Jason Ish
fc35a78ba1
logging: use a single entry point for all loggers
...
Introduces a new thread module, TMM_LOGGER, which is the
root most logger.
Only handles loggers in the packet path, stats and flow
logging are not included.
The loggers are made up of a hierarchy of loggers. At the top we
have the root logger which is the main entry point to
logging. Under the root there exists parent loggers that are the
entry point for specific types of loggers such as packet logger,
transaction loggers, etc. Each parent logger may have 0 or more
loggers that actual handle the job of producing output to something
like a file.
9 years ago
Jason Ish
d2c17ce9a0
logging: remove output priorities: not used
9 years ago
Jason Ish
9489d5b9e3
logging: remove dead code from output-json
...
The "parent" json logger was setup like a real logger, but
some of that code was never being called.
9 years ago
Jason Ish
8b38b9d728
output.[ch]: consistent style
...
- Clean up function declaration.
- Consistenly use typedefs for function points.
No functional changes.
9 years ago
Jason Ish
fa27a76462
logging: add profiling back for non-tmm loggers
...
The loggers moved away from a TMM required a new
profiling support.
9 years ago
Jason Ish
42b8f30272
logging: convert lua output to non-thread module
9 years ago
Jason Ish
7a0737b9a9
logging: convert tls log to non-thread module
9 years ago
Jason Ish
7cb16bc90d
logging: convert alert debug log to non-thread module
9 years ago
Jason Ish
7a8e8343e5
logging: convert tcp data logging to non-thread module
9 years ago
Jason Ish
4d8b8ca046
logging: convert tls store logging to non-thread module
9 years ago
Jason Ish
60b6ccc3c4
logging: convert file data logging to non-thread module
9 years ago
Jason Ish
f9bb9029c5
logging: convert file logging to non-thread module
9 years ago
Jason Ish
669827ae16
logging: convert unified2 to non-thread module
9 years ago
Jason Ish
b580016c80
logging: convert stats loggers to non-thread module
9 years ago
Jason Ish
9475c83713
logging: convert http log to non-thread module
9 years ago
Jason Ish
e00dcd52a0
logging: convert alert syslog to non-thread module
9 years ago
Jason Ish
869d2eb701
logging: convert drop output to non-thread module
9 years ago
Jason Ish
5bbb4fd134
logging: convert json template output to non-thread module
9 years ago
Jason Ish
b605984f34
tests: setup unit test framework earlier
...
Allows tests to be registered early, in support of moving
outputs away from thread modules.
9 years ago
Jason Ish
bac65f09e8
logging: convert json drop output to non-thread module
9 years ago
Jason Ish
38354479b7
logging: convert json smtp output to non-thread module
9 years ago
Jason Ish
3fea12d7b3
logging: convert json ssh output to non-thread module
9 years ago
Jason Ish
01cc508257
logging: convert json netflow output to non-thread module
9 years ago
Jason Ish
983a619ff0
logging: convert json flow output to non-thread module
9 years ago
Jason Ish
ad15ac8297
logging: convert json alert output to non-thread module
9 years ago
Jason Ish
aaa65f3d16
logging: convert json tls output to non-thread module
9 years ago
Jason Ish
31663f1627
logging: convert prelude output to non-thread module
9 years ago
Jason Ish
dedda33f01
logging: convert eve http to non-thread module
9 years ago
Jason Ish
687602c0ca
logging: convert eve dns logging to non-thread module
9 years ago
Jason Ish
b1200dba54
logging: convert fast log to a non-thread module
9 years ago
Jason Ish
637aa34610
logging: convert dns log to a non-thread module
9 years ago
Victor Julien
99dce740ef
detect: mark alproto in keyword reg deprecated
...
No existing code uses it, and it had been useless for some time.
9 years ago
Victor Julien
e173016ded
gitignore: update to hide more local files
9 years ago
Victor Julien
9030e89c94
detect: don't set alproto while registering keyword
...
The field is not used except for some printing, and is wrong for
many keywords.
9 years ago
Victor Julien
c957c62824
detect file: enable HTTP inspection from validate func
9 years ago
Victor Julien
621860f5b2
detect file: enforce protocol in single place
...
Instead of trying to enforce the app layer protocol in each file
function, enforce it in the generic validation function.
9 years ago
Victor Julien
bcfa484bce
app-layer: add function to check if app-layer supports files
9 years ago
Victor Julien
85db260eed
threads: remove EngineKill & SURICATA_KILL
...
EngineStop and EngineKill were effectively doing the same, so
removed the kill variant.
9 years ago
Victor Julien
045c10db43
threads: failed thread is a fatal error now
9 years ago
Victor Julien
fb655d5f15
threading: remove thread restart logic
...
Thread restarts never worked well and the rest of the engine was
never really expecting errors to lead to thread restarts. Either
and error is recoverable in the thread, or not at all.
So this patch removes the functionality completely.
9 years ago
Victor Julien
54503ef310
Open Suricata 3.2 development branch
9 years ago
Victor Julien
471b61a0e1
magic: fix broken tests after CentOS6 update
9 years ago
Victor Julien
82282a9e68
mpls: add missing event type + rule
9 years ago
Victor Julien
71c8d1f46c
bpf: fix file parsing memory handling
...
Fix improper fread string handling. Improve error handling.
Skip trailing spaces for slightly more pretty printing.
Coverity CID 400763.
Thanks to Steve Grubb for helping address this issue.
9 years ago
Victor Julien
519b2970ec
detect: don't print (null) in --list-keywords=all
9 years ago
Eric Leblond
ed90a16e89
detect: fix setup for some keywords
...
Fix problems found by siginit.cocci.
9 years ago
Eric Leblond
4324805478
coccinelle: add siginit test
...
Add a test that check an inversion during keyword setup where
we add a sigmatch to a signature and then do error handling on it.
This was causing a double free of some elements and ultimately a
segfault.
Proposed-by: Victor Julien <victor@inliniac.net>
9 years ago
Jason Ish
17e70483c5
detect-flowbits: more unittest macro usage
...
Also cleanup some tests by removing extra code after a test was
determined to fail.
9 years ago
Jason Ish
3c5d8e65d4
hostbits: use new unittest macros
9 years ago
Jason Ish
c4945607e3
hostbits: fail parse on unexpected trailing data
...
Address issue https://redmine.openinfosecfoundation.org/issues/1889
for hostbits. This involves updating the regular expresssion
to capture any trailing data as the regex already keeps
spaces out of the name.
A unit test was converted to new macros to find out which
line it was failing at after updating regex.
9 years ago