| .. |
|
Makefile.am
|
Detect engine for smtp file_data file_data: inspecting smtp attachments
|
10 years ago |
|
action-globals.h
|
…
|
|
|
alert-debuglog.c
|
stream: remove FLOW_NO_APPLAYER_INSPECTION flag
|
10 years ago |
|
alert-debuglog.h
|
Alert file formatting clean up.
|
12 years ago |
|
alert-fastlog.c
|
classification: remove global from parsing
|
10 years ago |
|
alert-fastlog.h
|
Alert file formatting clean up.
|
12 years ago |
|
alert-prelude.c
|
Enforce function coding standard
|
11 years ago |
|
alert-prelude.h
|
Alert file formatting clean up.
|
12 years ago |
|
alert-syslog.c
|
Enforce function coding standard
|
11 years ago |
|
alert-syslog.h
|
Alert file formatting clean up.
|
12 years ago |
|
alert-unified2-alert.c
|
Fix and improvements
|
11 years ago |
|
alert-unified2-alert.h
|
Alert file formatting clean up.
|
12 years ago |
|
app-layer-dcerpc-common.h
|
…
|
|
|
app-layer-dcerpc-udp.c
|
dcerpc: fix error handling for alloc errors
|
11 years ago |
|
app-layer-dcerpc-udp.h
|
…
|
|
|
app-layer-dcerpc.c
|
dcerpc: don't exit() on malloc failure
|
11 years ago |
|
app-layer-dcerpc.h
|
temporarily patched smb + dcerpc parsers for direction demaraction.
|
13 years ago |
|
app-layer-detect-proto.c
|
afl - Don't fail if app-layer proto enabled value is NULL.
|
10 years ago |
|
app-layer-detect-proto.h
|
app-layer: tell pp registrar if config was found
|
12 years ago |
|
app-layer-dns-common.c
|
app-layer: de_state optimization
|
10 years ago |
|
app-layer-dns-common.h
|
Fix rcode parsing, as noticed by Coverity.
|
10 years ago |
|
app-layer-dns-tcp.c
|
Fix rcode parsing, as noticed by Coverity.
|
10 years ago |
|
app-layer-dns-tcp.h
|
DNS TCP and UDP parser and DNS response logger
|
12 years ago |
|
app-layer-dns-udp.c
|
Fix rcode parsing, as noticed by Coverity.
|
10 years ago |
|
app-layer-dns-udp.h
|
DNS TCP and UDP parser and DNS response logger
|
12 years ago |
|
app-layer-events.c
|
app-layer-event: refactor
|
12 years ago |
|
app-layer-events.h
|
app-layer-event: refactor
|
12 years ago |
|
app-layer-ftp.c
|
Enforce function coding standard
|
11 years ago |
|
app-layer-ftp.h
|
FTP parser updated to not use the archaic App layer feature of AppLayerParserResultElmt.
|
12 years ago |
|
app-layer-htp-body.c
|
streaming logger: support Http Body logging
|
11 years ago |
|
app-layer-htp-body.h
|
…
|
|
|
app-layer-htp-file.c
|
Enforce function coding standard
|
11 years ago |
|
app-layer-htp-file.h
|
…
|
|
|
app-layer-htp-libhtp.c
|
http: don't crash when normalizing uri on low memory
|
11 years ago |
|
app-layer-htp-libhtp.h
|
http: strip 'proxy' part of http_uri
|
12 years ago |
|
app-layer-htp-mem.c
|
htp: init memuse atomics
|
11 years ago |
|
app-layer-htp-mem.h
|
htp layer: add memory usage counter
|
12 years ago |
|
app-layer-htp-xff.c
|
Fix and improvements
|
11 years ago |
|
app-layer-htp-xff.h
|
Implemented the diferent behaviour depending on the proxy deployment
|
11 years ago |
|
app-layer-htp.c
|
app-layer: de_state optimization
|
10 years ago |
|
app-layer-htp.h
|
app-layer: de_state optimization
|
10 years ago |
|
app-layer-modbus.c
|
app-layer: de_state optimization
|
10 years ago |
|
app-layer-modbus.h
|
modbus: tx de_state
|
10 years ago |
|
app-layer-nbss.h
|
…
|
|
|
app-layer-parser.c
|
stream: remove FLOW_NO_APPLAYER_INSPECTION flag
|
10 years ago |
|
app-layer-parser.h
|
app-layer: de_state optimization
|
10 years ago |
|
app-layer-protos.c
|
App layer API rewritten. The main files in question are:
|
12 years ago |
|
app-layer-protos.h
|
App-layer: Add Modbus protocol parser
|
11 years ago |
|
app-layer-smb.c
|
Enforce function coding standard
|
11 years ago |
|
app-layer-smb.h
|
temporarily patched smb + dcerpc parsers for direction demaraction.
