18000 Commits (ec6536ba75c09220ea8cbbb4ec70be4f749c00a3)

 

All Branches   

Search

Author	SHA1	Message	Date
Victor Julien	91f258e2bc	doc/userguide: add missing app-layer protocols	11 months ago
Victor Julien	2623e67a80	doc/userguide: add missing rule protocols	11 months ago
Philippe Antoine	3641b4eda1	detect/nfs: move nfs_procedure to rust ... Make it able to use strings on the way Ticket: 6723	11 months ago
Philippe Antoine	9869fb776b	detect/snmp: pdu_type keyword now accepts strings ... Ticket: 6723	11 months ago
Philippe Antoine	0553dfa814	detect/krb5: move krb5_msg_type to rust ... Makes it a generic u32 on the way Unit tests are covered by SV tests Ticket: 6723	11 months ago
Adam Kiripolsky	5a4d280461	dpdk: fix assignment of pkt_mempools to ldev ... Removed loop around assignment of pkt_mempools to ldev_instance->dpdk_vars as it is not needed anymore. Ticket: 7879	11 months ago
Philippe Antoine	24503b0ead	rust: move file functions out of SuricataContext ... Ticket: 7667	11 months ago
Philippe Antoine	1f084f8cb7	rust: move HttpRangeFreeBlock out of SuricataContext ... Ticket: 7667	11 months ago
Philippe Antoine	828a6bdbf8	rust: bindgen SCLogMessage ... Ticket: 7667	11 months ago
Philippe Antoine	cc845dccdb	rust: bindgen GenericVarFree ... Ticket: 7667	11 months ago
Philippe Antoine	b00788af8b	rust: bindgen SCAppLayerParserTriggerRawStreamInspection ... Ticket: 7667	11 months ago
Philippe Antoine	c52121586a	rust: move AppLayerEvents funcs out of RustContext ... Ticket: 7667 just use it directly, with bindgen, and cfg not test	11 months ago
Philippe Antoine	2b419a5a26	src: clean includes for app-layer-events.h	11 months ago
Philippe Antoine	bf6b8510fe	rust: move DetectEngineStateFree out of RustContext ... Ticket: 7667 just use it directly, with bindgen, and cfg not test	11 months ago
Philippe Antoine	573dd2367e	rust: bindgen SCFileFlowFlagsToFlags ... Ticket: 7667	11 months ago
Philippe Antoine	6fa85d18f0	rust: reenable lint unused_doc_comment ... With just local exceptions	11 months ago
Philippe Antoine	b59086210f	rust: bindgen flow ffi API ... Ticket: 7667	11 months ago
Philippe Antoine	bbf1424371	rust: bindgen MpmAddPatternCI ... Ticket: 7667	11 months ago
Philippe Antoine	c391451f19	rust: begin to bindgen app-layer-register.h ... Ticket: 7667	11 months ago
Philippe Antoine	95483228d2	detect: list-keywords cli shows integers with bitflags ... Ticket: 7875	11 months ago
Philippe Antoine	53d9569dfb	detect: list-keywords cli shows integers with enums ... Ticket: 7875	11 months ago
Philippe Antoine	da486af881	detect: list-keywords cli shows integers ... Ticket: 7875	11 months ago
Philippe Antoine	68017d3fe1	detect: grow SigTableElmt flags to u32 ... to be later able to store information about keywords being about integers	11 months ago
Philippe Antoine	b298bce0e7	detect: list-keywords cli shows multi-buffers ... Ticket: 7571	11 months ago
Andreas Dolp	37d748d441	doc: fix typo duplicate 'of' ... Thanks to catenacyber	11 months ago
Andreas Dolp	375b5dd306	doc: fix typo /var/run/suricata in file permissions docs.	11 months ago
Andreas Dolp	cc590b54c7	doc: fix typo and missing newline in rules/ssh_keywords.	11 months ago
Andreas Dolp	228abb7da0	doc: fix doc syntax error in rate_filter example.	11 months ago
Juliana Fajardini	21b27597d6	doc/rules/internals: minor fixes ... Fix typo and add a reference about the classtype keyword effect. Related to Task #5449	11 months ago
Fupeng Zhao	e79d735374	decode/etag: ETag 802.1BR decoder ... Ticket: #3953.	11 months ago
