You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/src
Victor Julien 2630c6a5d3 detect: log the hook for sub-state firewall rules
Alerts and drops for firewall rules hooked at a sub-state (http2
stream/global) had no firewall.hook field: the logger resolved the state
name without the sub-state, so the lookup found nothing.

Keep the rule's sub-state on the Signature next to app_progress_hook,
set it from the hook and for the default policy signatures, resolve the
name in the sub-state table, and fall back to the plain state name when
that lookup fails.

Ticket: #8944.
3 weeks ago
..
tests detect/firewall: fix later LTE rule confusing policy checks 3 weeks ago
Makefile.am fuzz: add target for datasets 4 weeks ago
action-globals.h
…
alert-debuglog.c alert: standardize includes with iwyu 4 weeks ago
alert-debuglog.h
…
alert-fastlog.c alert: standardize includes with iwyu 4 weeks ago
alert-fastlog.h alert: standardize includes with iwyu 4 weeks ago
alert-syslog.c alert: standardize includes with iwyu 4 weeks ago
alert-syslog.h
…
app-layer-detect-proto.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer-detect-proto.h smtp: use configured FTP ports in probing parser 9 months ago
app-layer-dnp3-objects.c dnp3: allocate variable-length object fields dynamically 2 months ago
app-layer-dnp3-objects.h dnp3: allocate variable-length object fields dynamically 2 months ago
app-layer-dnp3.c src: introduce memmove wrapper using memmove_s if available 3 weeks ago
app-layer-dnp3.h dnp3: explicit application layer length is bounded in uint16_t 5 months ago
app-layer-events.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer-events.h rust: move AppLayerEventType definition to C 9 months ago
app-layer-expectation.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer-expectation.h flow/storage: prefix API with SC 7 months ago
app-layer-frames.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer-frames.h app-layer: standardize includes with iwyu 4 weeks ago
app-layer-ftp.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer-ftp.h ftp: mark truncation on the line, not the connection 2 months ago
app-layer-htp-body.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer-htp-body.h
…
app-layer-htp-file.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer-htp-file.h rust: bindgen SCHTPFileCloseHandleRange 11 months ago
app-layer-htp-mem.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer-htp-mem.h
…
app-layer-htp-range.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer-htp-range.h rust: bindgen SCHTPFileCloseHandleRange 11 months ago
app-layer-htp-xff.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer-htp-xff.h htp/xff: rustify htp_xff_get_ip 4 weeks ago
app-layer-htp.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer-htp.h http1: do not re-parse Content-Disposition header 5 months ago
app-layer-http2.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer-http2.h rust: bindgen SCHTTP2MimicHttp1Request 1 year ago
app-layer-ike.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer-ike.h
…
app-layer-imap.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer-imap.h
…
app-layer-modbus.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer-modbus.h
…
app-layer-nfs-tcp.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer-nfs-tcp.h
…
app-layer-nfs-udp.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer-nfs-udp.h
…
app-layer-parser.c detect: honor the P+1 eof rule for generic hook list engines 3 weeks ago
app-layer-parser.h detect: honor the P+1 eof rule for generic hook list engines 3 weeks ago
app-layer-protos.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer-protos.h app-layer: query raw protocol names 2 months ago
app-layer-register.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer-register.h rust: bindgen SCAppLayerRegisterParser 9 months ago
app-layer-smb.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer-smb.h
…
app-layer-smtp.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer-smtp.h app-layer: standardize includes with iwyu 4 weeks ago
app-layer-ssh.c ssh: remove the banner_wait_eol state 3 weeks ago
app-layer-ssh.h
…
app-layer-ssl.c detect: honor the P+1 eof rule for generic hook list engines 3 weeks ago
app-layer-ssl.h detect: honor the P+1 eof rule for generic hook list engines 3 weeks ago
app-layer-tftp.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer-tftp.h
…
app-layer.c app-layer: standardize includes with iwyu 4 weeks ago
app-layer.h rust: move StreamSlice definition to C 9 months ago
bindgen.h rust/ffi: bindgen flow storage 2 months ago
capture-hooks.c pcap: refactor delete-when-done to support non-alerts 8 months ago
capture-hooks.h pcap: refactor delete-when-done to support non-alerts 8 months ago
conf-yaml-loader.c conf: make dirname pointer const 7 months ago
conf-yaml-loader.h
…
conf.c conf: assist gcc -fanalyzer 5 months ago
conf.h conf: introduce SCConfGetNonNull 5 months ago
counters.c conf: uses SCConfGetNonNull 5 months ago
counters.h counters: compact public stats context 9 months ago
datasets-context-json.c detect/datajson: check json objects are string as expected 4 months ago
datasets-context-json.h
…
datasets-ipv4.c
…
datasets-ipv4.h
…
datasets-ipv6.c
…
datasets-ipv6.h
…
datasets-md5.c
…
datasets-md5.h
…
datasets-reputation.h
…
datasets-sha256.c
…
datasets-sha256.h
…
datasets-string.c datasets: fix compile warnings 10 months ago
datasets-string.h
…
datasets.c datasets: make DatasetsDestroy complete 4 weeks ago
datasets.h rust: bindgen functions needed for datasets 12 months ago
decode-arp.c counters: regular counter Incr API update 11 months ago
decode-arp.h
…
decode-chdlc.c counters: regular counter Incr API update 11 months ago
decode-chdlc.h
…
decode-erspan.c counters: regular counter Incr API update 11 months ago
decode-erspan.h
…
decode-esp.c counters: regular counter Incr API update 11 months ago
decode-esp.h
…
decode-etag.c counters: regular counter Incr API update 11 months ago
decode-etag.h
…
decode-ethernet.c counters: regular counter Incr API update 11 months ago
decode-ethernet.h
…
decode-events.c decoder/sctp: extend decoder 5 months ago
decode-events.h decoder/sctp: extend decoder 5 months ago
decode-geneve.c counters: regular counter Incr API update 11 months ago
decode-geneve.h
…
decode-gre.c counters: regular counter Incr API update 11 months ago
decode-gre.h
…
decode-icmpv4.c counters: regular counter Incr API update 11 months ago
decode-icmpv4.h
…
decode-icmpv6.c counters: regular counter Incr API update 11 months ago
decode-icmpv6.h
…
decode-igmp.c decoder/igmp: detect RGMP (RFC 3488) 8 months ago
decode-igmp.h decoder/igmp: detect RGMP (RFC 3488) 8 months ago
decode-ipv4.c decoder/igmp: initial decoder support for IGMP 8 months ago
decode-ipv4.h
…
decode-ipv6.c defrag/ipv6: support maximum payload length 2 months ago
decode-ipv6.h