|
13 years ago |
|
app-layer-smb2.c
|
Enforce function coding standard
|
11 years ago |
|
app-layer-smb2.h
|
…
|
|
|
app-layer-smtp.c
|
stream: remove FLOW_NO_APPLAYER_INSPECTION flag
|
10 years ago |
|
app-layer-smtp.h
|
filedata: read inspected tracker settings from suricata.yaml
|
10 years ago |
|
app-layer-ssh.c
|
ssh: convert error message to debug statement
|
11 years ago |
|
app-layer-ssh.h
|
ssh: add json logger
|
12 years ago |
|
app-layer-ssl.c
|
tls: force 'raw' reassembly after each record
|
10 years ago |
|
app-layer-ssl.h
|
tls: check SSL3/TLS version per record
|
11 years ago |
|
app-layer-tls-handshake.c
|
tls: fix uninitialized var use
|
12 years ago |
|
app-layer-tls-handshake.h
|
…
|
|
|
app-layer.c
|
stream: remove FLOW_NO_APPLAYER_INSPECTION flag
|
10 years ago |
|
app-layer.h
|
Make AppLayerProfiling functions inline
|
11 years ago |
|
conf-yaml-loader.c
|
conf - process includes even if not at root node.
|
10 years ago |
|
conf-yaml-loader.h
|
conf: add ConfYamlLoadFileWithPrefix
|
10 years ago |
|
conf.c
|
Don't attempt to load the rule files if the rule-files configuration
|
10 years ago |
|
conf.h
|
New function to test if a configuration node is a sequence or not.
|
10 years ago |
|
counters.c
|
counters: rename threadvars public counters
|
10 years ago |
|
counters.h
|
counters: rename threadvars public counters
|
10 years ago |
|
data-queue.c
|
…
|
|
|
data-queue.h
|
Align some structures to cacheline
|
12 years ago |
|
debug.h
|
…
|
|
|
decode-ethernet.c
|
Basic MPLS decoder.
|
11 years ago |
|
decode-ethernet.h
|
More structures that need to be marked Packed.
|
11 years ago |
|
decode-events.c
|
app-layer-event: refactor
|
12 years ago |
|
decode-events.h
|
pcap: implement LINKTYPE_NULL
|
10 years ago |
|
decode-gre.c
|
Enforce function coding standard
|
11 years ago |
|
decode-gre.h
|
Fix GRE Source Routing Header definition
|
11 years ago |
|
decode-icmpv4.c
|
Enforce function coding standard
|
11 years ago |
|
decode-icmpv4.h
|
More structures that need to be marked Packed.
|
11 years ago |
|
decode-icmpv6.c
|
ipv6: check for MLD messages with HL not 1
|
11 years ago |
|
decode-icmpv6.h
|
Don't alert on valid ICMP6 solicit/advert messages.
|
12 years ago |
|
decode-ipv4.c
|
Fix decode tests calling PACKET_DO_RECYCLE instead of PACKET_RECYCLE
|
11 years ago |
|
decode-ipv4.h
|
More structures that need to be marked Packed.
