3945 Commits (ff222b51e741737c43589ebc35f5a6e23b1abe11)

 

All Branches   

Search

Author	SHA1	Message	Date
Eric Leblond	786cbb1244	log-pcap: don't limit snaplen.	12 years ago
Eric Leblond	e8aa66a44c	pcap: add 'promisc' YAML configuration variable ... This patch adds a promisc variable to pcap configuration. It is used to decided if interface is switched to promiscuous mode.	12 years ago
Eric Leblond	1aaa828b63	pcap: set snaplen to MTU if available. ... Main objective of this patch is to use a dynamic snaplen to avoid to truncate packet at the currently fixed snaplen. It set snaplen to MTU length if the MTU can be retrieved. If not, it does not set the snaplen which results in using a 65535 snaplen. libpcap is trying to use mmaped capture and setup the ring by using buffer_size as the total memory. It also use "rounded" snaplen as frame size. So if we set snaplen to MTU when available we are optimal regarding the building of the ring.	12 years ago
Victor Julien	cc51eec59d	Use new libhtp query string normalization. Bug #739.	12 years ago
Victor Julien	d41c762689	Add separate libhtp query string normalization function and configuration toggles for it.	12 years ago
Eric Leblond	2732faf05c	teredo: update protocol decoding. ... This patch fixes an error in pointer arythmetic and add some comments to increase maintanability of the code. It also simplify the decoding code as a careful RFC reading indicate that if we discard packet containing an authentication field, it is only possible to have a single origin indication field.	12 years ago
Eric Leblond	8d7b9703af	Fix latest build-info modification ... The creation of build-info.h should have been made in build directory and not in source directory. This should fix changes introduced in #738.	12 years ago
Eric Leblond	84f50ba49f	build-info: use printf instead of SCLogInfo ... This change results in a more readable and reusable output.	12 years ago
Eric Leblond	668113af77	add configure summary to build-info output	12 years ago
Eric Leblond	f5ba8eb6db	suricata: add information to build-info ... This patch adds information about luajit and jansson to the output of --build-info command. This should fix #696.	12 years ago
Anoop Saldanha	5fe9394d07	bug #737. Display a more apt error message when wrong argument's supplied to ... reference keyword.	12 years ago
Jake Gionet	bf0ebcbef7	Adding comment in suricata.yaml.in to indicate sensor-id option.	12 years ago
Jake Gionet	1ac8938787	Adding support for Feature #667	12 years ago
Victor Julien	d0c1410cf5	Fix sig grouping bug when certain sigs are mixed. Add tests.	12 years ago
Victor Julien	afb2d4eddf	Fix stateful inspection not always inspecting at stream end.	12 years ago
Anoop Saldanha	f59ce70c17	fix for #694. ... Invalidate any address/port vars in the conf that uses a sequence without quotes.	12 years ago
Anoop Saldanha	51868f17ae	unittest to show the seg fault from bug_694	12 years ago
Victor Julien	8f19024999	geoip: add Fedora pkg hint to configure check	12 years ago
Anoop Saldanha	34a9c047fc	updated to fix unix shutdown sequence ... Should fix crashes occuring from unix mode shutdown/cleanup phase.	12 years ago
Ignacio Sanchez	d771e08156	Adds support for the geoip keyword ... Adds support for match-on conditions (src, dst, any, both) Uses GEOIP_MEMORY_CACHE for performance reasons Adds support for negation and multiple countries in the same rule Bug fixes Changed to take flow direction from rule, if present Comments addressed. Unit tests added.	12 years ago
Eric Leblond	6dfd106139	conf: add unittest for WithDefault functions.	12 years ago
Eric Leblond	f59c63c457	pcap: add support for 'default' interface	12 years ago
Eric Leblond	feabe6e9a2	pfring: add support for 'default' interface	12 years ago
Eric Leblond	4ae27756b0	af-packet: add support for 'default' interface ... This patch adds support for 'default' interface which is used to get parameter values when per-interface is not defined.	12 years ago
Eric Leblond	0bddf4f02f	conf: introduce WithDefault function ... This patch introduces a new set of functions to the ConfGetChildValue family. They permit to look under a default node if looking under base node as failed. This will be used to access to default parameters for a data type (for instance, first usage will be interface).	12 years ago
Eric Leblond	6b81430bcb	pcap-file: don't kill engine in unix socket mode ... This patch updates the cleaning code to avoid to exit from suricata in unix socket mode when a invalid pcap is given.	12 years ago
Jamie Strandboge	bc04090bc9	suppress: DETECT_SUPPRESS_REGEX should support IPv6 addresses too. Bug #697.	12 years ago
Victor Julien	80ed1ba008	file md5: print filename and line number on md5 parse errors. Bug #693.	12 years ago
Nikolay Denev	9480559c65	preserve the existing error code order ... restore SC_WARN_IPFW_SETSOCKOPT move SC_ERR_IPFW_SETSOCKOPT at the end of the enum	12 years ago
Nikolay Denev	894ad21be5	setsockopt() failures are already fatal, ... so treat them as such and print error instead of warning.	12 years ago
Nikolay Denev	29b69fb026	set SO_BROADCAST on the divert socket so that broadcast ... packets can be reinjected.	12 years ago
Victor Julien	6783463eee	Fix ftpbounce address calc failing on PPC64	12 years ago
Victor Julien	0c84a7a2a9	Use _mm_free for memory allocated by _mm_alloc. Bug 703. Minor compiler warning fixes.	12 years ago
Victor Julien	34d063adea	Fix double definition of CPU_* macro's for Darwin/OSX. Bug 701.	12 years ago
Victor Julien	f0578c474e	Fix byte order detection on Mac OS X/Darwin. Bug 700.	12 years ago
Victor Julien	5f4c52801e	Fix protocol check for IP-only (#689).	12 years ago
Victor Julien	633707457f	Update changelog for 1.4	12 years ago
Victor Julien	1eed3f2233	ipv6: add event for ipv6 packet with icmpv4 header	12 years ago
Anoop Saldanha	53c023342c	fix for 653. ... break out of afp readring loop if shutdown is initiated.	12 years ago
Victor Julien	a55ff64a1b	Use GET_PKT_LEN and GET_PKT_DATA macro's	12 years ago
Eric Leblond	e690b3bbc9	magic: freebsd magic return differently ... FreeBSD don't return "Microsoft Office Document" but "OLE 2 Compound Document". This patch takes this into account.	12 years ago
Anoop Saldanha	a30a1e5950	fix for bug 675. ... Fix icmpv6-csum to send the right length to calculate the csum.	12 years ago
Anoop Saldanha	af92c2fa4b	Unittest to show the issue we have with 674 - csum-icmpv6 sends ... wrong length for csum calculation)	12 years ago
Victor Julien	150b0c5ae0	ipv6: add option to detect HOP/DST headers with only padding. Detect unknown DST/HOP opts.	12 years ago
Victor Julien	ba367dad3c	icmpv6: fix payload handling	12 years ago
Victor Julien	538a941486	decoder events: fix bug causing some rules not to be inspected if the decoder completed with warnings	12 years ago
Victor Julien	f5cd7c6a92	decode events: add debug statement	12 years ago
Victor Julien	82769a1b37	profiling: fix missing profile names	12 years ago
Victor Julien	72443a0d62	unified2: append open instead of trucate open so that in case we rotate within a second we don't overwrite files. Instead we violate the limit.	12 years ago
Victor Julien	298d21372b	flow: only BUG_ON use_cnt in flows when compiled with debug-validation	12 years ago