…
decode-mpls.c defrag/ipv6: support maximum payload length 2 months ago
decode-mpls.h
…
decode-nsh.c defrag/ipv6: support maximum payload length 2 months ago
decode-nsh.h
…
decode-null.c defrag/ipv6: support maximum payload length 2 months ago
decode-ppp.c defrag/ipv6: support maximum payload length 2 months ago
decode-ppp.h
…
decode-pppoe.c defrag/ipv6: support maximum payload length 2 months ago
decode-pppoe.h
…
decode-raw.c defrag/ipv6: support maximum payload length 2 months ago
decode-raw.h
…
decode-sctp.c decode/sctp: chunk_cnt can be a u16 4 months ago
decode-sctp.h decode/sctp: chunk_cnt can be a u16 4 months ago
decode-sll.c counters: regular counter Incr API update 11 months ago
decode-sll.h
…
decode-sll2.c counters: regular counter Incr API update 11 months ago
decode-sll2.h
…
decode-tcp.c decode/tcp: only set data ptr for valid option lengths 5 months ago
decode-tcp.h
…
decode-template.c
…
decode-template.h
…
decode-teredo.c counters: regular counter Incr API update 11 months ago
decode-teredo.h
…
decode-udp.c counters: regular counter Incr API update 11 months ago
decode-udp.h
…
decode-vlan.c decode/vlan: implement max layers for IEEE8021ah 5 months ago
decode-vlan.h
…
decode-vntag.c counters: regular counter Incr API update 11 months ago
decode-vntag.h
…
decode-vxlan.c decode/xvlan: treat as its own tunnel 8 months ago
decode-vxlan.h
…
decode.c defrag: set nb_decoded_layers 2 months ago
decode.h defrag/ipv6: support maximum payload length 2 months ago
defrag-config.c
…
defrag-config.h
…
defrag-hash.c defrag: make frag_end and tracker id conversions explicit 1 month ago
defrag-hash.h
…
defrag-stack.c
…
defrag-stack.h
…
defrag-timeout.c
…
defrag-timeout.h
…
defrag.c defrag: make frag_end and tracker id conversions explicit 1 month ago
defrag.h defrag: rearrange Frag struct to save 8 bytes 5 months ago
detect-app-layer-event.c detect/app-layer-event: support sub-state progress handling 4 months ago
detect-app-layer-event.h
…
detect-app-layer-protocol.c detect: extend app-layer-protocol to accept a pipe-separated value list 4 months ago
detect-app-layer-protocol.h detect: extend app-layer-protocol to accept a pipe-separated value list 4 months ago
detect-app-layer-state.c detect/firewall: reject unsatisfiable app-layer-state rules 3 weeks ago
detect-app-layer-state.h
…
detect-asn1.c
…
detect-asn1.h
…
detect-base64-data.c rust: bindgen SCDetectGetLastSMFromLists 9 months ago
detect-base64-data.h
…
detect-base64-decode.c rust: bindgen SCDetectGetLastSMFromLists 9 months ago
detect-base64-decode.h
…
detect-bsize.c
…
detect-bsize.h
…
detect-bypass.c detect/bypass: ban bypass keyword for firewall mode 5 months ago
detect-bypass.h
…
detect-byte-extract.c rust: bindgen SCDetectGetLastSMFromLists 9 months ago
detect-byte-extract.h
…
detect-byte.c
…
detect-byte.h
…
detect-bytejump.c detect/bytejump: validate nbytes is positive 2 months ago
detect-bytejump.h detect/byte_jump: Support bitmask value 9 months ago
detect-bytemath.c detect/bytemath: reject literal shift counts of 64 2 months ago
detect-bytemath.h
…
detect-bytetest.c src: introduce memmove wrapper using memmove_s if available 3 weeks ago
detect-bytetest.h
…
detect-classtype.c
…
detect-classtype.h
…
detect-config.c pcap-file: prep codebase for pcap_cnt move refactor 9 months ago
detect-config.h
…
detect-content.c detect/content: pretty print pattern directly 10 months ago
detect-content.h detect/content: pretty print pattern directly 10 months ago
detect-csum.c detect/csum: add igmp-csum keyword to match checksum 8 months ago
detect-csum.h
…
detect-datarep.c detect: opt-in keywords for firewall mode 5 months ago
detect-datarep.h
…
detect-dataset.c detect/dataset: add match subdomain option 5 months ago
detect-dataset.h detect/dataset: add match subdomain option 5 months ago
detect-depth.c rust: bindgen SCDetectGetLastSMFromLists 9 months ago
detect-depth.h
…
detect-detection-filter.c detect/proto: reduce size for common sigs 7 months ago
detect-detection-filter.h
…
detect-distance.c rust: bindgen SCDetectGetLastSMFromLists 9 months ago
detect-distance.h
…
detect-dnp3.c detect: bindgen more functions 6 months ago
detect-dnp3.h
…
detect-dns-name.c detect/dns: register keywords for DOH2 as well 4 months ago
detect-dns-name.h
…
detect-dns-response.c detect/dns: register keywords for DOH2 as well 4 months ago
detect-dns-response.h
…
detect-dsize.c rust: bindgen SCDetectGetLastSMFromLists 9 months ago
detect-dsize.h
…
detect-email.c smtp: add firewall progress states 4 months ago
detect-email.h
…
detect-engine-address-ipv4.c unittests: clean up memory for address tests 1 year ago
detect-engine-address-ipv4.h
…
detect-engine-address-ipv6.c detect/address: switch tests to FAIL/PASS API 12 months ago
detect-engine-address-ipv6.h
…
detect-engine-address.c detect/ipv6: classify ipv6 ranges as like_ip_only 2 months ago
detect-engine-address.h detect/ipv6: classify ipv6 ranges as like_ip_only 2 months ago
detect-engine-alert.c ssh: expose the parse failure reason and state in the eve ssh log 3 weeks ago
detect-engine-alert.h detect/alert: store sub-state in PacketAlert 4 months ago
detect-engine-analyzer.c detect/analyzer: fix swapped output file pointers 1 month ago
detect-engine-analyzer.h
…
detect-engine-buffer.c
…
detect-engine-buffer.h rust: bindgen detect ThreadCtx keyword functions 4 months ago
detect-engine-build.c detect/ipv6: classify ipv6 ranges as like_ip_only 2 months ago
detect-engine-build.h
…
detect-engine-content-inspection.c misc/cleanup: Simplify <cond> ? true : false 7 months ago
detect-engine-content-inspection.h detect/dcerpc: move stub_data keyword to rust 6 months ago
detect-engine-event.c misc/cleanup: Simplify <cond> ? true : false 7 months ago
detect-engine-event.h
…
detect-engine-file.c detect/file: reset smd iterator for each file in multi-file txs 2 months ago
detect-engine-file.h detect: convert tx_progress to uint8_t 4 months ago
detect-engine-frame.c detect/frame: fix assert 2 months ago
detect-engine-frame.h rust: bindgen frames functions 12 months ago
detect-engine-helper.c detect: add debug validation checks 4 months ago
detect-engine-helper.h detect: support per tx sub states 4 months ago
detect-engine-inspect-buffer.c detect/engine: guard SCInspectionBufferCheckAndExpand against overflow 2 months ago
detect-engine-inspect-buffer.h detect/engine: helper to know if a transform happens in-place 5 months ago
detect-engine-iponly.c detect/alert: split append func per packet/tx 4 months ago
detect-engine-iponly.h
…
detect-engine-loader.c detect/sigorder: handle allocation failure 5 months ago
detect-engine-loader.h
…
detect-engine-mpm.c detect-engine-mpm: change transforms->cnt to uint8_t 3 months ago
detect-engine-mpm.h detect: support per tx sub states 4 months ago
detect-engine-payload.c pcap-file: prep codebase for pcap_cnt move refactor 9 months ago
