aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
688 Commits
8 Branches
174 Tags
255 MiB
main
main-8.0.x
main-7.0.x
master-6.0.x
master-5.0.x
master-4.1.x
master-4.0.x
master-3.2.x
suricata-8.0.7
suricata-8.0.6
suricata-7.0.17
suricata-8.0.5
suricata-7.0.16
suricata-8.0.4
suricata-7.0.15
suricata-8.0.3
suricata-7.0.14
suricata-8.0.2
suricata-7.0.13
suricata-8.0.1
suricata-7.0.12
suricata-8.0.0
suricata-7.0.11
suricata-8.0.0-rc1
suricata-8.0.0-beta1
suricata-7.0.10
suricata-7.0.9
suricata-7.0.8
suricata-7.0.7
suricata-7.0.6
suricata-6.0.20
suricata-7.0.5
suricata-6.0.19
suricata-6.0.18
suricata-7.0.4
suricata-6.0.17
suricata-7.0.3
suricata-6.0.16
suricata-7.0.2
suricata-6.0.15
suricata-7.0.1
suricata-6.0.14
suricata-7.0.0
suricata-7.0.0-rc2
suricata-6.0.13
suricata-6.0.12
suricata-6.0.11
suricata-7.0.0-rc1
suricata-6.0.10
suricata-6.0.9
suricata-7.0.0-beta1
suricata-6.0.8
suricata-6.0.7
suricata-6.0.6
suricata-5.0.10
suricata-6.0.5
suricata-5.0.9
suricata-6.0.4
suricata-5.0.8
suricata-6.0.3
suricata-5.0.7
suricata-6.0.2
suricata-5.0.6
suricata-6.0.1
suricata-5.0.5
suricata-4.1.10
suricata-4.1.9
suricata-5.0.4
suricata-6.0.0
suricata-6.0.0-rc1
suricata-6.0.0-beta1
suricata-5.0.3
suricata-4.1.8
suricata-4.1.7
suricata-5.0.2
suricata-4.1.6
suricata-5.0.1
suricata-5.0.0
suricata-5.0.0-rc1
suricata-4.1.5
suricata-5.0.0-beta1
suricata-4.1.4
suricata-4.1.3
suricata-4.0.7
suricata-4.1.2
suricata-4.1.1
suricata-4.1.0
suricata-4.0.6
suricata-4.1.0-rc2
suricata-4.1.0-rc1
suricata-4.0.5
suricata-4.1.0-beta1
suricata-4.0.4
suricata-4.0.3
suricata-4.0.2
suricata-3.2.5
suricata-4.0.1
suricata-3.2.4
suricata-4.0.0
suricata-4.0.0-rc2
suricata-3.2.3
suricata-4.0.0-rc1
suricata-4.0.0-beta1
suricata-3.2.2
suricata-3.1.4
suricata-3.2.1
suricata-3.2
suricata-3.2RC1
suricata-3.1.3
suricata-3.2beta1
suricata-3.1.2
suricata-3.1.1
suricata-3.1
suricata-3.0.2
suricata-3.1RC1
suricata-3.0.1
suricata-3.0.1RC1
suricata-3.0
suricata-2.0.11
suricata-3.0RC3
suricata-3.0RC2
suricata-3.0RC1
suricata-2.0.10
suricata-2.0.9
suricata-2.1beta4
suricata-2.0.8
suricata-2.0.7
suricata-2.1beta3
suricata-2.0.6
suricata-2.0.5
suricata-2.1beta2
suricata-2.0.4
suricata-2.1beta1
suricata-2.0.3
suricata-2.0.2
suricata-2.0.1
suricata-2.0.1rc1
suricata-2.0
suricata-2.0rc3
suricata-2.0rc2
suricata-2.0rc1
suricata-2.0beta2
suricata-1.4.7
suricata-1.4.6
suricata-1.4.5
suricata-2.0beta1
suricata-1.4.4
suricata-1.4.3
suricata-1.4.2
suricata-1.4.1
suricata-1.3.6
suricata-1.4
suricata-1.3.5
suricata-1.4rc1
suricata-1.3.4
suricata-1.4beta3
suricata-1.3.3
suricata-1.4beta2
suricata-1.3.2
suricata-1.4beta1
suricata-1.3.1
suricata-1.3
suricata-1.3rc1
suricata-1.3beta2
suricata-1.3beta1
suricata-1.2.1
suricata-1.2
suricata-1.2rc1
suricata-1.2beta1
suricata-1.1.1
suricata-0.8.2
suricata-1.0.0
suricata-1.0.1
suricata-1.0.2
suricata-1.0.3
suricata-1.0.4
suricata-1.0.5
suricata-1.1
suricata-1.1beta1
suricata-1.1beta2
suricata-1.1beta3
suricata-1.1rc1
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'ecc50b8b2f'
${ noResults }
Commit Graph

646 Commits (ecc50b8b2f2fc0782d0431adc45eb044d96ae685)

Author SHA1 Message Date
Pablo Rincon c6c7742464 Added support at Flowints for keywords isset and notset 17 years ago
Pablo Rincon a8d7b71490 First version of flowints 17 years ago
Gurvinder Singh 1b39e602d0 fixed port info 17 years ago
Gerardo Iglesias 991d421394 Changed printf's to logging API functions 17 years ago
