11279 Commits (f7c4600482322dc62304f3d98228da135f89954d)

 

All Branches   

Search

Author	SHA1	Message	Date
Shivani Bhardwaj	2162c52b17	src: remove multiple uses of atoi ... atoi() and related functions lack a mechanism for reporting errors for invalid values. Replace them with calls to the appropriate ByteExtractString* and StringParse* functions. Partially closes redmine ticket #3053.	5 years ago
Shivani Bhardwaj	271e33fbaa	affinity: Convert nb_threads to uint32_t	5 years ago
Shivani Bhardwaj	a516435443	napatech: make stream_id uint8_t	5 years ago
Shivani Bhardwaj	f4c9d33923	redis: Change port type to uint16_t	5 years ago
Jason Ish	639f3d265e	rust: lock to nom 5.1.1 ... 5.1.2 pulls in dependencies that don't build on Rust 1.34.	5 years ago
Victor Julien	79681bf655	app-layer: remove old MPMId API calls ... Had been deprecated and non-functional since 2017.	5 years ago
Jason Ish	74053f43cb	json: macros for setting formatted true and string values ... JB_SET_TRUE(jb, key), and JB_SET_STRING(string, key, val) are C macros around jb_set_formatted to set static string and true values as a (micro) optimization.	5 years ago
Jason Ish	a545cdef6a	jsonbuilder: setter for formatted data ... Create a method to set preformatted data that contains the key and the value already formatted. This is an optimization for static data.	5 years ago
Jason Ish	e3b7c58218	jsonbuilder: export {set,append}_string_from_bytes to C	5 years ago
Jason Ish	f184bcc10e	jsonbuilder: use Box::from_raw instead of transmute to free ... I think this is a bad use of transmute, while the end result is the same, Box::from_raw is more correct as we created this pointer with Box::into_raw.	5 years ago
Philippe Antoine	e5d4332ede	signature: adds file flag for file_data keyword ... So that SigValidate can check if a protocol not supporting files was set after this keyword	5 years ago
Philippe Antoine	baf5f52f22	ssh/eve: convert to jsonbuilder	5 years ago
Jeff Lucovsky	5e4aa5b851	doc: Improve tos description ... This commit improves the description of the `tos` keyword by emphasizing that the value used should adhere to the guidelines in RFC2474. Instead of specifying the DSCP value directly, right shift the DSCP value and use that.	5 years ago
Jeff Lucovsky	3005dca3fd	doc: pcrexform documentation	5 years ago
Jeff Lucovsky	a0b81b3c9d	detect: Register pcrexform ... This commit registers the `pcrexform` transform.	5 years ago
Jeff Lucovsky	66d15710b8	transform/pcrexform: Add pcrexform source files	5 years ago
Jeff Lucovsky	c1875d8532	detect/pcrexform: New transform: applies RE ... This commit adds a new transform -- pcrexform -- that applies a regular expression to the transformation buffer. If an expression was captured, that is output to the transformation buffer. Otherwise, the transformation buffer is unchanged.	5 years ago
Jeff Lucovsky	c8eca52804	detect: Add constant for new transform ... This commit adds the definition of the new `pcrexform` transform.	5 years ago
Jeff Lucovsky	5d10db88bc	detect/transform: Support transform options ... This commit adds support for transform-specific options. During Setup, transforms have the signature string available for options detection. When a transform detects an option, it should convert the option into an internal format and supply a pointer to this format as the last argument to DetectSignatureAddTransform. Transforms that support options must provide a function in their Sigmatch table entry. When the transform is freed, a pointer to the internal format of the option is passed to this function.	5 years ago
Jeff Lucovsky	b569670c33	general: Correct typos	5 years ago
Jeff Lucovsky	4407cf8979	general: Update copyright year	5 years ago
Emmanuel Thompson	be3379f00e	detect/asn1: Fix relative_offset keyword option ... - Fix relative_offset keyword option to be relative in regards to the last content match - Change relative_offset to int32_t with bounds check to allow the full range of the packet buffer size (uint16_t) - Added checks for over/underflows - Changed the offset type to uint16_t because the offset is applied to the payload length, which is a uint16_t - Adjusted test cases to work relative to the content match - Added test case to verify bounds	5 years ago