|
11 years ago |
|
decode-ipv6.c
|
ipv6: RH extension header parsing issue
|
11 years ago |
|
decode-ipv6.h
|
ipv6: convert ext header pointers to const
|
11 years ago |
|
decode-mpls.c
|
Use ENGINE_SET_INVALID_EVENT when the packet is too small for an
|
11 years ago |
|
decode-mpls.h
|
Set decoder events for labels that shouldn't be seen on the wire.
|
11 years ago |
|
decode-null.c
|
pcap: implement LINKTYPE_NULL
|
10 years ago |
|
decode-null.h
|
pcap: implement LINKTYPE_NULL
|
10 years ago |
|
decode-ppp.c
|
Enforce function coding standard
|
11 years ago |
|
decode-ppp.h
|
More structures that need to be marked Packed.
|
11 years ago |
|
decode-pppoe.c
|
Enforce function coding standard
|
11 years ago |
|
decode-pppoe.h
|
More structures that need to be marked Packed.
|
11 years ago |
|
decode-raw.c
|
Enforce function coding standard
|
11 years ago |
|
decode-raw.h
|
…
|
|
|
decode-sctp.c
|
flow: prepare flow forced reuse logging
|
11 years ago |
|
decode-sctp.h
|
More structures that need to be marked Packed.
|
11 years ago |
|
decode-sll.c
|
Set packet invalid flag during decoding.
|
12 years ago |
|
decode-sll.h
|
More structures that need to be marked Packed.
|
11 years ago |
|
decode-tcp.c
|
flow: prepare flow forced reuse logging
|
11 years ago |
|
decode-tcp.h
|
Add Packed attribute on Header structures
|
11 years ago |
|
decode-teredo.c
|
decode: PacketTunnelPktSetup replaces PacketPseudoPktSetup
|
12 years ago |
|
decode-teredo.h
|
…
|
|
|
decode-udp.c
|
flow: prepare flow forced reuse logging
|
11 years ago |
|
decode-udp.h
|
Add Packed attribute on Header structures
|
11 years ago |
|
decode-vlan.c
|
Enforce function coding standard
|
11 years ago |
|
decode-vlan.h
|
More structures that need to be marked Packed.
|
11 years ago |
|
decode.c
|
pcap: implement LINKTYPE_NULL
|
10 years ago |
|
decode.h
|
pcap: implement LINKTYPE_NULL
|
10 years ago |
|
defrag-config.c
|
defrag: fix timeout setting when config is missing
|
11 years ago |
|
defrag-config.h
|
feature #417: add support for configuration per host timeout value
|
12 years ago |
|
defrag-hash.c
|
Enforce function coding standard
|
11 years ago |
|
defrag-hash.h
|
…
|
|
|
defrag-queue.c
|
Enforce function coding standard
|
11 years ago |
|
defrag-queue.h
|
…
|
|
|
defrag-timeout.c
|
defrag: use 'struct timeval' for timeout tracking
|
11 years ago |
|
defrag-timeout.h
|
…
|
|
|
defrag.c
|
Fix a fix: defrag OOM condition
|
11 years ago |
|
defrag.h
|
defrag: use 'struct timeval' for timeout tracking
|
11 years ago |
|
detect-ack.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-ack.h
|
…
|
|
|
detect-app-layer-event.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-app-layer-event.h
|
app layer: uint16_t alproto -> AppProto alproto
|
12 years ago |
|
detect-app-layer-protocol.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-app-layer-protocol.h
|
app layer: uint16_t alproto -> AppProto alproto
|
12 years ago |
|
detect-asn1.c
|
parsing: s/strtok/strtok_r/g
|
10 years ago |
|
detect-asn1.h
|
…
|
|
|
detect-byte-extract.c
|
find and replace HSBDMATCH by FILEDATA
|
10 years ago |
|
detect-byte-extract.h
|
Bug 1230: Check all SigMatch lists for a named byte_extract variable.
|
11 years ago |
|
detect-bytejump.c
|
find and replace HSBDMATCH by FILEDATA
|
10 years ago |
|
detect-bytejump.h
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-bytetest.c
|
find and replace HSBDMATCH by FILEDATA
|
10 years ago |
|
detect-bytetest.h
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-classtype.c
|
classification: remove global from parsing
|
10 years ago |
|
detect-classtype.h
|
…
|
|
|
detect-content.c
|
Bug 1281 - Add tests for rule content of lengths > 255.