detect-engine-payload.h
…
detect-engine-port.c detect/port: workaround cppcheck warning 5 months ago
detect-engine-port.h
…
detect-engine-prefilter-common.c
…
detect-engine-prefilter-common.h
…
detect-engine-prefilter.c detect: honor the P+1 eof rule for generic hook list engines 3 weeks ago
detect-engine-prefilter.h detect: support per tx sub states 4 months ago
detect-engine-profile.c detect/firewall: configurable default policies 5 months ago
detect-engine-profile.h
…
detect-engine-proto.c detect: add track pkthdr as any l2 protocol 7 months ago
detect-engine-proto.h detect: add track pkthdr as any l2 protocol 7 months ago
detect-engine-register.c detect: add tcp.session keyword for unified TCP lifecycle matching 2 months ago
detect-engine-register.h detect: honor the P+1 eof rule for generic hook list engines 3 weeks ago
detect-engine-siggroup.c misc/cleanup: Simplify <cond> ? true : false 7 months ago
detect-engine-siggroup.h
…
detect-engine-sigorder.c detect/sigorder: handle allocation failure 5 months ago
detect-engine-sigorder.h detect/sigorder: handle allocation failure 5 months ago
detect-engine-state.c detect/dcerpc: move dcepayload unit tests to SV 6 months ago
detect-engine-state.h
…
detect-engine-tag.c storage: prefix core API with SC 7 months ago
detect-engine-tag.h
…
detect-engine-threshold.c detect/threshold: bound the per-thread decision cache 2 months ago
detect-engine-threshold.h threshold: use seed consistently in hashing 5 months ago
detect-engine-uint.c misc/cleanup: Simplify <cond> ? true : false 7 months ago
detect-engine-uint.h
…
detect-engine.c detect: make the completion state final at the end state 3 weeks ago
detect-engine.h detect: honor the P+1 eof rule for generic hook list engines 3 weeks ago
detect-entropy.c util/var: add NULL check in VarNameStoreRegister 1 year ago
detect-entropy.h
…
detect-etherhdr.c detect/doc: fix broken anchor links 6 months ago
detect-etherhdr.h detect: add ether.hdr keyword 7 months ago
detect-fast-pattern.c rust: bindgen SCDetectGetLastSMFromLists 9 months ago
detect-fast-pattern.h
…
detect-file-data.c src: remove unused variables 4 weeks ago
detect-file-data.h detect/file.data: reduce scope for MPM datatype 4 months ago
detect-file-hash-common.c
…
detect-file-hash-common.h
…
detect-filemagic.c detect/file: register http/2 with sub-state 4 months ago
detect-filemagic.h
…
detect-filemd5.c
…
detect-filemd5.h
…
detect-filename.c src: remove unused variables 4 weeks ago
detect-filename.h
…
detect-filesha1.c
…
detect-filesha1.h
…
detect-filesha256.c
…
detect-filesha256.h
…
detect-filesize.c detect/file: filesize does not support multi integer 4 months ago
detect-filesize.h
…
detect-filestore.c rust: bindgen functions neede for features 12 months ago
detect-filestore.h
…
detect-flow-age.c
…
detect-flow-age.h
…
detect-flow-elephant.c misc/cleanup: Simplify <cond> ? true : false 7 months ago
detect-flow-elephant.h detect/flow: add support for elephant flow detection 10 months ago
detect-flow-pkts.c misc/cleanup: Simplify <cond> ? true : false 7 months ago
detect-flow-pkts.h
…
detect-flow.c misc/cleanup: Simplify <cond> ? true : false 7 months ago
detect-flow.h
…
detect-flowbits.c detect/flowbits: store iid and sid in analyzer 3 months ago
detect-flowbits.h detect/flowbits: store iid and sid in analyzer 3 months ago
detect-flowint.c detect/sigorder: handle allocation failure 5 months ago
detect-flowint.h
…
detect-flowvar.c detect/flowvar: help gcc -fanalyzer 5 months ago
detect-flowvar.h
…
detect-fragbits.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-fragbits.h detect/ipv4: make fragbits a generic uint16 bitflags keyword 1 year ago
detect-fragoffset.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-fragoffset.h detect: fragoffset is now a generic integer 12 months ago
detect-frame.c frames: make sure we use a lowercase buffer name 5 months ago
detect-frame.h
…
detect-ftp-command-data.c ftp: mark ftp.command_data as firewall supported 4 months ago
detect-ftp-command-data.h
…
detect-ftp-command.c ftp: mark ftp.command as firewall supported 4 months ago
detect-ftp-command.h
…
detect-ftp-completion-code.c ftp: register ftp.completion_code at response_complete 4 months ago
detect-ftp-completion-code.h
…
detect-ftp-dynamic-port.c ftp: don't match unset ftp.dynamic_port 4 months ago
detect-ftp-dynamic-port.h
…
detect-ftp-mode.c ftp: register ftp.mode at response_complete 4 months ago
detect-ftp-mode.h
…
detect-ftp-reply-received.c ftp: mark ftp.reply_received as firewall supported 4 months ago
detect-ftp-reply-received.h
…
detect-ftp-reply.c ftp: mark ftp.reply as firewall supported 4 months ago
detect-ftp-reply.h
…
detect-ftpbounce.c ftp: mark ftpbounce as firewall supported 4 months ago
detect-ftpbounce.h
…
detect-ftpdata.c ftp: support STOU data transfers 4 months ago
detect-ftpdata.h
…
detect-geoip.c detect/geoip: do not require packet 7 months ago
detect-geoip.h
…
detect-gid.c src: doc: remove more double-space typos 10 months ago
detect-gid.h
…
detect-hostbits.c storage: prefix core API with SC 7 months ago
detect-hostbits.h
…
detect-http-accept-enc.c
…
detect-http-accept-enc.h
…
detect-http-accept-lang.c
…
detect-http-accept-lang.h
…
detect-http-accept.c
…
detect-http-accept.h
…
detect-http-client-body.c detect/http: register keywords for HTTP/2 4 months ago
detect-http-client-body.h
…
detect-http-connection.c
…
detect-http-connection.h
…
detect-http-content-len.c
…
detect-http-content-len.h
…
detect-http-content-type.c
…
detect-http-content-type.h
…
detect-http-cookie.c detect/http: register keywords for HTTP/2 4 months ago
detect-http-cookie.h
…
detect-http-header-common.c rust: bindgen detect ThreadCtx keyword functions 4 months ago
detect-http-header-common.h detect/http: remove unused function parameter 9 months ago
detect-http-header-names.c detect/http: register keywords for HTTP/2 4 months ago
detect-http-header-names.h
…
detect-http-header.c detect/http: register keywords for HTTP/2 4 months ago
detect-http-header.h
…
detect-http-headers-stub.h detect/http: register keywords for HTTP/2 4 months ago
detect-http-headers.c
…
detect-http-headers.h
…
detect-http-host.c detect/http: register keywords for HTTP/2 4 months ago
detect-http-host.h
…
detect-http-location.c
…
detect-http-location.h
…
detect-http-method.c detect/http: register keywords for HTTP/2 4 months ago
detect-http-method.h
…
detect-http-protocol.c http2: rename state *start to *started 4 months ago
detect-http-protocol.h
…
detect-http-raw-header.c detect/http: register keywords for HTTP/2 4 months ago
detect-http-raw-header.h
…
detect-http-referer.c
…
detect-http-referer.h
…
detect-http-request-line.c detect/http: register keywords for HTTP/2 4 months ago
detect-http-request-line.h
…
detect-http-response-line.c detect/http: register keywords for HTTP/2 4 months ago
detect-http-response-line.h
