Pierre Chifflier
f77fcdb3e8
Add ASN.1 parser for X509 certificates (in DER format)
...
Signed-off-by: Pierre Chifflier <pierre.chifflier@ssi.gouv.fr>
13 years ago
Victor Julien
0b3f6c464a
Make list-app-layer-protos option name match the help explanation. Make sure it works w/o passing a config.
13 years ago
Anoop Saldanha
109662450d
Add new command line option --list-app-layer-protocols to list supported app layer protocols in sigs
13 years ago
Anoop Saldanha
7511fa67cd
Add BUG_ON to avoid overruning AppLayerDetectDirection map array
13 years ago
Eileen Donlon
9376967e65
reject rules with duplicate content modifiers
...
reject rules that have multiple depths, offsets, distances, fast_patterns, nocases, or rawbytes for the same content.
13 years ago
Eileen Donlon
0bb4ff34b8
added null checks for init_hash to all ac mpms
13 years ago
Eileen Donlon
617edf469c
reject http_client_body with inconsistent flow dir
...
reject http_client_body with flow: to_client or from_server
13 years ago
Victor Julien
feff6f7705
Clean up error message.
13 years ago
Eileen Donlon
85c364da09
disallow-use-of-configuration-file-with-unittests
13 years ago
Victor Julien
d908e707d7
profiling: add per lock location profiling
...
Add profiling per lock location in the code. Accounts how often a
lock is requested, how often it was contended, the max number of
ticks spent waiting for it, avg number of ticks waiting for it and
the total ticks for that location.
Added a new configure flag --enable-profiling-locks to enable this
feature.
13 years ago
Victor Julien
41e9dba20b
Profile pcap file callback.
13 years ago
Victor Julien
ff8755af5c
Make sure stream debug code is only used in debug mode.
13 years ago
Victor Julien
9696902b68
Small http.log improvement: bail out early if there is nothing to log. Make output locking more fine grained.
13 years ago
Victor Julien
e581ec7dff
Fix 2 compilation issues.
13 years ago
Victor Julien
c0a2cbd478
Move over src and dst thresholding to use host table. Fix a bug in threshold 'both' handling.
13 years ago
Victor Julien
a05df345de
Introduce host table, make tag use it
...
Add a host table similar to the flow table. A hash using fine grained
locking. Flow manager for now takes care of book keeping / garbage
collecting.
Tag subsystem now uses this for host based tagging instead of the
global tag hash table. Because the latter used a global lock and the
new code uses very fine grained locking this patch should improve
scalability.
13 years ago
Victor Julien
db24258acf
Undo changes from 88b8f15663
. Atomic stack implementation had a-b-a problem.
13 years ago
Victor Julien
88b8f15663
Add atomic stack implementation. Convert flow spare queue to use this stack. Remove now unused flow-queue code.
13 years ago
Victor Julien
4a186bcf1d
Fix invalid declaration of enable_nss and enable_nspr in configure.in.
13 years ago
Victor Julien
979edf0b97
Add way to profile mutex/spin locks per thread module.
13 years ago
Victor Julien
fddaca6e8b
Implement stream memcap enforcements using atomics instead of spinlocked counters.
13 years ago
Victor Julien
d72b82fae0
Misc fixes.
13 years ago
Victor Julien
8448333bdd
Remove trailing zero's from some counters output.
13 years ago
Victor Julien
0150e66ede
flow engine: improve scalability
...
Major redesign of the flow engine. Remove the flow queues that turned
out to be major choke points when using many threads. Flow manager now
walks the hash table directly. Simplify the way we get a new flow in
case of emergency.
13 years ago
Victor Julien
da5087a0c0
Fix broken unittest.
13 years ago
Eileen Donlon
aae7ea5e67
add null checks to fix bugs in StreamTcpTest23
13 years ago
Eileen Donlon
1a46d7a53a
fix more invalid content unittests
...
fix invalid unittests with mixed relative and non-relative content modifiers and other issues; DetectContentParse19 still contains some failing dce_stub tests which are commented out.
13 years ago
Eileen Donlon
9b2bd9280a
fix invalid unittests with mixed content modifiers
...
Fixed some unittests that were incorrectly mixing relative and non-relative content modifiers.
13 years ago
Eileen Donlon
0bcbd23343
reject mixed relative and non-relative keywords
...
reject signatures using relative and non-relative positional keywords for the same content (depth or offset with distance or within)
13 years ago
Eileen Donlon
0b09416a48
reject invalid combinations of pcre modifiers
...
don't allow /B with normalized buffers, and don't mix modifiers for normalized and raw buffers
13 years ago
Victor Julien
89cee0ad49
Add libnss/libnspr support output to configure. Clean up configure.in.
13 years ago
Victor Julien
8350fdd9be
Do not assume the include dir for nss to be nss. On F16 it's nss3.
13 years ago
Victor Julien
90422c9f5e
Do not assume the include dir for nspr to be nspr. On F16 it's nspr4.
13 years ago
Victor Julien
705417434b
Fix json output typo.
13 years ago
Victor Julien
fe9258f0fb
Fix issue discovered by Anoop. Passing u32 ptr to a size_t can caused badness.
13 years ago
Victor Julien
6019ae3dcb
Fix minor memleak in case af-packet init fails.
13 years ago
Victor Julien
385f1dcd25
Fix UTHBuildFlow setup using wrong address.
13 years ago
Victor Julien
e3935a2af2
Improve http filename parsing.
13 years ago
Victor Julien
e237841a8e
Fix compilation with profiling enabled. Minor unittest fixes.
13 years ago
Victor Julien
de5c1d1491
Fix minor fgetc issue.
13 years ago
Victor Julien
0d6f33a15b
Move PACKET_RECYCLE outside of flow lock in FlowForceReassemblyForQ as it confuses static code checkers.
13 years ago
Victor Julien
e21d8cdf01
file extract: improve multipart parsing and set events on some error conditions.
13 years ago
Victor Julien
bfb3f1b7cf
flow: Refactor how FlowPrune deals with forced timeouts, improving locking logic.
13 years ago
Victor Julien
372ab9c433
Another batch of minor fixed for issues found by Coverity.
13 years ago
Victor Julien
11bdf4838f
Various improvements to error handling found by Coverity.
13 years ago
Anoop Saldanha
d6af843860
code cleanup
13 years ago
Victor Julien
cdba2f50d1
Various fixes and improvements based on feedback by Coverity analyzer.
13 years ago
Victor Julien
4b2d94a841
Add line number to warning about mangled yaml parameters. Limit number of warnings to 10.
13 years ago
Nikolay Denev
0fc878b391
Consistently use dashes instead of underscores in the sample config file.
13 years ago
Nikolay Denev
a67d78eda6
Consistently use dashes instead of underscores in the sample config file.
13 years ago