Eric Leblond
788fa1e5a1
pfring: Fix typo in help.
14 years ago
Eric Leblond
730a86e6b8
pfring: fix warning
...
When PF_RING is disable this function is unused and thus trigger a
warning at compilation.
14 years ago
Eric Leblond
3f75b10f79
Suppress useless code.
...
This code was making a warning for some time now. This patch kills
it.
14 years ago
Eric Leblond
45d5c3ca59
runmode: introduce configuration dereferencing.
...
A devide configuration can be used by multiple threads. It is thus
necessary to wait that all threads stop using the configuration before
freeing it. This patch introduces an atomic counter and a free function
which has to be called by each thread when it will not use anymore
the structure. If the configuration is not used anymore, it is freed
by the free function.
14 years ago
Eric Leblond
3261b814db
Make SC_ATOMIC_[SUB|ADD] return result value
...
This patch modifies the SC_ATOMIC_[SUB|ADD] to have them return
the value of the result. This permit to write test based on return
of the macro.
14 years ago
Eric Leblond
d3d99ffa13
Fix coding style and use SC* function.
...
This patch fixes the coding style and uses Suricata function instead
of plain lic version.
14 years ago
Eric Leblond
f998fda4dd
pfring: factorize iface and parser initialisation.
14 years ago
Eric Leblond
cc7b80437a
pfring: should not call free
14 years ago
Eric Leblond
93cf2b1690
pfring: add single mode.
14 years ago
Eric Leblond
77869a2df8
single runmode: add support for multiple capture threads
14 years ago
Eric Leblond
c75fffe92d
Improve help message
...
Usage of command line has evolved with the introduction of long option.
This patch updates the description of the related options.
14 years ago
Eric Leblond
dc075a74a2
pcap: add --pcap option
...
This patch adds a --pcap option which can be used to select or
an interface if an argument is provided or the interfaces defined
in the configuration file.
14 years ago
Eric Leblond
b2c281920f
af-packet: should not call free
14 years ago
Eric Leblond
1aab2470db
af-packet: factorise single mode.
14 years ago
Eric Leblond
63d614162c
pcap: should not call free
14 years ago
Eric Leblond
491686c33e
pcap: factorise single mode.
14 years ago
Eric Leblond
abe99ee5f6
runmode: add factorisation function for single mode.
14 years ago
Eric Leblond
c3ba992652
pfring: restore precedence of command line options.
14 years ago
Eric Leblond
b2598f97e7
pcap: restore backward compatibility
14 years ago
Eric Leblond
21663acd3b
pcap: use good var name for live-interface
14 years ago
Eric Leblond
d3d8beb337
pcap: factorize runmode
...
This patch factorizes auto and autofp runmodes for pcap.
14 years ago
Eric Leblond
c3c20dd041
pcap: add new config style
14 years ago
Eric Leblond
78467f1846
Update configuration file to new pfring format.
14 years ago
Eric Leblond
d9d8286671
pfring: restore compatibility with v1.0 config
...
Compatibility of pfring module with previous version was broken. This
patch restores backward compatibility.
14 years ago
Eric Leblond
a64dcfeba2
pfring: use factorisation function
...
This patch convert pfring to pktacqloop and use the new factorisation
function. This also fixes commmand line parsing of pfring which is now
able to work like af-packet:
- 'suricata -c s.yaml --pfring' start suricata with all interfaces in
conf
- 'suricata -c s.yaml --pfring=eth2' start suricata on eth2
14 years ago
Eric Leblond
cbb36b5182
af-packet: remove unused function
14 years ago
Eric Leblond
75c875b1ac
af-packet: use factorisation function for Auto mode.
14 years ago
Eric Leblond
8bf0897b3c
Add factorisation function for runmode.
...
This patch adds a function which will be used to factorise the
Auto runmode between the different IDS mode.
14 years ago
Anoop Saldanha
de635b5866
remove trailing whitespace from conf file
14 years ago
Eric Leblond
2fc58a48a5
Doxygen: Include documentation of define dependant code.
...
Generated documentation for unittests and other module was not
generated because doxygen was not assuming the define to be set.
This patch adds the necessary define for unittests and does the
same for NFQ, PFRING, IPFW, AF_PACKET and Prelude. This also adds
a variable that permit parallelisation of dot file generation.
14 years ago
Eric Leblond
d4d62f3099
http-uri: Remove useless function declaration.
14 years ago
Victor Julien
3401defbbb
tag: fixes and cleanups
...
Major fixes for the tag subsystem:
- Removed TimeGet call from tag packet runtime to safe a gettimeofday
- Removed unused lock from data type
- Fixed broken first packet skip logic
- Fix broken reference counter logic
- Fix memory leak on tag expiration
- Cleaned up code
14 years ago
Anoop Saldanha
b7b58074de
fix ac unittest
14 years ago
Anoop Saldanha
d6f9e06bbb
update ac to behave the same way irrespective of the state count. Should improve performance. Also fix unittests to accomodate these changes
14 years ago
Anoop Saldanha
dcaef183e8
fix compiler warning for printf format
14 years ago
Victor Julien
bc5c9f4a52
Fix too many SMTP commands causing an integer overflow in the cmds_cnt variable, in turn causing an out of bounds memory write.
14 years ago
Victor Julien
9baa16af63
Convert flow memcap to u64. Bug #332 .
14 years ago
Victor Julien
8208eacd79
Convert stream memcaps to u64. Bug #332 .
14 years ago
Victor Julien
4c641f0deb
Fix compilation with profiling enabled.
14 years ago
Anoop Saldanha
3ec7b75194
fix timestamps for pseudo packets created during FFR - bug 337
14 years ago
Anoop Saldanha
9d94bb38d5
refactor flow timeout code. fix ipv6 address assignment for pseudo pkt.
14 years ago
Anoop Saldanha
246a4e9fff
for shutdown reassembly properly init the reassembly packet using PACKET_RECYCLE
14 years ago
Victor Julien
1a5931e878
pcap-log: fall back to sguil_base_dir option if 'dir' isn't set. Minor cleanups.
14 years ago
William Metcalf
3b3f5816bf
You spin me right round baby, right round like a rotating packet capture right round. Oh, also log file size counters are now uint64_t
14 years ago
Victor Julien
6bad2dbd79
Don't match on IP only rules that use ports if packet is not (proper) TCP, UDP or SCTP. Rules out frags matching as well.
14 years ago
Anoop Saldanha
63ed36a892
Replace all reallocs with SCReallocs
14 years ago
Anoop Saldanha
4307ea2348
Replace all frees with SCFrees
14 years ago
Anoop Saldanha
797b1a44c7
Replace all strdup with SCStrdup
14 years ago
Anoop Saldanha
13ea299ee0
Replace all mallocs with SCMallocs
14 years ago
Eric Leblond
de59c9f4b1
Add and use utility functions for checksum computing.
14 years ago