suricata

Commit Graph

Author	SHA1	Message	Date
Anoop Saldanha	6ca5dbc9e9	Support fast_pattern modifier keyword for content	17 years ago
Victor Julien	07bcc8cc9a	Fix signatures with ports and/or addresses but without sigmatches.	17 years ago
Victor Julien	50b2e381e0	Set the DETECT_CONTENT_WITHIN_NEXT and DETECT_CONTENT_DISTANCE_NEXT flags on content chunks if appropriate.	17 years ago
Victor Julien	a004724aea	Add some debugging code	17 years ago
Victor Julien	dd232fcd6e	Fix debug compilation	17 years ago
Anoop Saldanha	1c7ac13c25	Support for negated content	17 years ago
Victor Julien	6346d1ddcf	Add function name printing to the default output while we're still in development.	17 years ago
Victor Julien	0aaf603317	Fix another case where distance/within checks didn't fully work as expected.	17 years ago
Pablo Rincon	ce3abca399	Adding some unittests (one of them dodoesn't work but should)	17 years ago
Pablo Rincon	84411f73c3	Commeting out a unittest.	17 years ago
Pablo Rincon	9a3c21fbf3	Updating real unittests. Small fix on TestWithinDistanceOffsetDepth to skip to the next DETECT_CONTENT SigMatch. Adding some checks on within/distance setups.	17 years ago
Victor Julien	241db64dd7	Fix a few memory issues.	17 years ago
Pablo Rincon	7e4377224a	Small fix at detect-parse.c, need to continue with MatchTest05	17 years ago
Pablo Rincon	f233f9fa31	Adding detect_content chunks handling for max_pattern_length and unittests. Updating modifiers to use it.	17 years ago
Victor Julien	981ca859cb	Fixes for distance and within content modifiers.	17 years ago
William Metcalf	884b1034b4	failed unittest for within distance	17 years ago
Victor Julien	171edda02a	Fix compilation of address and port error messages in debug mode.	17 years ago
Anoop Saldanha	dc44700ce5	Support vars lookup from conf file. Current patch support address and port group vars lookup	17 years ago
Victor Julien	951b4d5cf4	Fix within in some corner cases and add some more tests.	17 years ago
Anoop Saldanha	204aca4431	Support host os flavour retrieval functions with raw network addresses	17 years ago
Anoop Saldanha	96614c60f2	change the netmask to uint8_t for the ip handling part of the radix tree and also use 255 instead of -1 to indicate the absence of a netblock	17 years ago
Anoop Saldanha	3f91af89a2	Added comments to the the Host OS API test	17 years ago
Anoop Saldanha	22771d5f52	Updated doxygen comment for host os function	17 years ago
Anoop Saldanha	7dbc117b37	Host OS Table API. Modifications also make to the radix tree to handle netblocks	17 years ago
Victor Julien	4f2164677a	- Fix pattern matchers b2g and b3g not being able to deal with a single pattern of the max pattern length (32 bytes by default). - Fix the setting of the correct pattern matcher when it was set in the detection ctx. - Add tests for the fixes.	17 years ago
Victor Julien	f2a388ac8d	Cleanup comments.	17 years ago
Victor Julien	34d44266fd	Create reputation.h	17 years ago
William Metcalf	258cac889a	silence pfring compiler warning	17 years ago
Victor Julien	d6be6ceb19	Fixup artifact from automatic renames: rename DetectAddresssHead to DetectAddressHead.	17 years ago
Victor Julien	e5b990a8ab	Fixup siggroup merge artifacts.	17 years ago
Anoop Saldanha	78db80ea15	Unittests and style fix for detect-engine-siggroup.[ch]	17 years ago
Victor Julien	83d1e283bb	Improve message on test expected to fail at this point.	17 years ago
Pablo Rincon	0df58406ee	Adding Unittests, doxygen comments, coding style, logging support	17 years ago
Victor Julien	cc442f1772	Fixup flow bits sig tests to work with the changes to the pattern matchers.	17 years ago