|
10 years ago |
|
detect-content.h
|
Bug 1281 - Accept rule content with lengths greater than 255.
|
10 years ago |
|
detect-csum.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-csum.h
|
…
|
|
|
detect-dce-iface.c
|
detect: fix small memory leaks
|
11 years ago |
|
detect-dce-iface.h
|
…
|
|
|
detect-dce-opnum.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-dce-opnum.h
|
…
|
|
|
detect-dce-stub-data.c
|
rule parser: set flag for optionless keywords
|
11 years ago |
|
detect-dce-stub-data.h
|
…
|
|
|
detect-depth.c
|
find and replace HSBDMATCH by FILEDATA
|
10 years ago |
|
detect-depth.h
|
…
|
|
|
detect-detection-filter.c
|
parsing: s/strtok/strtok_r/g
|
10 years ago |
|
detect-detection-filter.h
|
…
|
|
|
detect-distance.c
|
find and replace HSBDMATCH by FILEDATA
|
10 years ago |
|
detect-distance.h
|
…
|
|
|
detect-dns-query.c
|
rule parser: set flag for optionless keywords
|
11 years ago |
|
detect-dns-query.h
|
DNS: enable mpm/fast_pattern support for dns_query
|
12 years ago |
|
detect-dsize.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-dsize.h
|
…
|
|
|
detect-engine-address-ipv4.c
|
Fix sig grouping bug when certain sigs are mixed. Add tests.
|
13 years ago |
|
detect-engine-address-ipv4.h
|
…
|
|
|
detect-engine-address-ipv6.c
|
Enforce function coding standard
|
11 years ago |
|
detect-engine-address-ipv6.h
|
…
|
|
|
detect-engine-address.c
|
DetectAddressParseString(): fix IPv6 address handling
|
10 years ago |
|
detect-engine-address.h
|
detect: pass DetectEngineCtx to address parsing
|
10 years ago |
|
detect-engine-alert.c
|
detect: set action from utility function
|
10 years ago |
|
detect-engine-alert.h
|
Store TX id with alerts
|
12 years ago |
|
detect-engine-analyzer.c
|
engine-analysis: print fast_pattern summary
|
10 years ago |
|
detect-engine-analyzer.h
|
rule analyser: display message for invalid signatures
|
13 years ago |
|
detect-engine-apt-event.c
|
app layer: uint16_t alproto -> AppProto alproto
|
12 years ago |
|
detect-engine-apt-event.h
|
Introduce a separate inspection engine for app events.
|
12 years ago |
|
detect-engine-content-inspection.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-engine-content-inspection.h
|
Detect engine for smtp file_data file_data: inspecting smtp attachments
|
10 years ago |
|
detect-engine-dcepayload.c
|
Update tests to use AppLayerParserThreadCtx ptr instead of void. Fix a few bugs uncovered by this.
|
12 years ago |
|
detect-engine-dcepayload.h
|
…
|
|
|
detect-engine-dns.c
|
DNS: enable mpm/fast_pattern support for dns_query
|
12 years ago |
|
detect-engine-dns.h
|
DNS: adding dns_request content modifier
|
12 years ago |
|
detect-engine-event.c
|
detect: fix small memory leaks
|
11 years ago |
|
detect-engine-event.h
|
pcap: implement LINKTYPE_NULL
|
10 years ago |
|
detect-engine-file.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-engine-file.h
|
SMTP MIME Email Message decoder
|
11 years ago |
|
detect-engine-filedata-smtp.c
|
filedata: read inspected tracker settings from suricata.yaml
|
10 years ago |
|
detect-engine-filedata-smtp.h
|
UT: implement tests for inspection code
|
10 years ago |
|
detect-engine-hcbd.c
|
detect-http-header: improve buffer handling
|
10 years ago |
|
detect-engine-hcbd.h
|
Transaction engine redesigned.
