Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Go to file
Ken Steele 497575d38e Add option on Tile-Gx for logging for fast.log alerts over PCIe
When running on a TILEncore-Gx PCIe card, setting the filetype of fast.log
to pcie, will open a connection over PCIe to a host application caleld
tile-pcie-logd, that receives the alert strings and writes them to a file
on the host. The file name to open is also passed over the PCIe link.

This allows running Suricata on the TILEncore-Gx PCIe card, but have the
alerts logged to the host system's file system efficiently. The PCIe API that
is used is the Tilera Packet Queue (PQ) API which can access PCIe from User
Space, thus avoiding system calls.

Created util-logopenfile-tile.c and util-logopen-tile.h for the TILE
specific PCIe logging functionality.

Using Write() and Close() function pointers in LogFileCtx, which
default to standard write and close for files and sockets, but are
changed to PCIe write and close functions when a PCIe channel is
openned for logging.

Moved Logging contex out of tm-modules.h into util-logopenfile.h,
where it makes more sense. This required including util-logopenfile.h
into a couple of alert-*.c files, which previously were getting the
definitions from tm-modules.h.

The source and Makefile for tile-pcie-logd are added in contrib/tile-pcie-logd.

By default, the file name for fast.log specified in suricata.yaml is used as
the filename on the host. An optional argument to tile-pcie-logd, --prefix=,
can be added to prepend the supplied file path. For example, is the file
in suricata.yaml is specified as "/var/log/fast.log" and --prefix="/tmp",
then the file will be written to "/tmp/var/log/fast.log".

Check for TILERA_ROOT environment variable before building tile_pcie_logd

Building tile_pcie_logd on x86 requires the Tilera MDE for its PCIe libraries
and API header files. Configure now checs for TILERA_ROOT before enabling
builing tile_pcie_logd in contrib/tile_pcie_logd
13 years ago
benches Initial add of the files. 17 years ago
contrib Add option on Tile-Gx for logging for fast.log alerts over PCIe 13 years ago
doc Update docs from wiki 14 years ago
m4 Prelude plugin: add detection in configure script 17 years ago
qa Updated banned function cocci check 13 years ago
rules dns: add event for when memcap is reached 13 years ago
scripts suricatasc: fix make distcheck. 14 years ago
src Add option on Tile-Gx for logging for fast.log alerts over PCIe 13 years ago
.gitignore unittest: make check use a qa/log dir for logging 13 years ago
COPYING Initial add of the files. 17 years ago
ChangeLog Update Changelog for 2.0beta2 13 years ago
LICENSE import of gplv2 LICENSE 17 years ago
Makefile.am dns: rules files was not installed 13 years ago
Makefile.cvs Initial add of the files. 17 years ago
acsite.m4 Added C99 defs/macros to acsite.m4 for CentOS 17 years ago
autogen.sh OpenBSD 5.2 build fixes, Unit test fix. 14 years ago
classification.config Import of classification.config 17 years ago
config.rpath Add file needed for some autotools version. 13 years ago
configure.ac Add option on Tile-Gx for logging for fast.log alerts over PCIe 13 years ago
doxygen.cfg doxygen: document all code 13 years ago
reference.config Add md5 to reference.config. 15 years ago
suricata.yaml.in profiling: add sample-rate yaml option 13 years ago
threshold.config threshold: improve comments of shipped threshold.config, add links to wiki. 14 years ago