…
detect-http-server-body.c detect/doc: fix broken anchor links 6 months ago
detect-http-server-body.h
…
detect-http-server.c
…
detect-http-server.h
…
detect-http-start.c rust: bindgen detect ThreadCtx keyword functions 4 months ago
detect-http-start.h
…
detect-http-stat-code.c detect/http: register keywords for HTTP/2 4 months ago
detect-http-stat-code.h
…
detect-http-stat-msg.c http2: rename state *start to *started 4 months ago
detect-http-stat-msg.h
…
detect-http-ua.c detect/http: register keywords for HTTP/2 4 months ago
detect-http-ua.h
…
detect-http-uri.c detect/http: register keywords for HTTP/2 4 months ago
detect-http-uri.h
…
detect-http2.c http2: split transaction state machines 4 months ago
detect-http2.h
…
detect-icmp-id.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-icmp-id.h detect: icmp_id is now a generic integer 12 months ago
detect-icmp-seq.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-icmp-seq.h detect: icmp_seq is now a generic integer 12 months ago
detect-icmpv4hdr.c detect: bindgen more functions 6 months ago
detect-icmpv4hdr.h
…
detect-icmpv6-mtu.c detect/doc: fix broken anchor links 6 months ago
detect-icmpv6-mtu.h
…
detect-icmpv6hdr.c detect/doc: fix broken anchor links 6 months ago
detect-icmpv6hdr.h
…
detect-icode.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-icode.h
…
detect-id.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-id.h detect: id is now a generic integer 12 months ago
detect-igmp-type.c detect/doc: fix broken anchor links 6 months ago
detect-igmp-type.h detect: add igmp.type keyword 8 months ago
detect-igmphdr.c detect: bindgen more functions 6 months ago
detect-igmphdr.h detect: add igmp.hdr keyword 8 months ago
detect-ipaddr.c detect: bindgen more functions 6 months ago
detect-ipaddr.h
…
detect-ipopts.c detect/ipopts: add qs and rtralt options 8 months ago
detect-ipopts.h
…
detect-ipproto.c detect/ip_proto: clean up parsing function 5 months ago
detect-ipproto.h
…
detect-iprep.c detect/iprep: mark as supported for firewall mode 8 months ago
detect-iprep.h
…
detect-ipv4hdr.c detect/doc: fix broken anchor links 6 months ago
detect-ipv4hdr.h
…
detect-ipv6hdr.c detect/doc: fix broken anchor links 6 months ago
detect-ipv6hdr.h
…
detect-isdataat.c rust: bindgen SCDetectGetLastSMFromLists 9 months ago
detect-isdataat.h
…
detect-itype.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-itype.h
…
detect-ja4-hash.c tls: make the client states active phases 3 weeks ago
detect-ja4-hash.h
…
detect-l3proto.c detect/proto: reduce size for common sigs 7 months ago
detect-l3proto.h
…
detect-lua-extensions.c
…
detect-lua-extensions.h
…
detect-lua.c tls: make the server states active phases 3 weeks ago
detect-lua.h detect/lua: move allow_restricted_functions out of struct 5 months ago
detect-mark.c src: doc: remove double-space typos 10 months ago
detect-mark.h
…
detect-metadata.c detect/metadata: add debug validation 8 months ago
detect-metadata.h
…
detect-msg.c detect/msg: avoid temporary stack buffer 12 months ago
detect-msg.h
…
detect-noalert.c
…
detect-noalert.h
…
detect-nocase.c rust: bindgen SCDetectGetLastSMFromLists 9 months ago
detect-nocase.h
…
detect-offset.c rust: bindgen SCDetectGetLastSMFromLists 9 months ago
detect-offset.h
…
detect-parse.c detect: log the hook for sub-state firewall rules 3 weeks ago
detect-parse.h firewall: share the generic app hook name helper 2 months ago
detect-pcre.c detect/pcre: skip flow captures on flowless packets 2 months ago
detect-pcre.h detect/engine-analyzer: add note for pcre with \X 4 months ago
detect-pkt-data.c
…
detect-pkt-data.h
…
detect-pktvar.c src: check retval of VarNameStoreRegister 12 months ago
detect-pktvar.h
…
detect-prefilter.c detect: extend app-layer-protocol to accept a pipe-separated value list 4 months ago
detect-prefilter.h
…
detect-priority.c
…
detect-priority.h
…
detect-rawbytes.c
…
detect-rawbytes.h
…
detect-reference.c detect/reference: set key on the unknown-key path 2 months ago
detect-reference.h
…
detect-replace.c detect: ban `replace` keyword for firewall mode 5 months ago
detect-replace.h
…
detect-requires.c detect/doc: fix broken files links 6 months ago
detect-requires.h
…
detect-rev.c
…
detect-rev.h
…
detect-rpc.c counters: remove ThreadVars from API 11 months ago
detect-rpc.h
…
detect-sameip.c counters: remove ThreadVars from API 11 months ago
detect-sameip.h
…
detect-sctp-chunk-cnt.c decode/sctp: chunk_cnt can be a u16 4 months ago
detect-sctp-chunk-cnt.h detect/sctp: add sctp.chunk_cnt keyword 5 months ago
detect-sctp-chunk-data.c detect/sctp: add sctp.chunk_data sticky buffer 5 months ago
detect-sctp-chunk-data.h detect/sctp: add sctp.chunk_data sticky buffer 5 months ago
detect-sctp-chunk-type.c detect/sctp: sctp.chunk_type does not support multi integer 4 months ago
detect-sctp-chunk-type.h detect/sctp: add sctp.chunk_type keyword 5 months ago
detect-sctp-vtag.c detect/sctp: add sctp.vtag keyword 5 months ago
detect-sctp-vtag.h detect/sctp: add sctp.vtag keyword 5 months ago
detect-sctphdr.c detect/sctp: add sctp.hdr sticky buffer 5 months ago
detect-sctphdr.h detect/sctp: add sctp.hdr sticky buffer 5 months ago
detect-sid.c
…
detect-sid.h
…
detect-sip-method.c detect: bindgen more functions 6 months ago
detect-sip-method.h
…
detect-sip-uri.c detect: bindgen more functions 6 months ago
detect-sip-uri.h
…
detect-smtp.c detect: bindgen more functions 6 months ago
detect-smtp.h
…
detect-ssl-state.c detect: honor the P+1 eof rule for generic hook list engines 3 weeks ago
detect-ssl-state.h
…
detect-ssl-version.c detect: honor the P+1 eof rule for generic hook list engines 3 weeks ago
detect-ssl-version.h detect/ssl: properly handle negation in ssl_version keyword 11 months ago
detect-stream_size.c misc/cleanup: Simplify <cond> ? true : false 7 months ago
detect-stream_size.h
…
detect-tag.c
…
detect-tag.h src: remove unused enum values 9 months ago
detect-target.c
…
detect-target.h
…
detect-tcp-ack.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-tcp-ack.h detect: tcp.ack is now a generic integer 12 months ago
detect-tcp-flags.c detect/tcp: opt-in tcp.flags for firewall mode 5 months ago
detect-tcp-flags.h detect/tcp: make tcp.flags a generic integer with bitflags 1 year ago
detect-tcp-seq.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-tcp-seq.h detect: tcp.seq is now a generic integer 12 months ago
detect-tcp-session.c detect: add tcp.session keyword for unified TCP lifecycle matching 2 months ago
detect-tcp-session.h detect: add tcp.session keyword for unified TCP lifecycle matching 2 months ago
detect-tcp-window.c detect: tcp.window is now a generic integer 12 months ago
detect-tcp-window.h detect: tcp.window is now a generic integer 12 months ago
detect-tcp-wscale.c detect/doc: fix broken anchor links 6 months ago
detect-tcp-wscale.h
…