Breno Silva	6d1eb3e728	FlowBits Unit Tests	17 years ago
Breno Silva	2dee4cec13	FlowBits Unit Tests	17 years ago
Victor Julien	c5dd31868d	Small detect engine proto cleanups.	17 years ago
Gurvinder Singh	34e526d853	TTL macros suppport	17 years ago
Gurvinder Singh	90fea03af5	added comments and some minor changes	17 years ago
Gurvinder Singh	cacbf31aad	support for ttl keyword	17 years ago
Victor Julien	deb511f51a	Fix a compiler warning on Ubuntu 9.10 gcc 4.4.1 in the pattern matchers where the size of the thread ctx can be optimized to 0.	17 years ago
Victor Julien	8b8e2fef2d	Fix msg parsing.	17 years ago
William Metcalf	e458b2a26e	detct-msg changes and unittests	17 years ago
William Metcalf	f217370ac7	fixed for invalid netmask being set to 0	17 years ago
Victor Julien	de8caa7964	Rename DetectAddressGroup* to DetectAddress*	17 years ago
Victor Julien	13dca5e8ce	Cleanup of address functions.	17 years ago
Victor Julien	3c7a038477	Further memory cleanups. Split out init only vars out of the sig group head.	17 years ago
Victor Julien	32e51e5e5a	Replace sgh refcnt by a flag.	17 years ago
Victor Julien	91d14964b6	Fixup formatting on the smb code.	17 years ago
William Metcalf	5fc3005103	added check for full al_parser_table	17 years ago
root	f3e3d3873f	fix smb and dcerpc unit tests	17 years ago
Kirby Kuehl	ecaa701bdf	smb and dcerpc work	17 years ago
Victor Julien	bf72331849	Fix compilation warning in conf test.	17 years ago
Jason Ish	ec9fa7b0a7	Files missed in last commit. Update Conf API to allow direct access to nodes. A configuration node is now a tailq head and a tailq entry. This allows us to build n-ary type trees to build something DOM like. Properly process lists so a list of rule files (for example) can be loaded.	17 years ago
Jason Ish	d39a291427	Refactor yaml loader so we can load strings or files.	17 years ago
William Metcalf	4175206417	unittest regex changes and fixes	17 years ago
Victor Julien	2d0e9658f8	Speed up per sgh content maxlen calc. Remove mpm ptrs from mpm ctx. Add unittests testing the detection engine internals.	17 years ago
Victor Julien	e4c98c562c	Merge DetectAddressData and DetectAddressGroup	17 years ago
Victor Julien	15ab5d7003	More engine init memleaks fixed. HashListTable remove function fixed.	17 years ago
Victor Julien	7a7bb7a390	Get rid of global mpm_ctx.	17 years ago
Victor Julien	fbe87a3ad5	Bunch of mostly unittest related memleak fixes.	17 years ago
Victor Julien	227cc082a1	Fix small memleak at engine init.	17 years ago
Gurvinder Singh	02fb39b913	detect-engine-proto unit tests and comments	17 years ago
Gurvinder Singh	f2213b066f	fast track stream handling and its unitests	17 years ago
Brian Rectanus	b796541e57	Ack/Seq Keywords part 2	17 years ago
Brian Rectanus	ed30067bd7	Ack/Seq Keywords	17 years ago
Victor Julien	56e45e0c16	Fix warning free compilation of defrag. Fix a missing variable initialization that cause a segv in the unittests.	17 years ago
Jason Ish	e0b9e85230	Break out checksum fixup code to make the license separation more clear.	17 years ago
Victor Julien	97c991f75b	Remove unused var and fix compilation with DEBUG enabled.	17 years ago
Jamie	0dc471db9c	looking inside ICMP packets	17 years ago
Brian Rectanus	ec6c5258b6	Sameip Keyword	17 years ago
Breno Silva	f9b422bba7	FlagBits fix Signed-off-by: Brian Rectanus <brectanu@gmail.com>	17 years ago
Victor Julien	4fb4dd59e4	Detect errors in the spin locks which somehow seems to fix some deadlocking withing valgrind.	17 years ago
Victor Julien	32830ff43d	Small layout fix.	17 years ago