Philippe Antoine	cb9ab951b9	detect/integers: subslice for multi-integers	11 months ago
Philippe Antoine	82f0e725a2	detect/integers: index or_absent and or_oob ... To match if array is empty, or index is out of bounds	11 months ago
Philippe Antoine	1480cf47ab	detect/integers: nb index to match a specific number of times ... For example dns.rrtype: !A,nb>3 will match if we have more than 3 dns records which are not A	11 months ago
Philippe Antoine	6f848eeaaf	detect/integers: all1 index to match only on non-empty arrays	11 months ago
Philippe Antoine	dd81cfa733	detect/uint: wait for end of progress to match on all ... As is done for absent keyword for instance	11 months ago
Philippe Antoine	5add185f22	http2/detect: http2.window can now use index ... Ticket: 7480	11 months ago
Philippe Antoine	83868778b9	http2/detect: http2.priority can now use index ... Ticket: 7480	11 months ago
Philippe Antoine	9fc407fd75	mqtt/detect: mqtt.type can now use index ... Ticket: 7480	11 months ago
Philippe Antoine	dad424d74a	doc: multi-integers section for rules ... Ticket: 7480 Describing the usage of index	11 months ago
Philippe Antoine	c0988252ba	dns/detect: rrtype can now use index ... Ticket: 7480	11 months ago
Philippe Antoine	d8c1f8e7be	rust/detect: generic detect_uint_match_at_index ... and make ldap use it Ticket: 7480 No behavior change, just code restyling	11 months ago
Philippe Antoine	7effcb7835	rust/ldap: use Vec instead of Vecdeque ... as we do not pop Ticket: 7480 May have a behavior change, but only in terms of performance	11 months ago
Philippe Antoine	f555f02ed4	rust/detect: generic detect_parse_array_uint_enum ... And make ldap use it Ticket: 7480 No behavior change, just code restyling	11 months ago
Philippe Antoine	c6d3857793	rust/detect: create generic DetectUintArrayData ... And make ldap use them Ticket: 7480 No behavior change, just code restyling	11 months ago
Philippe Antoine	e01d19889e	rust/detect: move DetectUintIndex definition to generic file ... Ticket: 7480 No behavior change, just code restyling	11 months ago
Philippe Antoine	ef6ce7d701	detect: rename LdapIndex to something generic ... to be able to use it outside of ldap Ticket: 7480 No behavior change, just code restyling	11 months ago
Philippe Antoine	2ed7a85356	rust: rustfmt detect uint	11 months ago
Fupeng Zhao	7a04a032b9	decoder/vxlan: fix VXLAN port detection per RFC 7348 ... Simplify DecodeVXLANEnabledForPort() to only check destination port to avoids false positives when identifying VXLAN traffic. Per RFC 7348 §5, VXLAN identification is based solely on the outer UDP destination port (4789), regardless of inner packet direction. The outer UDP source port is used for load balancing via inner packet hash and should not be considered for VXLAN detection. This ensures correct VXLAN identification for all encapsulated traffic patterns. Checking both source and destination ports could incorrectly classify non-VXLAN UDP traffic as VXLAN when the source port happens to be 4789, leading to false positives in VXLAN detection and potential decode errors.	11 months ago
Fupeng Zhao	4f68cb026f	decoder/vxlan: add configurable reserved bits validation for VXLAN ... Add support for two VXLAN reserved bits check modes: - strict: validate all reserved bits for standard VXLAN format - permissive: skip all reserved bits validation (allows extensions) Configuration added to suricata.yaml.in with 'strict' as default. Includes comprehensive unit tests and documentation updates. Ticket: 7753	11 months ago
Philippe Antoine	b7056cd2dc	src: remove some unused functions	11 months ago