detect-tcphdr.c detect/doc: fix broken anchor links 6 months ago
detect-tcphdr.h
…
detect-tcpmss.c detect/doc: fix broken anchor links 6 months ago
detect-tcpmss.h
…
detect-template.c detect/template: merge template and template2 7 months ago
detect-template.h detect/template: merge template and template2 7 months ago
detect-threshold.c detect/threshold: fix unittests for storage based cache 5 months ago
detect-threshold.h detect/detection_filter: add unique_on option 9 months ago
detect-tls-alpn.c tls: make the client states active phases 3 weeks ago
detect-tls-alpn.h
…
detect-tls-cert-fingerprint.c tls: make the server states active phases 3 weeks ago
detect-tls-cert-fingerprint.h
…
detect-tls-cert-issuer.c tls: make the server states active phases 3 weeks ago
detect-tls-cert-issuer.h
…
detect-tls-cert-serial.c tls: make the server states active phases 3 weeks ago
detect-tls-cert-serial.h
…
detect-tls-cert-subject.c tls: make the server states active phases 3 weeks ago
detect-tls-cert-subject.h
…
detect-tls-cert-validity.c tls: make the server states active phases 3 weeks ago
detect-tls-cert-validity.h
…
detect-tls-certs.c tls: make the server states active phases 3 weeks ago
detect-tls-certs.h
…
detect-tls-ja3-hash.c tls: make the client states active phases 3 weeks ago
detect-tls-ja3-hash.h
…
detect-tls-ja3-string.c tls: make the client states active phases 3 weeks ago
detect-tls-ja3-string.h
…
detect-tls-ja3s-hash.c detect/doc: fix broken files links 6 months ago
detect-tls-ja3s-hash.h
…
detect-tls-ja3s-string.c detect/doc: fix broken files links 6 months ago
detect-tls-ja3s-string.h
…
detect-tls-random.c tls: make the client states active phases 3 weeks ago
detect-tls-random.h
…
detect-tls-sni.c tls: make the client states active phases 3 weeks ago
detect-tls-sni.h
…
detect-tls-subjectaltname.c tls: make the server states active phases 3 weeks ago
detect-tls-subjectaltname.h
…
detect-tls-version.c detect: honor the P+1 eof rule for generic hook list engines 3 weeks ago
detect-tls-version.h detect: honor the P+1 eof rule for generic hook list engines 3 weeks ago
detect-tls.c tls: make the server states active phases 3 weeks ago
detect-tls.h
…
detect-tos.c
…
detect-tos.h
…
detect-transform-luaxform.c detect/transforms: constify some callbacks arguments 7 months ago
detect-transform-luaxform.h
…
detect-transform-pcrexform.c detect/doc: fix broken anchor links 6 months ago
detect-transform-pcrexform.h
…
detect-ttl.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-ttl.h
…
detect-udphdr.c detect/doc: fix broken anchor links 6 months ago
detect-udphdr.h
…
detect-uricontent.c src: remove unused variables 4 weeks ago
detect-uricontent.h
…
detect-urilen.c detect: enable pcre and urilen for firewall mode 7 months ago
detect-urilen.h
…
detect-vlan.c detect/vlan: move vlan.id keyword to generic integer 12 months ago
detect-vlan.h
…
detect-within.c rust: bindgen SCDetectGetLastSMFromLists 9 months ago
detect-within.h
…
detect-xbits.c storage: prefix core API with SC 7 months ago
detect-xbits.h
…
detect.c detect: honor the P+1 eof rule for generic hook list engines 3 weeks ago
detect.h detect: log the hook for sub-state firewall rules 3 weeks ago
device-storage.c storage: prefix core API with SC 7 months ago
device-storage.h device/storage: prefix API with SC 7 months ago
feature.c features: use strcmp instead of memcmp 10 months ago
feature.h rust: bindgen functions neede for features 12 months ago
flow-bindgen.h flow: add accessors for flow addresses 2 months ago
flow-bit.c flowbits: deprecate toggle command 5 months ago
flow-bit.h flowbits: deprecate toggle command 5 months ago
flow-bypass.c bypass: fix BypassManager BypassedCheckFunc check 6 months ago
flow-bypass.h
…
flow-callbacks.c
…
flow-callbacks.h rust: bindgen flow lifecycle callbacks 6 months ago
flow-hash.c flow/esp: use spi in hash 2 months ago
flow-hash.h
…
flow-manager.c ssh: expose the parse failure reason and state in the eve ssh log 3 weeks ago
flow-manager.h
…
flow-private.h flow-timeout: Use yaml config value for CAPTURE_BYPASSED flow 1 year ago
flow-queue.c
…
flow-queue.h
…
flow-spare-pool.c
…
flow-spare-pool.h
…
flow-storage.c flow-storage: include cleanup 2 months ago
flow-storage.h rust/ffi: bindgen flow storage 2 months ago
flow-timeout.c flow: also do final flow reassembly for flows stranded on the evicted list 4 weeks ago
flow-timeout.h
…
flow-util.c packet: store livedev by id 5 months ago
flow-util.h flow: store livedev by id 5 months ago
flow-var.c
…
flow-var.h
…
flow-worker.c ssh: expose the parse failure reason and state in the eve ssh log 3 weeks ago
flow-worker.h output/flush: Remove pkt-based flush logic 7 months ago
flow.c ssh: expose the parse failure reason and state in the eve ssh log 3 weeks ago
flow.h ssh: expose the parse failure reason and state in the eve ssh log 3 weeks ago
host-bit.c storage: prefix core API with SC 7 months ago
host-bit.h
…
host-queue.c
…
host-queue.h
…
host-storage.c storage: prefix core API with SC 7 months ago
host-storage.h host/storage: prefix API with SC 7 months ago
host-timeout.c
…
host-timeout.h
…
host.c conf: uses SCConfGetNonNull 5 months ago
host.h
…
interval-tree.h
…
ippair-bit.c storage: prefix core API with SC 7 months ago
ippair-bit.h
…
ippair-queue.c
…
ippair-queue.h
…
ippair-storage.c storage: prefix core API with SC 7 months ago
ippair-storage.h ippair/storage: prefix API with SC 7 months ago
ippair-timeout.c
…
ippair-timeout.h
…
ippair.c ippair: check ip family when comparing 4 months ago
ippair.h
…
log-maintenance.c util/log: rotate log file periodically 5 months ago
log-maintenance.h util/log: rotate log file periodically 5 months ago
log-pcap.c pcap/log: expand buffer before write in PcapLogSegmentCallback 2 months ago
log-pcap.h
…
log-stats.c
…
log-stats.h
…
log-tcp-data.c log/tcp-data: replace BUG_ON with graceful error handling 2 months ago
log-tcp-data.h
…
log-tlsstore.c pcap-file: prep codebase for pcap_cnt move refactor 9 months ago
log-tlsstore.h
…
main.c suricata: add error about missing runmode 5 months ago
output-eve-bindgen.h output-eve: bindgen SCEveFileType callback types 9 months ago
output-eve-null.c
…
output-eve-null.h
…
output-eve-stream.c output/flush: Remove flush functions/registration 7 months ago
output-eve-stream.h
…
output-eve-syslog.c
…
output-eve-syslog.h
…
output-eve.c output-eve: rust.h include is no longer needed 6 months ago
output-eve.h output-eve: finish exposing to bindgen 9 months ago
output-file.c http-log: remove support for http-log 5 months ago
output-file.h
…
output-filedata.c http-log: remove support for http-log 5 months ago
output-filedata.h
…
output-filestore.c output/filestore: refactor file descriptor handling 5 months ago
output-filestore.h
…
output-flow.c http-log: remove support for http-log 5 months ago
output-flow.h
…
output-json-alert.c detect: log the hook for sub-state firewall rules 3 weeks ago
