You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Victor Julien 0e297d26ff detect: honor the P+1 eof rule for generic hook list engines ... DetectEngineInspectGenericList returned NO_MATCH for every keyword miss, also when the tx had moved past the phase the engine is registered at. Unlike the buffer engines it never produced a terminal no match, so a firewall LTE rule using such a keyword (tls.version on a hook) stayed provisional and was accepted for the rest of the session. Make a miss terminal at P + 1. This engine also backs the lua on-request/on-response hooks and the tls_cert_*, dnp3/dnp3_ind and ftpdata/ftp mode keywords, so a plain IDS rule using them keeps its verdict once the tx has moved past the registered phase. Export the parser's end state computation as AppLayerParserGetTxEndState() here, so the version keyword can use it; the remaining call sites are converted later. Ticket: #8944.		3 weeks ago
..
.cargo	rust: rename .cargo/config to .cargo/config.toml	2 years ago
derive	rust/ffi: move AppLayerEvent to ffi	6 months ago
ffi	rust/ffi: add flow accessors to flow wrapper	2 months ago
htp	http1: keep monotonic progress for 100-continue	4 weeks ago
src	ssh: remove the banner_wait_eol state	3 weeks ago
suricatactl	rust: limit clap verson to 4.5.57	7 months ago
suricatasc	rust: clippy fixups for 1.97	4 months ago
sys	detect: honor the P+1 eof rule for generic hook list engines	3 weeks ago
.gitignore	rust: rename .cargo/config to .cargo/config.toml	2 years ago
Cargo.lock.in	rust: add zstd dependency	1 month ago
Cargo.toml.in	rust: add zstd dependency	1 month ago
Makefile.am	rust: use cargo test --workspace	1 month ago
cbindgen.toml	http2: split transaction state machines	4 months ago
rustfmt.toml	rustfmt: replace deprecated fn_args_layout with fn_params_layout	3 years ago