Pablo Rincon	06c382a44d	Addapting to SCLogDebug	17 years ago
Pablo Rincon	292a7e47ef	ICMPv6 Decoder and unittests	17 years ago
William Metcalf	7fb28ce5b6	fixes to mimic snort escape behavior in msg	17 years ago
Breno Silva	a48ddc46b7	Flags janitor	17 years ago
Breno Silva	8f8de0e56f	Unit test 60c fix	17 years ago
Anoop Saldanha	bfc8200768	Fix for the broken test from logging module	17 years ago
William Metcalf	24b27136cc	various unittest fixes for detect-engine-sigorder	17 years ago
Jason Ish	097a77e9fd	Bug 6 Add a new command line option, --list-unittests to list all registered unit tests then exit. If -U is supplied, the regex will be respected.	17 years ago
Victor Julien	f76a740fe2	Small layout fix.	17 years ago
Victor Julien	b470e7b40f	Fixup merge artifact.	17 years ago
Breno Silva	15a8f34d36	Gid Keyword Signed-off-by: Brian Rectanus <brectanu@gmail.com>	17 years ago
Breno Silva	6100a7f610	FragBits Keyword Signed-off-by: Brian Rectanus <brectanu@gmail.com>	17 years ago
Anoop Saldanha	6858192660	Added a NULL check inside ConfGet()	17 years ago
Anoop Saldanha	a767a28c70	fix for the test bug in the logging module	17 years ago
William Metcalf	0d13505f0e	change debug code around to use global log dir	17 years ago
Victor Julien	43a50c538b	Change default log settings to be more development friendly. Breaks one test.	17 years ago
Victor Julien	d4733e3a76	Move pcre test out of detect.c	17 years ago
William Metcalf	86380b9d45	split out pcre parsing fixed some errors	17 years ago
Victor Julien	4dbcf5fbac	Add support for moving detection tests outside of detect.c and move the 'id' tests to it's own file.	17 years ago
Pablo Rincon	1a983fd316	Adding id keyword and unittests	17 years ago
Victor Julien	085b7a3c0e	Move unittests away from detect.c	17 years ago
Breno Silva	97a8778aa4	Signature Flags Keyword Signed-off-by: Brian Rectanus <brectanu@gmail.com>	17 years ago
Breno Silva	7dc985aa4e	Signature Flags Keyword Signed-off-by: Brian Rectanus <brectanu@gmail.com>	17 years ago
Victor Julien	4e848796d8	Use correct free function in DetectPortParseInsertString.	17 years ago
Anoop Saldanha	0815ed7c9e	Some refactoring of the code, error handling done	17 years ago
Brian Rectanus	e2fc2545f2	ip_proto cleanup and fix mem leak.	17 years ago
Victor Julien	8c747380ae	Fixup ip_proto keyword.	17 years ago
Victor Julien	f58f437997	re-add unittests that were removed to prevent a git merge mess.	17 years ago
Brian Rectanus	e28647032d	Add ip_proto support.	17 years ago
Victor Julien	f70c026340	Prepare for merging ipproto patch.	17 years ago
Anoop Saldanha	fbc4d11ed4	Some code refactoring	17 years ago
Gurvinder Singh	4edcc530ec	fixed unified alert2 ecode and removed printfs	17 years ago
Gurvinder Singh	e7952b1331	some changes in threading constants	17 years ago
Gurvinder Singh	ec75946e21	one more change	17 years ago
Gurvinder Singh	7ff38a7081	fixed thread issue	17 years ago
Gurvinder Singh	40b8afdd56	support for thread exit constants	17 years ago
Gurvinder Singh	48c94bbf03	initial thread code support	17 years ago
Gurvinder Singh	47eb168713	added a small comment	17 years ago
Gurvinder Singh	7b56b4314b	unittest packet payload inspection	17 years ago
Gurvinder Singh	70b53a0293	fixed the ispayload inspecting func	17 years ago
Gurvinder Singh	78697ce502	avoid pm invocation	17 years ago
Gurvinder Singh	a991ab0a19	added sigmatch payload flag	17 years ago
Gurvinder Singh	88fbfb3e65	fix an issue	17 years ago
Gurvinder Singh	892ace6b37	stream flag function made public	17 years ago
Gurvinder Singh	7895748606	add unit test for no stream reassembly	17 years ago