output-json-alert.h eve/verdict: more explicit pass handling 12 months ago
output-json-anomaly.c app-layer: treat pstate as non-NULL 4 months ago
output-json-anomaly.h
…
output-json-arp.c output/flush: Remove flush functions/registration 7 months ago
output-json-arp.h
…
output-json-common.c output/flush: Remove flush functions/registration 7 months ago
output-json-dcerpc.c
…
output-json-dcerpc.h
…
output-json-dhcp.c dhcp: standardize output code 7 months ago
output-json-dhcp.h
…
output-json-dnp3-objects.c
…
output-json-dnp3-objects.h
…
output-json-dnp3.c dnp3: preserve events when no current tx 2 months ago
output-json-dnp3.h
…
output-json-dns.c output/tx: allow registering logging at substate 4 months ago
output-json-dns.h
…
output-json-drop.c eve/drop: minor code cleanup 6 months ago
output-json-drop.h
…
output-json-email-common.c flow: include cleanup 2 months ago
output-json-email-common.h
…
output-json-file.c flow: include cleanup 2 months ago
output-json-file.h
…
output-json-flow.c flow: store livedev by id 5 months ago
output-json-flow.h
…
output-json-frame.c output/flush: Remove flush functions/registration 7 months ago
output-json-frame.h
…
output-json-ftp.c
…
output-json-ftp.h
…
output-json-http.c output/http: log content-type like other headers 12 months ago
output-json-http.h
…
output-json-ike.c detect/ike: move ike.ike.chosen_sa_attribute keyword to rust 8 months ago
output-json-ike.h
…
output-json-llmnr.c llmnr: implement logger 5 months ago
output-json-llmnr.h llmnr: implement logger 5 months ago
output-json-mdns.c
…
output-json-mdns.h
…
output-json-metadata.c output/flush: Remove flush functions/registration 7 months ago
output-json-metadata.h
…
output-json-mqtt.c
…
output-json-mqtt.h
…
output-json-netflow.c flow: store livedev by id 5 months ago
output-json-netflow.h
…
output-json-nfs.c
…
output-json-nfs.h
…
output-json-pgsql.c
…
output-json-pgsql.h
…
output-json-smb.c
…
output-json-smb.h
…
output-json-smtp.c output-json: avoid freeing caller-owned JSON builder 5 months ago
output-json-smtp.h
…
output-json-stats.c
…
output-json-stats.h
…
output-json-tls.c tls: make the server states active phases 3 weeks ago
output-json-tls.h
…
output-json.c output/json: add sctp metadata to alerts 5 months ago
output-json.h output/flush: Remove flush functions/registration 7 months ago
output-lua.c tls: make the server states active phases 3 weeks ago
output-lua.h
…
output-packet.c debug/validate: remove redundant checks 5 months ago
output-packet.h
…
output-stats.c http-log: remove support for http-log 5 months ago
output-stats.h
…
output-streaming.c http-log: remove support for http-log 5 months ago
output-streaming.h
…
output-tx.c ssh: expose the parse failure reason and state in the eve ssh log 3 weeks ago
output-tx.h output/tx: allow registering logging at substate 4 months ago
output.c output/tx: allow registering logging at substate 4 months ago
output.h output/tx: allow registering logging at substate 4 months ago
packet-queue.c
…
packet-queue.h
…
packet.c decode: propagate PacketAlertCreate failure instead of crashing 5 months ago
packet.h decode: propagate PacketAlertCreate failure instead of crashing 5 months ago
pkt-var.c
…
pkt-var.h
…
queue.h
…
reputation.c conf: uses SCConfGetNonNull 5 months ago
reputation.h rust: bindgen SCSRepCatGetByShortname 12 months ago
respond-reject-libnet11.c respond/reject: guard Ethernet setup against non-Ethernet packets 2 months ago
respond-reject-libnet11.h
…
respond-reject.c
…
respond-reject.h
…
runmode-af-packet.c http-log: remove support for http-log 5 months ago
runmode-af-packet.h
…
runmode-af-xdp.c http-log: remove support for http-log 5 months ago
runmode-af-xdp.h
…
runmode-dpdk.c respond/reject: use livedev in bridge mode 5 months ago
runmode-dpdk.h
…
runmode-erf-dag.c
…
runmode-erf-dag.h
…
runmode-erf-file.c conf: uses SCConfGetNonNull 5 months ago
runmode-erf-file.h
…
runmode-ipfw.c
…
runmode-ipfw.h
…
runmode-lib.c lib: remove the built-in library run-mode 8 months ago
runmode-lib.h lib: remove the built-in library run-mode 8 months ago
runmode-netmap.c respond/reject: use livedev in bridge mode 5 months ago
runmode-netmap.h
…
runmode-nflog.c
…
runmode-nflog.h
…
runmode-nfq.c
…
runmode-nfq.h
…
runmode-pcap-file.c conf: uses SCConfGetNonNull 5 months ago
runmode-pcap-file.h
…
runmode-pcap.c conf: uses SCConfGetNonNull 5 months ago
runmode-pcap.h
…
runmode-unittests.c util: remove memrchr 4 weeks ago
runmode-unittests.h
…
runmode-unix-socket.c hs: prune stale MPM cache files 9 months ago
runmode-unix-socket.h
…
runmode-windivert.c
…
runmode-windivert.h
…
runmodes.c src: remove unused variables 4 weeks ago
runmodes.h frames: add --list-app-layer-frames option 10 months ago
rust.h rust/ffi: move STREAM_ constants to ffi crate 7 months ago
source-af-packet.c src: introduce memmove wrapper using memmove_s if available 3 weeks ago
source-af-packet.h packet: track outgoing livedev id 5 months ago
source-af-xdp.c packet: store livedev by id 5 months ago
source-af-xdp.h af-xdp: address compile warnings 8 months ago
source-dpdk.c packet: store livedev by id 5 months ago
source-dpdk.h dpdk: move to native queue-sized mempools 6 months ago
source-erf-dag.c source/erf: Handle ERF META and PAD record types and extension headers 2 months ago
source-erf-dag.h
…
source-erf-file.c source/erf: Handle ERF META and PAD record types and extension headers 2 months ago
source-erf-file.h
…
source-ipfw.c counters: remove ThreadVars from sync API 11 months ago
source-ipfw.h
…
source-lib.c src: remove unused variables 4 weeks ago
source-lib.h
…
source-netmap.c packet: store livedev by id 5 months ago
source-netmap.h
…
source-nflog.c counters: remove ThreadVars from counter registration 11 months ago
source-nflog.h
…
source-nfq-prototypes.h
…
source-nfq.c nfq: suppress gcc analyzer warnings 5 months ago
source-nfq.h
…
source-pcap-file-directory-helper.c util/path: handle missing d_type definitions on Solaris 5 months ago
source-pcap-file-directory-helper.h
…
source-pcap-file-helper.c pcap-file: skip setvbuf on non-seekable streams 5 months ago
source-pcap-file-helper.h pcap: refactor delete-when-done to support non-alerts 8 months ago
source-pcap-file.c pcap-file: skip setvbuf on non-seekable streams 5 months ago
source-pcap-file.h
…
source-pcap.c packet: store livedev by id 5 months ago
source-pcap.h pcap: refactor delete-when-done to support non-alerts 8 months ago
source-windivert-prototypes.h
…
source-windivert.c windivert: upgrade to 2.0.0 11 months ago
source-windivert.h
…
stream-tcp-cache.c
…
stream-tcp-cache.h
…
stream-tcp-inline.c
…
stream-tcp-inline.h
…
stream-tcp-list.c counters: regular counter Incr API update 11 months ago
stream-tcp-list.h
…
stream-tcp-private.h pcap-file: prep codebase for pcap_cnt move refactor 9 months ago
