Commit Graph

3187 Commits (f204b52e10e01a0ed0a8edabb82ffdc3aa835b14)
 

Author SHA1 Message Date
Pierre Chifflier f77fcdb3e8 Add ASN.1 parser for X509 certificates (in DER format)
Signed-off-by: Pierre Chifflier <pierre.chifflier@ssi.gouv.fr>
13 years ago
Victor Julien 0b3f6c464a Make list-app-layer-protos option name match the help explanation. Make sure it works w/o passing a config. 13 years ago
Anoop Saldanha 109662450d Add new command line option --list-app-layer-protocols to list supported app layer protocols in sigs 13 years ago
Anoop Saldanha 7511fa67cd Add BUG_ON to avoid overruning AppLayerDetectDirection map array 13 years ago
Eileen Donlon 9376967e65 reject rules with duplicate content modifiers
reject rules that have multiple depths, offsets, distances, fast_patterns, nocases, or rawbytes for the same content.
13 years ago
Eileen Donlon 0bb4ff34b8 added null checks for init_hash to all ac mpms 13 years ago
Eileen Donlon 617edf469c reject http_client_body with inconsistent flow dir
reject http_client_body with flow: to_client or from_server
13 years ago
Victor Julien feff6f7705 Clean up error message. 13 years ago
Eileen Donlon 85c364da09 disallow-use-of-configuration-file-with-unittests 13 years ago
Victor Julien d908e707d7 profiling: add per lock location profiling
Add profiling per lock location in the code. Accounts how often a
lock is requested, how often it was contended, the max number of
ticks spent waiting for it, avg number of ticks waiting for it and
the total ticks for that location.

Added a new configure flag --enable-profiling-locks to enable this
feature.
13 years ago
Victor Julien 41e9dba20b Profile pcap file callback. 13 years ago
Victor Julien ff8755af5c Make sure stream debug code is only used in debug mode. 13 years ago
Victor Julien 9696902b68 Small http.log improvement: bail out early if there is nothing to log. Make output locking more fine grained. 13 years ago
Victor Julien e581ec7dff Fix 2 compilation issues. 13 years ago
Victor Julien c0a2cbd478 Move over src and dst thresholding to use host table. Fix a bug in threshold 'both' handling. 13 years ago
Victor Julien a05df345de Introduce host table, make tag use it
Add a host table similar to the flow table. A hash using fine grained
locking. Flow manager for now takes care of book keeping / garbage
collecting.

Tag subsystem now uses this for host based tagging instead of the
global tag hash table. Because the latter used a global lock and the
new code uses very fine grained locking this patch should improve
scalability.
13 years ago
Victor Julien db24258acf Undo changes from 88b8f15663. Atomic stack implementation had a-b-a problem. 13 years ago
Victor Julien 88b8f15663 Add atomic stack implementation. Convert flow spare queue to use this stack. Remove now unused flow-queue code. 13 years ago
Victor Julien 4a186bcf1d Fix invalid declaration of enable_nss and enable_nspr in configure.in. 13 years ago
Victor Julien 979edf0b97 Add way to profile mutex/spin locks per thread module. 13 years ago
Victor Julien fddaca6e8b Implement stream memcap enforcements using atomics instead of spinlocked counters. 13 years ago
Victor Julien d72b82fae0 Misc fixes. 13 years ago
Victor Julien 8448333bdd Remove trailing zero's from some counters output. 13 years ago
Victor Julien 0150e66ede flow engine: improve scalability
Major redesign of the flow engine. Remove the flow queues that turned
out to be major choke points when using many threads. Flow manager now
walks the hash table directly. Simplify the way we get a new flow in
case of emergency.
13 years ago
Victor Julien da5087a0c0 Fix broken unittest. 13 years ago
Eileen Donlon aae7ea5e67 add null checks to fix bugs in StreamTcpTest23 13 years ago
Eileen Donlon 1a46d7a53a fix more invalid content unittests
fix invalid unittests with mixed relative and non-relative content modifiers and other issues; DetectContentParse19 still contains some failing dce_stub tests which are commented out.
13 years ago
Eileen Donlon 9b2bd9280a fix invalid unittests with mixed content modifiers
Fixed some unittests that were incorrectly mixing relative and non-relative content modifiers.
13 years ago
Eileen Donlon 0bcbd23343 reject mixed relative and non-relative keywords
reject signatures using relative and non-relative positional keywords for the same content (depth or offset with distance or within)
13 years ago
Eileen Donlon 0b09416a48 reject invalid combinations of pcre modifiers
don't allow /B with normalized buffers, and don't mix modifiers for normalized and raw buffers
13 years ago
Victor Julien 89cee0ad49 Add libnss/libnspr support output to configure. Clean up configure.in. 13 years ago
Victor Julien 8350fdd9be Do not assume the include dir for nss to be nss. On F16 it's nss3. 13 years ago
Victor Julien 90422c9f5e Do not assume the include dir for nspr to be nspr. On F16 it's nspr4. 13 years ago
Victor Julien 705417434b Fix json output typo. 13 years ago
Victor Julien fe9258f0fb Fix issue discovered by Anoop. Passing u32 ptr to a size_t can caused badness. 13 years ago
Victor Julien 6019ae3dcb Fix minor memleak in case af-packet init fails. 13 years ago
Victor Julien 385f1dcd25 Fix UTHBuildFlow setup using wrong address. 13 years ago
Victor Julien e3935a2af2 Improve http filename parsing. 13 years ago
Victor Julien e237841a8e Fix compilation with profiling enabled. Minor unittest fixes. 13 years ago
Victor Julien de5c1d1491 Fix minor fgetc issue. 13 years ago
Victor Julien 0d6f33a15b Move PACKET_RECYCLE outside of flow lock in FlowForceReassemblyForQ as it confuses static code checkers. 13 years ago
Victor Julien e21d8cdf01 file extract: improve multipart parsing and set events on some error conditions. 13 years ago
Victor Julien bfb3f1b7cf flow: Refactor how FlowPrune deals with forced timeouts, improving locking logic. 13 years ago
Victor Julien 372ab9c433 Another batch of minor fixed for issues found by Coverity. 13 years ago
Victor Julien 11bdf4838f Various improvements to error handling found by Coverity. 13 years ago
Anoop Saldanha d6af843860 code cleanup 13 years ago
Victor Julien cdba2f50d1 Various fixes and improvements based on feedback by Coverity analyzer. 13 years ago
Victor Julien 4b2d94a841 Add line number to warning about mangled yaml parameters. Limit number of warnings to 10. 13 years ago
Nikolay Denev 0fc878b391 Consistently use dashes instead of underscores in the sample config file. 13 years ago
Nikolay Denev a67d78eda6 Consistently use dashes instead of underscores in the sample config file. 13 years ago