Gurvinder Singh	71da019734	some minor changes	17 years ago
Gurvinder Singh	94674c58f3	unit tests for no packet & payload inspection	17 years ago
Gurvinder Singh	bbb385422d	function to set packet flags	17 years ago
Gurvinder Singh	cc0b4f7181	initial version to support detection byepass	17 years ago
Jamie	a914c4e2bf	check that the encapsulated packet is correctly parsed	17 years ago
Victor Julien	804da19a36	Fix flowbits match being unable to deal with a packet without a flow.	17 years ago
William Metcalf	67e6cf21ae	verify valid port range	17 years ago
Victor Julien	5ffb7a7bd7	Add a few more tests for portrange validation.	17 years ago
Victor Julien	927685928c	Fix segv in unified2 unittests.	17 years ago
Victor Julien	fce06d2800	Fix unified2 tests relying on each other.	17 years ago
Breno Silva	c43319c337	Regular expression for UnitTests Signed-off-by: Brian Rectanus <brectanu@gmail.com>	17 years ago
Anoop Saldanha	590adbb3e8	Radix Tree modifications	17 years ago
Anoop Saldanha	3c21df69d2	Radix Tree structure for the engine	17 years ago
Anoop Saldanha	bc42aebdd5	Logging module optimization changes	17 years ago
Victor Julien	ff018d4b43	Strange fix for issue where signals seemed to be ignored in some cases.	17 years ago
Victor Julien	4914d8d903	Small stream fixes.	17 years ago
Victor Julien	970db6fdd8	Fix merge artifact and add new logging init code to pfring runmodes as well.	17 years ago
Pablo Rincon Crespo	93077a0fee	Updating tests fo unified2 with LogFileCtx	17 years ago
Pablo Rincon Crespo	a84cc38bc9	Preparing multithreading support for alert modules and logfilectx	17 years ago
William Metcalf	69e57e5e23	remove invalid dir from pcre + unit test	17 years ago
Victor Julien	968d8df12b	More logging API usage. Changed logging macro's slightly so the vars inside them won't conflict with vars used by the calling function.	17 years ago
Victor Julien	bcc5bbef93	Yet more logging api usage changes.	17 years ago
Victor Julien	91bc83e5c6	More logging API usage changes.	17 years ago
Anoop Saldanha	b3a7f4c015	Update for the logging module and symbol renaming	17 years ago
Victor Julien	3a28171fbd	Another round of logging api usage updates.	17 years ago
Victor Julien	f4acd5a27e	First batch of fixes for new debug and logging API usage.	17 years ago
Anoop Saldanha	157d5e8113	Implementation of the logging module	17 years ago
Anoop Saldanha	f658ffbc9c	Order the signatures based on certain rule parameters like actions, flowbits, flowvar, pktvar, priority etc	17 years ago
Victor Julien	4cc24fe463	Improve the handling of addresses and ports. Properly detect !any, other full negation. Fix [80:!80] syntax errors being undetected.	17 years ago
Victor Julien	ea1fe0cf61	Set signal handlers after the unittests so we can kill the test runs with ctrl-c.	17 years ago
William Metcalf	3cf1be8710	invalid negation unittests added	17 years ago
Victor Julien	be3bbe0a85	Fix segv in reassembly. Fix sequence gap handling tests.	17 years ago
Victor Julien	db9e693054	Small fixes to pfring patch.	17 years ago
William Metcalf	04b0f177fc	native PF_RING support with fixes	17 years ago
Brian Rectanus	7f1b0efab3	IpOpts Rule Keyword Signed-off-by: Brian Rectanus <brectanu@gmail.com>	17 years ago
Breno Silva	27c61ac148	IpOpts Rule Keyword Signed-off-by: Brian Rectanus <brectanu@gmail.com>	17 years ago
Victor Julien	b3cb29b758	Fix engine lockup due to mutex locking error.	17 years ago
William Metcalf	cf473bf0ce	added support for escapes inside of msg keyword	17 years ago
Victor Julien	97a2f4e747	Improve error checking in detect, add comments.	17 years ago