|
12 years ago |
|
detect-engine-hcd.c
|
Update tests to use AppLayerParserThreadCtx ptr instead of void. Fix a few bugs uncovered by this.
|
12 years ago |
|
detect-engine-hcd.h
|
Transaction engine redesigned.
|
12 years ago |
|
detect-engine-hhd.c
|
detect-http-header: improve buffer handling
|
10 years ago |
|
detect-engine-hhd.h
|
Transaction engine redesigned.
|
12 years ago |
|
detect-engine-hhhd.c
|
Update tests to use AppLayerParserThreadCtx ptr instead of void. Fix a few bugs uncovered by this.
|
12 years ago |
|
detect-engine-hhhd.h
|
Transaction engine redesigned.
|
12 years ago |
|
detect-engine-hmd.c
|
Update tests to use AppLayerParserThreadCtx ptr instead of void. Fix a few bugs uncovered by this.
|
12 years ago |
|
detect-engine-hmd.h
|
Transaction engine redesigned.
|
12 years ago |
|
detect-engine-hrhd.c
|
Update tests to use AppLayerParserThreadCtx ptr instead of void. Fix a few bugs uncovered by this.
|
12 years ago |
|
detect-engine-hrhd.h
|
Transaction engine redesigned.
|
12 years ago |
|
detect-engine-hrhhd.c
|
Update tests to use AppLayerParserThreadCtx ptr instead of void. Fix a few bugs uncovered by this.
|
12 years ago |
|
detect-engine-hrhhd.h
|
Transaction engine redesigned.
|
12 years ago |
|
detect-engine-hrl.c
|
http: add inspection engine for http request line
|
10 years ago |
|
detect-engine-hrl.h
|
http: add inspection engine for http request line
|
10 years ago |
|
detect-engine-hrud.c
|
Update tests to use AppLayerParserThreadCtx ptr instead of void. Fix a few bugs uncovered by this.
|
12 years ago |
|
detect-engine-hrud.h
|
Transaction engine redesigned.
|
12 years ago |
|
detect-engine-hsbd.c
|
detect-http-header: improve buffer handling
|
10 years ago |
|
detect-engine-hsbd.h
|
Transaction engine redesigned.
|
12 years ago |
|
detect-engine-hscd.c
|
http: fix stat_msg and stat_code state tracking
|
10 years ago |
|
detect-engine-hscd.h
|
Transaction engine redesigned.
|
12 years ago |
|
detect-engine-hsmd.c
|
http: fix stat_msg and stat_code state tracking
|
10 years ago |
|
detect-engine-hsmd.h
|
Transaction engine redesigned.
|
12 years ago |
|
detect-engine-hua.c
|
Update tests to use AppLayerParserThreadCtx ptr instead of void. Fix a few bugs uncovered by this.
|
12 years ago |
|
detect-engine-hua.h
|
Transaction engine redesigned.
|
12 years ago |
|
detect-engine-iponly.c
|
rule-vars: take detect engine as arg
|
10 years ago |
|
detect-engine-iponly.h
|
rule-vars: take detect engine as arg
|
10 years ago |
|
detect-engine-modbus.c
|
Detect-engine: Add Modbus detection engine
|
11 years ago |
|
detect-engine-modbus.h
|
Detect-engine: Add Modbus detection engine
|
11 years ago |
|
detect-engine-mpm.c
|
mpm: implement prefiltering for smtp
|
10 years ago |
|
detect-engine-mpm.h
|
mpm: implement prefiltering for smtp
|
10 years ago |
|
detect-engine-payload.c
|
Enforce function coding standard
|
11 years ago |
|
detect-engine-payload.h
|
detect: cleanup
|
11 years ago |
|
detect-engine-port.c
|
rule-vars: take detect engine as arg
|
10 years ago |
|
detect-engine-port.h
|
detect:pass DetectEngineCtx to port parsing
|
10 years ago |
|
detect-engine-proto.c
|
Enforce function coding standard
|
11 years ago |
|
detect-engine-proto.h
|
…
|
|
|
detect-engine-siggroup.c
|
detect: properly size det_ctx::non_mpm_id_array
|
11 years ago |
|
detect-engine-siggroup.h
|
detect: Disable unused SignatureHeader code
|
11 years ago |
|
detect-engine-sigorder.c
|
vars: redo var name <-> idx handling
|
10 years ago |
|
detect-engine-sigorder.h
|
vars: redo var name <-> idx handling
|
10 years ago |
|
detect-engine-state.c
|
app-layer: de_state optimization
|
10 years ago |
|
detect-engine-state.h
|
detect-state: handle duplicate inspect/match
|
10 years ago |
|
detect-engine-tag.c
|
Enforce function coding standard
|
11 years ago |
|
detect-engine-tag.h
|
tag: fix session seconds tracking
|
12 years ago |
|
detect-engine-threshold.c
|
Enforce function coding standard
|
11 years ago |
|
detect-engine-threshold.h
|
threshold: register threshold host storage. Related to bug #991
|
12 years ago |
|
detect-engine-uri.c
|
Update tests to use AppLayerParserThreadCtx ptr instead of void. Fix a few bugs uncovered by this.