Eric Leblond	f5e2968f12	redis: ensure a dump per second ... In sync mode, Suricata was waiting to have batch size alerts before logging them. This was introducing delay in some configuration with low traffic.	5 years ago
Eric Leblond	ec8eba28a8	redis: fix reconnect in batch mode ... In case of redis outage, the redis session was reset but the replies were still fetch even if there is none replies in the new session.	5 years ago
Eric Leblond	025de61f43	redis: add support for unix socket ... If there is a '/' in the redis server string then we consider that the connection should be done other a unix socket.	5 years ago
Joshua Lumb	82fb72678f	cmdline: --list-app-layer-protos respects -c arg	5 years ago
Victor Julien	a4568a634d	htp: enforce body limits more exact	5 years ago
Victor Julien	0db3ee26d0	eve/alert: convert decoder event logging to jsonbuilder	5 years ago
Victor Julien	aa0286d925	eve/anomaly: don't add timestamp twice ... Timestamp is added unconditionally by CreateEveHeader(), so no need to have a local timestamp in case of non-IP packets.	5 years ago
Victor Julien	bd3fdeb53f	eve/alert: clean up decoder event logging	5 years ago
Victor Julien	b3b5802c85	eve/nfs: switch output to jsonbuilder	5 years ago
Giuseppe Longo	cb7e72e602	jsonbuilder: fix build error ... Clang's build in travis-ci is actually failing because of this error: output-json-alert.c:476:40: error: missing field 'state_index' initializer [-Werror,-Wmissing-field-initializers] JsonBuilderMark mark = { 0 };	5 years ago
Jason Ish	a77662bdbf	userguide: remove old drop-log documentation ... Redmine issue: https://redmine.openinfosecfoundation.org/issues/2381	5 years ago
Jason Ish	e26718aea3	drop-log: remove drop log (deprecated) ... Remove the old style line based drop log. Redmine issue: https://redmine.openinfosecfoundation.org/issues/2381	5 years ago
Jason Ish	8997a114cb	userguide: RDP now enabled by default ... Redmine issue: https://redmine.openinfosecfoundation.org/issues/3255	5 years ago
Jason Ish	6ce9b2972b	rdp: enable by default ... Redmine issue: https://redmine.openinfosecfoundation.org/issues/3255	5 years ago
Jason Ish	3eb0461abd	userguide: SIP now enabled by default ... Redmine issue: https://redmine.openinfosecfoundation.org/issues/3256	5 years ago
Jason Ish	5a7ba62493	sip: enable by default ... Redmine issue: https://redmine.openinfosecfoundation.org/issues/3256	5 years ago
Phil Young	3ccd44b144	Napatech: Fix network byte order when comparing addresses ... This fixes an issue where the "endieness" was not properly accounted for when comparing two IPv4 addresses to be sorted.	5 years ago
Phil Young	d1d09ecfa8	Napatech: Change to use separate FlowStream handle for each thread ... Previously a single handle to the FlowStream (which is used to program flows to the card) was shared between the threads. This resulted in contention between the threads where sometimes programming the flow would silently fail.	5 years ago
Victor Julien	d0526e71c0	doc/userguide: add IPS with BPF info, minor cleanups	5 years ago
Victor Julien	bd70e0e621	eve: print interface info for vxlan and other tunnel pkts	5 years ago
Jason Ish	7d22993a8f	github-ci: allow pull-request to be referenced in pr body ... For example, to use suricata-verify pr #239: suricata-verify-pr: 239 Also update the pull request template to contain the available parameters that can be set.	5 years ago
Jason Ish	36d687580a	rfb/eve: convert to jsonbuilder	5 years ago
Jason Ish	49f7dc93bd	smtp/eve: convert to jsonbuilder	5 years ago
Jason Ish	60bfbd43fd	jsonbuilder: add reset marks ... Add methods to get the state of a JsonBuilder (called a mark), then allow restoring to the mark.	5 years ago
Jason Ish	7803a9ac40	anomaly/eve: convert to jsonbuilder	5 years ago
Jason Ish	037c449b85	tls/eve: convert to jsonbuilder	5 years ago
Jason Ish	be8fa5da43	http/eve: remove jansson version of metadata logger ... With fileinfo converted over to JsonBuilder, these Jansson versions are no longer needed.	5 years ago
Jason Ish	fb7ee888bc	fileinfo-filestore/eve: convert to jsonbuilder	5 years ago