Victor Julien	ae3d4b6d7f	Silence clang warn.	17 years ago
Victor Julien	8a68520f55	Fix clang warnings.	17 years ago
William Metcalf	ace371665d	changed sigs for http logging to use established keyword	17 years ago
Victor Julien	4170ec8955	Make locking of the flow optional in the app layer subsys so we can also pass locked flows to it.	17 years ago
Victor Julien	5ecd187b6f	Tie app layer parsing to the stream engine.	17 years ago
Victor Julien	f0d556b9e3	Suppress nfq debug output.	17 years ago
Gurvinder Singh	c06b2849fb	fixed unit tests and add the comments	17 years ago
Gurvinder Singh	e88249ee24	small performance enhancement	17 years ago
Gurvinder Singh	37b4682407	target based paws handling	17 years ago
Gurvinder Singh	573027a1ec	PAWS support and one unittest	17 years ago
Gurvinder Singh	45cb8f5f0c	changed flag name	17 years ago
Gurvinder Singh	3350245f75	timestamp support	17 years ago
Breno Silva	7aaad91f39	Comments fix	17 years ago
Brian Rectanus	3e9223c22c	Cleanup bytetest and bytejump.	17 years ago
Victor Julien	a4fe971897	Fix datalink retrieval for pcap file mode and nfq mode for use in unified2.	17 years ago
Breno Silva	c8308222c1	Unified2rev2 Signed-off-by: Breno Silva <breno.silva@gmail.com>	17 years ago
Victor Julien	bff8ae299f	Fix pcap file mode	17 years ago
Victor Julien	597d0e9a20	Fix detection of failed thread startup. Cleanup startup output a bit.	17 years ago
Victor Julien	ab09e80205	Remove unnecessary header.	17 years ago
Victor Julien	0d0ffb9963	Reorganize header inclusions.	17 years ago
Victor Julien	1727d191a4	Add pktvar and flowvar tests to ip only unittest. Make output cleaner.	17 years ago
Pablo Rincon	3458c07f46	Changed SignatureIsIPOnly and added some unittests	17 years ago
Jason Ish	f508d1e0fd	Add getters for integer and boolean values.	17 years ago
root	2c796339f7	Small fixes	17 years ago
Pablo Rincon	bdf119ade3	Adding window and isdataat keyword and some unittests	17 years ago
Victor Julien	0941c152fd	Minor layout fixes.	17 years ago
Breno Silva	f6b36b7241	Unified2rev2 Signed-off-by: Breno Silva <breno.silva@gmail.com>	17 years ago
Breno Silva	ee8fef2e68	Unified2rev2 Signed-off-by: Breno Silva <breno.silva@gmail.com>	17 years ago
Breno Silva	8c797927cd	Unified2rev2 Signed-off-by: Breno Silva <breno.silva@gmail.com>	17 years ago
Breno Silva	145d89ba01	Unified2rev1 Signed-off-by: Breno Silva <breno.silva@gmail.com>	17 years ago
Breno Silva	a5e386ce52	Unified2 Signed-off-by: Breno Silva <breno.silva@gmail.com>	17 years ago
William Metcalf	c313444991	comment out printf for unittest format	17 years ago
Jason Ish	beef3c6c24	Fix access to ttl.	17 years ago
Victor Julien	daf3078279	Fix compilation on 32bit	17 years ago
Brian Rectanus	ed3fee2bac	Fixed detect-byte src to use new util-byte return codes.	17 years ago
Brian Rectanus	ba4c2e599d	Add byte test to detection engine.	17 years ago
Brian Rectanus	11d068740a	Byte utils return num bytes extracted on success instead of zero.	17 years ago
Brian Rectanus	02a8b583c9	Added byte_test and byte_jump support.	17 years ago
Brian Rectanus	af06e6a288	Added byte extraction util.	17 years ago
Victor Julien	cfb605aa8a	Put the precooked runmodes in a separate file.	17 years ago
William Metcalf	e95e5cb36a	missing memsets in pppoe unit tests	17 years ago
Victor Julien	301522f316	Add TCP_GET_WSCALE macro for easy access to wscale. Update StreamTcp to use it. Default to wscale 14 (max) in case of midstream as there seems to be no reliable way to predict wscale if we missed it.	17 years ago

... 2 3 4 5 6 ...

646 Commits (ecc50b8b2f2fc0782d0431adc45eb044d96ae685)