209 Commits (ec47f840f3ee40343453e4269c1fa2b68e87e1b1)

Author	SHA1	Message	Date
Victor Julien	10cc9d5b6a	Add icmp flow handling.	16 years ago
Victor Julien	71ed2d38f5	Fix scan patterns sometimes not being added to the scan ctx. Should fix bug #9.	16 years ago
William Metcalf	c40e81d42b	failing unittest rules with same content match fail	16 years ago
Victor Julien	4824868766	Application layer detection improvements ... - improve locking of application layer handling, making sure that the flow cannot be freed/cleared when the detection engine is still working with it. - add a check to the app layer detection to make sure that a match function will only inspect an app layer state if it's of the right type.	16 years ago
Pablo Rincon	f2f9b83280	Adding FTP app layer parser and ftpbounce detection at L7	16 years ago
Gerardo Iglesias Galvan	7e87f373b9	Add icmp_id keyword support	16 years ago
Victor Julien	01976a0b74	Support for sigs with both pkt and applayer detect ... Sets a flowbit with the sig id if the packet matches match. Checks on that if the app layer matches match. Currently misuses the flowbits api for this in a way that needs fixing.	16 years ago
Victor Julien	493715c0d2	Implement alert sid storage in the flow so we can check previous alerts in the flow.	16 years ago
Victor Julien	9fd46e9425	Support for sigs with both pkt and applayer detect ... Sets a flowbit with the sig id if the packet matches match. Checks on that if the app layer matches match. Currently misuses the flowbits api for this in a way that needs fixing.	16 years ago
Victor Julien	4f843ff8e9	Improve matching of packet and app layer sigs.	16 years ago
Pablo Rincon	992aaa3d79	Small fix on SigMatchSignaturesAppLayer() and SigMatchSignatures()	16 years ago
Breno Silva	69eb869cc9	Threshold Rule	16 years ago
Victor Julien	ecf86f9c23	Rename to Suricata.	16 years ago
Gurvinder Singh	a0f184866c	http_cookie keywork support	16 years ago
Pablo Rincon	a67bd2457b	Loading rules from config support	16 years ago
Pablo Rincon	c816af822e	Adding support to load rule files from config	16 years ago
Pablo Rincon	1ad6d75dfe	Added rpc keyword support at packet level	16 years ago
Pablo Rincon	a8d7b71490	First version of flowints	16 years ago
Gerardo Iglesias	991d421394	Changed printf's to logging API functions	16 years ago
Victor Julien	2cfa284999	Fix app layer detect to actually work.	16 years ago
Victor Julien	a1d33e2d0b	Compilation fixes after merge.	16 years ago
Victor Julien	f1f7df0766	First iteration of doing app layer detection.	16 years ago
Anoop Saldanha	7a10ddc07b	Fixes for the fast-pattern tests and a couple of other minor changes	16 years ago
Anoop Saldanha	6ca5dbc9e9	Support fast_pattern modifier keyword for content	16 years ago
Victor Julien	07bcc8cc9a	Fix signatures with ports and/or addresses but without sigmatches.	16 years ago
Anoop Saldanha	1c7ac13c25	Support for negated content	16 years ago
Victor Julien	241db64dd7	Fix a few memory issues.	16 years ago
Victor Julien	981ca859cb	Fixes for distance and within content modifiers.	16 years ago
William Metcalf	884b1034b4	failed unittest for within distance	16 years ago
Anoop Saldanha	dc44700ce5	Support vars lookup from conf file. Current patch support address and port group vars lookup	16 years ago
Victor Julien	951b4d5cf4	Fix within in some corner cases and add some more tests.	16 years ago
Victor Julien	4f2164677a	- Fix pattern matchers b2g and b3g not being able to deal with a single pattern of the max pattern length (32 bytes by default). ... - Fix the setting of the correct pattern matcher when it was set in the detection ctx. - Add tests for the fixes.	16 years ago
Victor Julien	d6be6ceb19	Fixup artifact from automatic renames: rename DetectAddresssHead to DetectAddressHead.	16 years ago
Anoop Saldanha	78db80ea15	Unittests and style fix for detect-engine-siggroup.[ch]	16 years ago
Gurvinder Singh	cacbf31aad	support for ttl keyword	16 years ago
Victor Julien	de8caa7964	Rename DetectAddressGroup* to DetectAddress*	16 years ago
Victor Julien	13dca5e8ce	Cleanup of address functions.	16 years ago
Victor Julien	3c7a038477	Further memory cleanups. Split out init only vars out of the sig group head.	16 years ago
Victor Julien	32e51e5e5a	Replace sgh refcnt by a flag.	16 years ago
Victor Julien	2d0e9658f8	Speed up per sgh content maxlen calc. Remove mpm ptrs from mpm ctx. Add unittests testing the detection engine internals.	16 years ago
Victor Julien	e4c98c562c	Merge DetectAddressData and DetectAddressGroup	16 years ago
Victor Julien	15ab5d7003	More engine init memleaks fixed. HashListTable remove function fixed.	16 years ago
Victor Julien	7a7bb7a390	Get rid of global mpm_ctx.	16 years ago
Victor Julien	fbe87a3ad5	Bunch of mostly unittest related memleak fixes.	16 years ago
Victor Julien	227cc082a1	Fix small memleak at engine init.	16 years ago