stream-tcp-reassemble.c ssh: expose the parse failure reason and state in the eve ssh log 3 weeks ago
stream-tcp-reassemble.h misc/cleanup: Simplify <cond> ? true : false 7 months ago
stream-tcp-sack.c pcap-file: prep codebase for pcap_cnt move refactor 9 months ago
stream-tcp-sack.h
…
stream-tcp-util.c
…
stream-tcp-util.h
…
stream-tcp.c cppcheck: drop unreachable DEBUG_VALIDATE_BUG_ONs 1 month ago
stream-tcp.h counters: move regular counter id to dedicated type 11 months ago
stream.c
…
stream.h
…
suricata-common.h src: introduce memmove wrapper using memmove_s if available 3 weeks ago
suricata-plugin.h plugins: update SC_API_VERSION to 9 1 year ago
suricata.c suricata: bound stack trace formatting in signal handler 2 months ago
suricata.h suricata: add error about missing runmode 5 months ago
thread-callbacks.c
…
thread-callbacks.h rust/ffi: bindgen thread lifecycle callbacks 5 months ago
thread-storage.c storage: prefix core API with SC 7 months ago
thread-storage.h rust/ffi: bindgen thread storage 5 months ago
threads-debug.h detect/dbv: Assert MT lock held 1 year ago
threads-profile.h detect/dbv: Assert MT lock held 1 year ago
threads.c thread/storage: prefix API with SC 7 months ago
threads.h build/solaris: use __sun and Solaris byteorder helpers 5 months ago
threadvars.c threads: add threadvars allocator and free func 5 months ago
threadvars.h threads: add threadvars allocator and free func 5 months ago
tm-modules.c
…
tm-modules.h
…
tm-queuehandlers.c
…
tm-queuehandlers.h
…
tm-queues.c tm/queues: assist gcc -fanalyzer 5 months ago
tm-queues.h
…
tm-threads-common.h
…
tm-threads.c threads: destroy pthread_attr_t before reuse 2 months ago
tm-threads.h threads: remove thread group name logic 11 months ago
tmqh-flow.c conf: uses SCConfGetNonNull 5 months ago
tmqh-flow.h
…
tmqh-packetpool.c
…
tmqh-packetpool.h
…
tmqh-simple.c counters: remove ThreadVars from sync API 11 months ago
tmqh-simple.h
…
tree.h
…
tx-bit.c rust: move AppLayerTxData definition to C 9 months ago
tx-bit.h
…
unix-manager.c unix-socket: close socket and remove socket file on shutdown 2 months ago
unix-manager.h
…
util-action.c
…
util-action.h
…
util-affinity.c affinity: handle NULL set name from --set affinity path 2 months ago
util-affinity.h build/solaris: use __sun and Solaris byteorder helpers 5 months ago
util-atomic.c
…
util-atomic.h
…
util-bpf.c conf: uses SCConfGetNonNull 5 months ago
util-bpf.h
…
util-buffer.c
…
util-buffer.h
…
util-byte.c util: remove unneeded stack allocation in HexToRaw 8 months ago
util-byte.h build/solaris: use __sun and Solaris byteorder helpers 5 months ago
util-checksum.c
…
util-checksum.h
…
util-cidr.c
…
util-cidr.h
…
util-classification-config.c conf: uses SCConfGetNonNull 5 months ago
util-classification-config.h
…
util-clock.h
…
util-conf.c conf: uses SCConfGetNonNull 5 months ago
util-conf.h
…
util-config.h
…
util-coredump-config.c
…
util-coredump-config.h
…
util-cpu.c util/cpu: enable SPARC misalignment emulation at startup 5 months ago
util-cpu.h util/cpu: enable SPARC misalignment emulation at startup 5 months ago
util-daemon.c conf: uses SCConfGetNonNull 5 months ago
util-daemon.h
…
util-datalink.c
…
util-datalink.h
…
util-debug-filters.c
…
util-debug-filters.h
…
util-debug.c conf: uses SCConfGetNonNull 5 months ago
util-debug.h main/options: display level name, not numeric 11 months ago
util-detect.c
…
util-detect.h
…
util-device-private.h
…
util-device.c device: add get id func 5 months ago
util-device.h device: add get id func 5 months ago
util-dpdk-bonding.c dpdk: scale mempool size to the number of bond members 8 months ago
util-dpdk-bonding.h dpdk: scale mempool size to the number of bond members 8 months ago
util-dpdk-common.c
…
util-dpdk-common.h dpdk: scale mempool size to the number of bond members 8 months ago
util-dpdk-i40e.c
…
util-dpdk-i40e.h
…
util-dpdk-ice.c
…
util-dpdk-ice.h
…
util-dpdk-ixgbe.c
…
util-dpdk-ixgbe.h
…
util-dpdk-mlx5.c
…
util-dpdk-mlx5.h
…
util-dpdk-rss.c
…
util-dpdk-rss.h
…
util-dpdk.c
…
util-dpdk.h
…
util-ebpf.c c/ebpf: do not include autoconf.h 4 weeks ago
util-ebpf.h ebpf: check maps compatibility 8 months ago
util-enum.c
…
util-enum.h
…
util-error.c
…
util-error.h
…
util-exception-policy-types.h devguide: add chapter about exception policies 9 months ago
util-exception-policy.c exceptions: add dedicated flow drop reason 5 months ago
util-exception-policy.h misc: update copyright years 8 months ago
util-file-decompression.c swf: validate configured depth limits 2 months ago
util-file-decompression.h swf: validate configured depth limits 2 months ago
util-file-swf-decompression.c cppcheck: drop unreachable DEBUG_VALIDATE_BUG_ONs 1 month ago
util-file-swf-decompression.h swf: validate configured depth limits 2 months ago
util-file.c util/file: add unit test for inspect window overflow 3 months ago
util-file.h util/file: add unit test for inspect window overflow 3 months ago
util-fix_checksum.c
…
util-fix_checksum.h
…
util-flow-rate.c flow/rate: fix ring flushing 2 months ago
util-flow-rate.h flow/storage: prefix API with SC 7 months ago
util-fmemopen.c
…
util-fmemopen.h
…
util-hash-lookup3.c
…
util-hash-lookup3.h
…
util-hash-string.c string-hash: use strcmp instead of memcmp 10 months ago
util-hash-string.h
…
util-hash.c hash: allow registing with a seed value 5 months ago
util-hash.h hash: allow registing with a seed value 5 months ago
util-hashlist.c
…
util-hashlist.h
…
util-host-info.c
…
util-host-info.h
…
util-host-os-info.c
…
util-host-os-info.h
…
util-hugepages.c misc/cleanup: Simplify <cond> ? true : false 7 months ago
util-hugepages.h
…
util-hyperscan.c hyperscan: move error logging for hs_compile 10 months ago
util-hyperscan.h hyperscan: move error logging for hs_compile 10 months ago
util-ioctl.c util-ioctl: add missing socket() error logging 4 weeks ago
util-ioctl.h
…
util-ip.c
…
util-ip.h
…
util-ja3.c detect: bindgen more functions 6 months ago
util-ja3.h
…
util-landlock.c conf: uses SCConfGetNonNull 5 months ago
util-landlock.h
…
util-log-redis.c util/log-redis: guard SCCalloc result for redis stream format 5 months ago
util-log-redis.h redis: Add authentication support 9 months ago
util-logopenfile.c logging: prevent double-free multi-threaded logging 2 months ago
util-logopenfile.h util/log: rotate log file periodically 5 months ago
util-lua-base64lib.c
…
util-lua-base64lib.h
…
util-lua-builtins.c ntp: expose logged fields to lua 6 months ago
util-lua-builtins.h
…
util-lua-bytevarlib.c lua: validate signature argument to bytevar.map 2 months ago
util-lua-bytevarlib.h
…
util-lua-common.c
…
util-lua-common.h
…
util-lua-config.c
…
util-lua-config.h
…
util-lua-dataset.c lua/dataset: avoid uninitialized pointer use 2 months ago
util-lua-dataset.h
…
util-lua-dnp3-objects.c
…
util-lua-dnp3-objects.h
…
util-lua-dnp3.c
…
util-lua-dnp3.h
…
util-lua-dns.c
…
util-lua-dns.h
…
util-lua-filelib.c
…
util-lua-filelib.h