Pablo Rincon e26833be3f Changing mutex/spinlocks/conditions naming types 17 years ago
Victor Julien 406ee2ce70 Use new threading calls in htp code. 17 years ago
Pablo Rincon 769022f4be Adding support for Mac OS X, FreeBSD, centrailizing mutex/spins/conditions in a macro API, and some unittests 17 years ago
Victor Julien 4cae27522d Fix http module warnings. 17 years ago
Gurvinder Singh 2d6cf71d37 added htp unit test 17 years ago
Gurvinder Singh 07f7ba55b8 initial support for HTP module init 17 years ago
Victor Julien 6e9b582be6 Fixup rebase typo. 17 years ago
Gurvinder Singh c1e485cc44 app layer error handling 17 years ago
root 43fb771268 smb2 work 17 years ago
root 0f5f82efee smb2 work 17 years ago
root 74667e697a better smb parsing 17 years ago
Victor Julien 2213ff933f Compile fix. 17 years ago
Brian Rectanus 44083b6505 Fixed warning in detect-content. 17 years ago
Gurvinder Singh 91407e0938 fixed DetectByteTest bug 17 years ago
Pablo Rincon 6206ffb530 Adding bidirectional operator support and unittests 17 years ago
Breno Silva c552ccbd93 PCRE O Modifier 17 years ago
Victor Julien 574bcea09d initial version of better error checking/handling in the app layer code 17 years ago
Victor Julien 09dd7889a1 TLS: small updates to the tls parser 
- small updates to the TLS parser after merging Gurvinders TLS work with my work.
 17 years ago
Victor Julien 2cfa284999 Fix app layer detect to actually work. 17 years ago
Victor Julien a1d33e2d0b Compilation fixes after merge. 17 years ago
Victor Julien 7cda445c49 Add unitttest. 17 years ago
Victor Julien f1f7df0766 First iteration of doing app layer detection. 17 years ago
Victor Julien f31d8e0444 TLS no inspect: fixes and cleanups 
- use byte extraction functions for getting the msg length
 - cleanup the parsing routines for multiple msgs
 - add unittests for multimsg payloads
 17 years ago
Gurvinder Singh a16e7b7455 tls no reassembly support 17 years ago
Victor Julien 54b9663cd1 TCP streams: support falling back to 3WHS when we were led to believe we were in 4WHS mode. Add unittests. 17 years ago
Victor Julien 2af6ed0c8c Support newly reported 4WHS TCP setup. 17 years ago
William Metcalf af13665684 failing unit test where fast_pattern rule and non-fast_pattern rule inspect same payload 17 years ago
Anoop Saldanha 45acb64a61 Bug fix for fast_pattern - bug #8 17 years ago
Victor Julien 5c3bbb8d61 Time handling: improve time handling in unittests 
- make sure before each unittest is run the time is reset
- add functions to set the time to current time and increment the time
- convert alert-unified* Rotate tests to use them
- convert time based counters to use them
- use GetTime instead of gettimeofday for creating the unified* filenames
 17 years ago
Pablo Rincon a64af4adca Forgot to add this file 17 years ago
Pablo Rincon 15855e11f3 Fixing alert unified log file rotation. Adding unittests 17 years ago
Victor Julien 746d12071e Fix merge artifacts. 17 years ago
William Metcalf 0db1d01b0c port space negation notification 17 years ago
Gurvinder Singh 3f23f52c52 Fixed FlowTest01 and StreamReassemblyTest30 17 years ago
Gurvinder Singh d2765511ce async stream handling support 17 years ago
William Metcalf 88497ec539 detect-dsize regex doxygen logging subsys changes 17 years ago
Anoop Saldanha bb8a84d967 todo comment update for address and port parsing 17 years ago
Victor Julien 621c8dd921 Make sure we don't sleep to test time lapses, we can modify the engine's time internally for that. 17 years ago