Brian Rectanus	ed30067bd7	Ack/Seq Keywords	16 years ago
Brian Rectanus	ec6c5258b6	Sameip Keyword	16 years ago
Victor Julien	f76a740fe2	Small layout fix.	16 years ago
Victor Julien	b470e7b40f	Fixup merge artifact.	16 years ago
Breno Silva	15a8f34d36	Gid Keyword ... Signed-off-by: Brian Rectanus <brectanu@gmail.com>	16 years ago
Breno Silva	6100a7f610	FragBits Keyword ... Signed-off-by: Brian Rectanus <brectanu@gmail.com>	16 years ago
Victor Julien	d4733e3a76	Move pcre test out of detect.c	16 years ago
William Metcalf	86380b9d45	split out pcre parsing fixed some errors	16 years ago
Victor Julien	4dbcf5fbac	Add support for moving detection tests outside of detect.c and move the 'id' tests to it's own file.	16 years ago
Pablo Rincon	1a983fd316	Adding id keyword and unittests	16 years ago
Victor Julien	085b7a3c0e	Move unittests away from detect.c	16 years ago
Breno Silva	7dc985aa4e	Signature Flags Keyword ... Signed-off-by: Brian Rectanus <brectanu@gmail.com>	16 years ago
Anoop Saldanha	0815ed7c9e	Some refactoring of the code, error handling done	16 years ago
Victor Julien	f58f437997	re-add unittests that were removed to prevent a git merge mess.	16 years ago
Brian Rectanus	e28647032d	Add ip_proto support.	16 years ago
Victor Julien	f70c026340	Prepare for merging ipproto patch.	16 years ago
Anoop Saldanha	fbc4d11ed4	Some code refactoring	16 years ago
Gurvinder Singh	e7952b1331	some changes in threading constants	16 years ago
Gurvinder Singh	40b8afdd56	support for thread exit constants	16 years ago
Gurvinder Singh	47eb168713	added a small comment	16 years ago
Gurvinder Singh	7b56b4314b	unittest packet payload inspection	16 years ago
Gurvinder Singh	70b53a0293	fixed the ispayload inspecting func	16 years ago
Gurvinder Singh	78697ce502	avoid pm invocation	16 years ago
Gurvinder Singh	a991ab0a19	added sigmatch payload flag	16 years ago
Gurvinder Singh	94674c58f3	unit tests for no packet & payload inspection	16 years ago
Gurvinder Singh	bbb385422d	function to set packet flags	16 years ago
Gurvinder Singh	cc0b4f7181	initial version to support detection byepass	16 years ago
Victor Julien	bcc5bbef93	Yet more logging api usage changes.	16 years ago
Victor Julien	91bc83e5c6	More logging API usage changes.	16 years ago
Anoop Saldanha	f658ffbc9c	Order the signatures based on certain rule parameters like actions, flowbits, flowvar, pktvar, priority etc	16 years ago
Victor Julien	4cc24fe463	Improve the handling of addresses and ports. Properly detect !any, other full negation. Fix [80:!80] syntax errors being undetected.	16 years ago
William Metcalf	3cf1be8710	invalid negation unittests added	16 years ago
Breno Silva	27c61ac148	IpOpts Rule Keyword ... Signed-off-by: Brian Rectanus <brectanu@gmail.com>	16 years ago
Victor Julien	97a2f4e747	Improve error checking in detect, add comments.	16 years ago
Victor Julien	8a68520f55	Fix clang warnings.	16 years ago
William Metcalf	ace371665d	changed sigs for http logging to use established keyword	16 years ago
Victor Julien	0d0ffb9963	Reorganize header inclusions.	16 years ago
Victor Julien	1727d191a4	Add pktvar and flowvar tests to ip only unittest. Make output cleaner.	16 years ago
Pablo Rincon	3458c07f46	Changed SignatureIsIPOnly and added some unittests	16 years ago
Pablo Rincon	bdf119ade3	Adding window and isdataat keyword and some unittests	16 years ago
Brian Rectanus	ba4c2e599d	Add byte test to detection engine.	16 years ago
Brian Rectanus	02a8b583c9	Added byte_test and byte_jump support.	16 years ago
Victor Julien	733c3bcb8c	Fix "ip" rules not ending up in the tcp and udp sig group heads correctly.	16 years ago
Gurvinder Singh	ac53ca5b27	Stream Size rule option	16 years ago
Victor Julien	a39108843e	Small tm module API rename to reflect that Init/Deinit/ExitPrintStats are per thread calls.	16 years ago
Anoop Saldanha	22c0ec2bc5	Added support for the csum-<protocol> rules keyword to the detection engine. Keywords added are ipv4-csum, tcpv4-csum, tcpv6-csum, udpv4-csum, udpv6-csum, icmpv4-csum and icmpv6-csum	16 years ago
Victor Julien	6eaff4be12	Fixes for issues found by static code analyzer.	16 years ago
Victor Julien	1f782bb912	Fix pointer issue in sig loading.	16 years ago
Victor Julien	b26b5aa462	More cleanups.	16 years ago
Victor Julien	85abc3ef62	Complete removal of global de_ctx. UtRuntests now returns the number of failed tests or 0 on none. Program exits with code 1 on failed tests, code 0 otherwise. Removal of broken http uri test.	16 years ago
Victor Julien	1132ab635a	Rename all pmt->det_ctx.	16 years ago
Victor Julien	b9972a9d2c	Cleanups	16 years ago
Anoop Saldanha	244f5d547a	new registration functions for the stats api, with local thread storage for counter ids	16 years ago
Victor Julien	5501212e62	Fix sizeof printf related compiler warnings.	16 years ago
Brian Rectanus	fa5939ca91	64 bit cleanup part2	16 years ago