…
util-lua-flowintlib.c lua: add bounds checks for flowints and flowvars 5 months ago
util-lua-flowintlib.h
…
util-lua-flowlib.c lua: type-check userdata in flow, packet and dataset methods 2 months ago
util-lua-flowlib.h
…
util-lua-flowvarlib.c lua/flowvarlib: sanitize length in LuaFlowvarSet() 2 months ago
util-lua-flowvarlib.h
…
util-lua-hashlib.c lua/hashlib: don't expose the hasher garbage collector 2 months ago
util-lua-hashlib.h
…
util-lua-http.c
…
util-lua-http.h
…
util-lua-ja3.c
…
util-lua-ja3.h
…
util-lua-log.c misc/cleanup: Simplify <cond> ? true : false 7 months ago
util-lua-log.h
…
util-lua-ntp.c ntp: expose logged fields to lua 6 months ago
util-lua-ntp.h ntp: expose logged fields to lua 6 months ago
util-lua-packetlib.c lua: type-check userdata in flow, packet and dataset methods 2 months ago
util-lua-packetlib.h
…
util-lua-rule.c
…
util-lua-rule.h
…
util-lua-sandbox.c lua: enforce allocation limit on first alloc 5 months ago
util-lua-sandbox.h lua/sandbox: allow disabling the bytes limit 10 months ago
util-lua-smtp.c lua/smtp: avoid infinite loop for get_mime_list 2 months ago
util-lua-smtp.h
…
util-lua-ssh.c detect/ssh: move ssh.hassh to rust 9 months ago
util-lua-ssh.h
…
util-lua-tls.c tls/sni: use byte array instead of string 10 months ago
util-lua-tls.h
…
util-lua-util.c threads: remove thread group name logic 11 months ago
util-lua-util.h
…
util-lua.c lua: remove luajit pushlstring workaround 1 year ago
util-lua.h
…
util-macset.c flow/storage: prefix API with SC 7 months ago
util-macset.h flow/storage: prefix API with SC 7 months ago
util-magic.c
…
util-magic.h
…
util-mem.c
…
util-mem.h src: introduce memmove wrapper using memmove_s if available 3 weeks ago
util-memcmp.c
…
util-memcmp.h
…
util-memcpy.h memcpy: rename memcpy_tolower 10 months ago
util-misc.c util/misc: Change shortening format and add unittests 11 months ago
util-misc.h
…
util-mpm-ac-ks-small.c util/mpm-ac-ks: preallocate on the heap rather than stack 5 months ago
util-mpm-ac-ks.c mpm/ac-ks: fix state index truncation in SCACTileSearchLarge 2 months ago
util-mpm-ac-ks.h
…
util-mpm-ac-queue.c
…
util-mpm-ac-queue.h
…
util-mpm-ac.c mpm/ac: fix PID mask in SCACSearch u32 branch 2 months ago
util-mpm-ac.h
…
util-mpm-hs-cache.c mpm/hs: fix compile warnings 5 months ago
util-mpm-hs-cache.h hs: validate cached database against current HS installation 8 months ago
util-mpm-hs-core.c
…
util-mpm-hs-core.h hs/cache: cleaner and more detailed output 8 months ago
util-mpm-hs.c mpm/hs: remove useless pointer check 5 months ago
util-mpm-hs.h
…
util-mpm.c util/mpm: add MpmCtx argument to MpmInitThreadCtx 5 months ago
util-mpm.h mpm/ac-ks: fix integer overflow in delta table size calc 2 months ago
util-optimize.h
…
util-pages.c
…
util-pages.h
…
util-path.c path: fix traversal check on Windows 2 months ago
util-path.h path: signal last use of the file (touch) 9 months ago
util-pidfile.c
…
util-pidfile.h
…
util-plugin.c plugins: add --plugin command line option to load plugins 7 months ago
util-plugin.h plugins: add --plugin command line option to load plugins 7 months ago
util-pool-thread.c pool: remove InitData argument 5 months ago
util-pool-thread.h pool: remove InitData argument 5 months ago
util-pool.c pool: remove InitData argument 5 months ago
util-pool.h pool: remove InitData argument 5 months ago
util-port-interval-tree.c util/port-interval-tree: suppress cppcheck false positives 5 months ago
util-port-interval-tree.h
…
util-prefilter.c
…
util-prefilter.h detect/prefilter: rewrite loop to assist scan-build 5 months ago
util-print.c output/ipv6: Utility function to compress IPv6 addrs 8 months ago
util-print.h output/ipv6: Utility function to compress IPv6 addrs 8 months ago
util-privs.c
…
util-privs.h
…
util-profiling-keywords.c
…
util-profiling-locks.c
…
util-profiling-locks.h
…
util-profiling-prefilter.c
…
util-profiling-rulegroups.c detect/firewall: configurable default policies 5 months ago
util-profiling-rules.c profiling: log rule profiling as json by default 10 months ago
util-profiling.c http-log: remove support for http-log 5 months ago
util-profiling.h
…
util-proto-name.c proto: use strcmp instead of memcmp 10 months ago
util-proto-name.h
…
util-radix-tree-common.h misc/cleanup: Simplify <cond> ? true : false 7 months ago
util-radix4-tree.c
…
util-radix4-tree.h
…
util-radix6-tree.c
…
util-radix6-tree.h
…
util-random.c
…
util-random.h
…
util-reference-config.c conf: uses SCConfGetNonNull 5 months ago
util-reference-config.h
…
util-rohash.c
…
util-rohash.h
…
util-rule-vars.c conf: uses SCConfGetNonNull 5 months ago
util-rule-vars.h
…
util-runmodes.c http-log: remove support for http-log 5 months ago
util-runmodes.h
…
util-running-modes.c app-layer: query raw protocol names 2 months ago
util-running-modes.h frames: add --list-app-layer-frames option 10 months ago
util-signal.c
…
util-signal.h
…
util-spm-bm.c spm/bm: match suff array to pattern size 5 months ago
util-spm-bm.h
…
util-spm-bs.c spm/bs: use memmem when available 10 months ago
util-spm-bs.h
…
util-spm-bs2bm.c
…
util-spm-bs2bm.h
…
util-spm-hs.c util-spm-hs: add missing deallocator 10 months ago
util-spm-hs.h
…
util-spm-mm.c util/spm: explicit needle_len is u16 5 months ago
util-spm-mm.h util/spm: explicit needle_len is u16 5 months ago
util-spm.c unittests: convert util-spm tests to FAIL/PASS API 5 months ago
util-spm.h spm: add mm, a memmem based spm 10 months ago
util-storage.c storage: prefix core API with SC 7 months ago
util-storage.h storage: prefix core API with SC 7 months ago
util-streaming-buffer.c src: introduce memmove wrapper using memmove_s if available 3 weeks ago
util-streaming-buffer.h
…
util-strlcatu.c
…
util-strlcpyu.c
…
util-strptime.c
…
util-sysfs.c
…
util-sysfs.h
…
util-syslog.c util/syslog: guard LOG_FTP for Solaris 5 months ago
util-syslog.h
…
util-systemd.c
…
util-systemd.h
…
util-thash.c conf: uses SCConfGetNonNull 5 months ago
util-thash.h
…
util-threshold-config.c detect/ipv6: classify ipv6 ranges as like_ip_only 2 months ago
util-threshold-config.h
…
util-time.c util/time: avoid tm_gmtoff on Solaris 5 months ago
util-time.h util-time: relocate timestamp format unit test from log-cf-common 5 months ago
util-unittest-helper.c detect/sigorder: handle allocation failure 5 months ago
util-unittest-helper.h fuzz: make more unit test utilities available for fuzzing 5 months ago
util-unittest.c src: doc: remove more double-space typos 10 months ago
util-unittest.h
…
util-validate.h scan-build: support taint filtering 5 months ago
util-var-name.c util/var-name: help gcc analyzer 5 months ago
util-var-name.h
…
util-var.c
…
util-var.h src: remove unused enum values 9 months ago
win32-misc.c
…
win32-misc.h
…
win32-service.c windows: always quote path for windows functions needing it 4 months ago
win32-service.h
…
win32-syscall.c
…
win32-syscall.h
…
win32-syslog.h
…