Anoop Saldanha 30a7ea2141 adapted counters to use util-time.[ch] 17 years ago
Anoop Saldanha c8b423578a Updates for counters time based patch 17 years ago
Anoop Saldanha 8beef4a9fc stats upgrade. Added interval counters to the decoder module 17 years ago
Anoop Saldanha ceb7e495ae refactoring perf stats code 17 years ago
Victor Julien fdf8943dfb Remove a few commented out code lines. 17 years ago
Anoop Saldanha 8c9df4cd6b modifications to PatternMatchPreprarePopulateMpm to fasten fast_pattern processing 17 years ago
Anoop Saldanha bb5bd91045 Support to get the last sigmatch of a particular type. To be used for content and its modifiers 17 years ago
Anoop Saldanha 7a10ddc07b Fixes for the fast-pattern tests and a couple of other minor changes 17 years ago
Anoop Saldanha 6ca5dbc9e9 Support fast_pattern modifier keyword for content 17 years ago
Victor Julien 07bcc8cc9a Fix signatures with ports and/or addresses but without sigmatches. 17 years ago
Victor Julien 50b2e381e0 Set the DETECT_CONTENT_WITHIN_NEXT and DETECT_CONTENT_DISTANCE_NEXT flags on content chunks if appropriate. 17 years ago
Victor Julien a004724aea Add some debugging code 17 years ago
Victor Julien dd232fcd6e Fix debug compilation 17 years ago
Anoop Saldanha 1c7ac13c25 Support for negated content 17 years ago
Victor Julien 6346d1ddcf Add function name printing to the default output while we're still in development. 17 years ago
Victor Julien 0aaf603317 Fix another case where distance/within checks didn't fully work as expected. 17 years ago
Pablo Rincon ce3abca399 Adding some unittests (one of them dodoesn't work but should) 17 years ago
Pablo Rincon 84411f73c3 Commeting out a unittest. 17 years ago
Pablo Rincon 9a3c21fbf3 Updating real unittests. Small fix on TestWithinDistanceOffsetDepth to skip to the next DETECT_CONTENT SigMatch. Adding some checks on within/distance setups. 17 years ago
Victor Julien 241db64dd7 Fix a few memory issues. 17 years ago
Pablo Rincon 7e4377224a Small fix at detect-parse.c, need to continue with MatchTest05 17 years ago
Pablo Rincon f233f9fa31 Adding detect_content chunks handling for max_pattern_length and unittests. Updating modifiers to use it. 17 years ago
Victor Julien 981ca859cb Fixes for distance and within content modifiers. 17 years ago
William Metcalf 884b1034b4 failed unittest for within distance 17 years ago
Victor Julien 171edda02a Fix compilation of address and port error messages in debug mode. 17 years ago
Anoop Saldanha dc44700ce5 Support vars lookup from conf file. Current patch support address and port group vars lookup 17 years ago
Victor Julien 951b4d5cf4 Fix within in some corner cases and add some more tests. 17 years ago
Anoop Saldanha 204aca4431 Support host os flavour retrieval functions with raw network addresses 17 years ago
Anoop Saldanha 96614c60f2 change the netmask to uint8_t for the ip handling part of the radix tree and also use 255 instead of -1 to indicate the absence of a netblock 17 years ago
Anoop Saldanha 3f91af89a2 Added comments to the the Host OS API test 17 years ago
Anoop Saldanha 22771d5f52 Updated doxygen comment for host os function 17 years ago
Anoop Saldanha 7dbc117b37 Host OS Table API. Modifications also make to the radix tree to handle netblocks 17 years ago
Victor Julien 4f2164677a - Fix pattern matchers b2g and b3g not being able to deal with a single pattern of the max pattern length (32 bytes by default). 
