11](https://modbus.org/docs/Modbus_Application_Protocol_V1_1b.pdf )
clearly states that the `count = quantity / 8` and not the other way
around. This is fixed in sawp-0.5.0.
5 years ago
Philippe Antoine
999327ba1f
http2: http.cookie keyword now works for HTTP2
5 years ago
Philippe Antoine
df039555bc
http2: http.host.raw keyword now works for HTTP2
5 years ago
Philippe Antoine
1e82d0b3c8
http2: http.method keyword now works for HTTP2
5 years ago
Philippe Antoine
017e39d8fd
http2: makes all HTTP1 header keywords work
5 years ago
Philippe Antoine
2cadddda89
http2: there is no status msg in HTTP2
...
so we revert its detection, mistaken with the status code
5 years ago
Philippe Antoine
1e96272576
http2: http.stat_code keyword now works for HTTP2
5 years ago
Jeff Lucovsky
fcd1ae3bf1
doc: Protocol name/case change for upgrade doc
...
This commit adds a one-liner to the upgrade document for 7.0 stating
that protocol names/values are now builtin to Suricata and that names
and their casing may change.
5 years ago
Jeff Lucovsky
e77e8dbe18
proto: Remove dependency on /etc/protocols
...
This commit eliminates the dependency on /etc/protocols and equivalent
on other platforms by using a static table of IANA assigned protocol
values (names, description).
5 years ago
Jason Ish
def636383e
github-ci: enable hiredis on fedora 33 build
5 years ago
Jason Ish
587c326d73
yaml: treat some unquoted values as null (per spec)
...
Per the YAML spec, the following values when present unquoted
should be equivalent to null:
- ~
- NULL
- Null
- null
5 years ago
Jeff Lucovsky
7fa98cde4d
output/redis: Redis threaded output changes
5 years ago
Jeff Lucovsky
8867dcf403
config/plugin: Add template for plugins
5 years ago
Jeff Lucovsky
1defca3c34
output/plugin: Support threaded output plugins
5 years ago
Jeff Lucovsky
05836a4452
output/plugin: API changes for threaded support
...
This commit extends the interface to better support file output plugins.
5 years ago
Simon Dugas
0ed62e93ec
doc/modbus: add eve logging documentation
5 years ago
Simon Dugas
a8a51dc004
modbus: add eve logging
5 years ago
Simon Dugas
8342641477
modbus: move tests from c to rust
...
Move tests in a seperate commit so that we can use the previous one for
regression testing. This also gets rid of the temporary glue that made
the C tests work with the rust implementation.
5 years ago
Simon Dugas
a458a94dca
modbus: move from C to rust
...
Adds a new rust modbus app layer parser and detection module.
Moves the C module to rust but leaves the test cases in place to
regression test the new rust module.
5 years ago
Simon Dugas
7c99fe3689
modbus: fix app-layer test cases
...
invalidFunctionCode: make protocol id valid since we are only testing
the function code here.
readCoilsErrorRsp: changed to different invalid response code.
ModbusParserTest10: wrong length was passed to AppLayerParserParse.
ModbusParserTest11: allocate the entire buffer.
5 years ago
Simon Dugas
f629321de0
ci: update known rust version
...
Update RUST_VERSION_KNOWN to the latest stable known to succeed. Also
updates the documentation to avoid confusion around the use of this
variable.
5 years ago
Victor Julien
28548b072b
travis: remove ci file as we switched to github-ci
5 years ago
frank honza
f83d51d0cb
ike: set event for multiple server proposals
5 years ago
Jason Ish
488d5fb342
unix-socket: reset to ready state on startup
...
As part of commit ea15282f47 ,
some initialization was moved to happen even in unix socket mode,
however, this initialization does setup some loggers that can only have
one instance enabled (anomaly, drop, file-store).
This will cause these loggers to error out on the first pcap, but work
on subsequent runs of the pcap as some deinitialization is done after
each pcap.
This fix just runs the post pcap-file deinitialization routine to
reset some of the initialization done on startup, like is done after
running each pcap in unix socket mode.
Redmine issue:
https://redmine.openinfosecfoundation.org/issues/4225
Additionally this prevents alerts from being logged two times
on the first run of a pcap through the unix socket:
Redmine issue:
https://redmine.openinfosecfoundation.org/issues/4434
5 years ago
Jeff Lucovsky
0f0cb5169f
decode/vntag: Add VNTag decoder logic
5 years ago
Jeff Lucovsky
596d760833
tests/vntag: VNTAG decoder unittests
5 years ago
Jeff Lucovsky
713bace44f
decode/vntag: VNTAG 802.1Qbh decoder
5 years ago
Jeff Lucovsky
b944e636a8
decode/stats: VNTAG stats
5 years ago
Jeff Lucovsky
1ddad0a0d6
decode/events: VNTAG decoder events
5 years ago
Jeff Lucovsky
049afde3a2
decode: Add ethertype for VNTAG
5 years ago
Shivani Bhardwaj
0c5a8fb35d
github: Update codeowner handle
5 years ago
Philippe Antoine
ca6e434e0b
ftp: completely parses pasv and epsv responses
5 years ago