- Fix the setting of the correct pattern matcher when it was set in the detection ctx.
- Add tests for the fixes.
 17 years ago
Victor Julien f2a388ac8d Cleanup comments. 17 years ago
Victor Julien 34d44266fd Create reputation.h 17 years ago
William Metcalf 258cac889a silence pfring compiler warning 17 years ago
Victor Julien d6be6ceb19 Fixup artifact from automatic renames: rename DetectAddresssHead to DetectAddressHead. 17 years ago
Victor Julien e5b990a8ab Fixup siggroup merge artifacts. 17 years ago
Anoop Saldanha 78db80ea15 Unittests and style fix for detect-engine-siggroup.[ch] 17 years ago
Victor Julien 83d1e283bb Improve message on test expected to fail at this point. 17 years ago
Pablo Rincon 0df58406ee Adding Unittests, doxygen comments, coding style, logging support 17 years ago
Victor Julien cc442f1772 Fixup flow bits sig tests to work with the changes to the pattern matchers. 17 years ago
Breno Silva 6d1eb3e728 FlowBits Unit Tests 17 years ago
Breno Silva 2dee4cec13 FlowBits Unit Tests 17 years ago
Victor Julien c5dd31868d Small detect engine proto cleanups. 17 years ago
Gurvinder Singh 34e526d853 TTL macros suppport 17 years ago
Gurvinder Singh 90fea03af5 added comments and some minor changes 17 years ago
Gurvinder Singh cacbf31aad support for ttl keyword 17 years ago
Victor Julien deb511f51a Fix a compiler warning on Ubuntu 9.10 gcc 4.4.1 in the pattern matchers where the size of the thread ctx can be optimized to 0. 17 years ago
Victor Julien 8b8e2fef2d Fix msg parsing. 17 years ago
William Metcalf e458b2a26e detct-msg changes and unittests 17 years ago
William Metcalf f217370ac7 fixed for invalid netmask being set to 0 17 years ago
Victor Julien de8caa7964 Rename DetectAddressGroup* to DetectAddress* 17 years ago
Victor Julien 13dca5e8ce Cleanup of address functions. 17 years ago
Victor Julien 3c7a038477 Further memory cleanups. Split out init only vars out of the sig group head. 17 years ago
Victor Julien 32e51e5e5a Replace sgh refcnt by a flag. 17 years ago
Victor Julien 91d14964b6 Fixup formatting on the smb code. 17 years ago
William Metcalf 5fc3005103 added check for full al_parser_table 17 years ago
root f3e3d3873f fix smb and dcerpc unit tests 17 years ago
Kirby Kuehl ecaa701bdf smb and dcerpc work 17 years ago
Victor Julien bf72331849 Fix compilation warning in conf test. 17 years ago
Jason Ish ec9fa7b0a7 Files missed in last commit. 
Update Conf API to allow direct access to nodes.

    A configuration node is now a tailq head and a tailq entry.  This allows us to build
    n-ary type trees to build something DOM like.

    Properly process lists so a list of rule files (for example) can be loaded.
 17 years ago
Jason Ish d39a291427 Refactor yaml loader so we can load strings or files. 17 years ago
William Metcalf 4175206417 unittest regex changes and fixes 17 years ago
Victor Julien 2d0e9658f8 Speed up per sgh content maxlen calc. Remove mpm ptrs from mpm ctx. Add unittests testing the detection engine internals. 17 years ago
Victor Julien e4c98c562c Merge DetectAddressData and DetectAddressGroup 17 years ago
Victor Julien 15ab5d7003 More engine init memleaks fixed. HashListTable remove function fixed. 17 years ago
Victor Julien 7a7bb7a390 Get rid of global mpm_ctx. 17 years ago
Victor Julien fbe87a3ad5 Bunch of mostly unittest related memleak fixes. 17 years ago
Victor Julien 227cc082a1 Fix small memleak at engine init. 17 years ago
Gurvinder Singh 02fb39b913 detect-engine-proto unit tests and comments 17 years ago
Gurvinder Singh f2213b066f fast track stream handling and its unitests 17 years ago
Brian Rectanus b796541e57 Ack/Seq Keywords part 2 17 years ago
Brian Rectanus ed30067bd7 Ack/Seq Keywords 17 years ago
Victor Julien 56e45e0c16 Fix warning free compilation of defrag. Fix a missing variable initialization that cause a segv in the unittests. 17 years ago
Jason Ish e0b9e85230 Break out checksum fixup code to make the license separation more clear. 17 years ago
Victor Julien 97c991f75b Remove unused var and fix compilation with DEBUG enabled. 17 years ago
Jamie 0dc471db9c looking inside ICMP packets 17 years ago
Brian Rectanus ec6c5258b6 Sameip Keyword 17 years ago
Breno Silva f9b422bba7 FlagBits fix 
Signed-off-by: Brian Rectanus <brectanu@gmail.com>
 17 years ago
Victor Julien 4fb4dd59e4 Detect errors in the spin locks which somehow seems to fix some deadlocking withing valgrind. 17 years ago
Victor Julien 32830ff43d Small layout fix. 17 years ago
Pablo Rincon 06c382a44d Addapting to SCLogDebug 17 years ago
Pablo Rincon 292a7e47ef ICMPv6 Decoder and unittests 17 years ago
William Metcalf 7fb28ce5b6 fixes to mimic snort escape behavior in msg 17 years ago
Breno Silva a48ddc46b7 Flags janitor 17 years ago
Breno Silva 8f8de0e56f Unit test 60c fix 17 years ago
Anoop Saldanha bfc8200768 Fix for the broken test from logging module 17 years ago
William Metcalf 24b27136cc various unittest fixes for detect-engine-sigorder 17 years ago
Jason Ish 097a77e9fd Bug 6 
Add a new command line option, --list-unittests to list all registered unit tests then exit.  If -U is supplied, the regex will be respected.
 17 years ago
Victor Julien f76a740fe2 Small layout fix. 17 years ago
Victor Julien b470e7b40f Fixup merge artifact. 17 years ago
Breno Silva 15a8f34d36 Gid Keyword 
Signed-off-by: Brian Rectanus <brectanu@gmail.com>
 17 years ago
Breno Silva 6100a7f610 FragBits Keyword 
Signed-off-by: Brian Rectanus <brectanu@gmail.com>
 17 years ago
Anoop Saldanha 6858192660 Added a NULL check inside ConfGet() 17 years ago
Anoop Saldanha a767a28c70 fix for the test bug in the logging module 17 years ago
William Metcalf 0d13505f0e change debug code around to use global log dir 17 years ago
Victor Julien 43a50c538b Change default log settings to be more development friendly. Breaks one test. 17 years ago
Victor Julien d4733e3a76 Move pcre test out of detect.c 17 years ago
William Metcalf 86380b9d45 split out pcre parsing fixed some errors 17 years ago
Victor Julien 4dbcf5fbac Add support for moving detection tests outside of detect.c and move the 'id' tests to it's own file. 17 years ago
Pablo Rincon 1a983fd316 Adding id keyword and unittests 17 years ago
Victor Julien 085b7a3c0e Move unittests away from detect.c 17 years ago
Breno Silva 97a8778aa4 Signature Flags Keyword 
Signed-off-by: Brian Rectanus <brectanu@gmail.com>
 17 years ago
Breno Silva 7dc985aa4e Signature Flags Keyword 
Signed-off-by: Brian Rectanus <brectanu@gmail.com>
 17 years ago
Victor Julien 4e848796d8 Use correct free function in DetectPortParseInsertString. 17 years ago
Anoop Saldanha 0815ed7c9e Some refactoring of the code, error handling done 17 years ago
Brian Rectanus e2fc2545f2 ip_proto cleanup and fix mem leak. 17 years ago