|
12 years ago |
|
detect-engine-uri.h
|
Transaction engine redesigned.
|
12 years ago |
|
detect-engine.c
|
reference: remove global
|
10 years ago |
|
detect-engine.h
|
unix-socket: implement reload-rules
|
10 years ago |
|
detect-fast-pattern.c
|
find and replace HSBDMATCH by FILEDATA
|
10 years ago |
|
detect-fast-pattern.h
|
Fast pattern setup now configurable in our code.
|
13 years ago |
|
detect-file-data.c
|
file_data: register keyword for smtp and tcp protocol
|
10 years ago |
|
detect-file-data.h
|
…
|
|
|
detect-fileext.c
|
SMTP MIME Email Message decoder
|
11 years ago |
|
detect-fileext.h
|
…
|
|
|
detect-filemagic.c
|
SMTP MIME Email Message decoder
|
11 years ago |
|
detect-filemagic.h
|
Bug 585: use per detect thread libmagic ctx
|
13 years ago |
|
detect-filemd5.c
|
detect: initialize detection engine by prefix
|
10 years ago |
|
detect-filemd5.h
|
…
|
|
|
detect-filename.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-filename.h
|
…
|
|
|
detect-filesize.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-filesize.h
|
…
|
|
|
detect-filestore.c
|
detect-state: handle 'post match' locking
|
10 years ago |
|
detect-filestore.h
|
filestore: fix logic flag in continued stateful detection
|
13 years ago |
|
detect-flags.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-flags.h
|
…
|
|
|
detect-flow.c
|
detect-flow: use dedicated flags
|
11 years ago |
|
detect-flow.h
|
detect-flow: use dedicated flags
|
11 years ago |
|
detect-flowbits.c
|
xbits: fix coverity warnings
|
10 years ago |
|
detect-flowbits.h
|
…
|
|
|
detect-flowint.c
|
vars: redo var name <-> idx handling
|
10 years ago |
|
detect-flowint.h
|
Update copyright year in detect-flowbits files.
|
11 years ago |
|
detect-flowvar.c
|
vars: redo var name <-> idx handling
|
10 years ago |
|
detect-flowvar.h
|
detect-state: handle 'post match' locking
|
10 years ago |
|
detect-fragbits.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-fragbits.h
|
…
|
|
|
detect-fragoffset.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-fragoffset.h
|
…
|
|
|
detect-ftpbounce.c
|
rule parser: set flag for optionless keywords
|
11 years ago |
|
detect-ftpbounce.h
|
…
|
|
|
detect-geoip.c
|
geoip: adapt to 'const' pointer passing
|
11 years ago |
|
detect-geoip.h
|
Adds support for the geoip keyword
|
13 years ago |
|
detect-gid.c
|
spelling - dubbed -> duped (for duplicate)
|
10 years ago |
|
detect-gid.h
|
…
|
|
|
detect-hostbits.c
|
xbits: fix coverity warnings
|
10 years ago |
|
detect-hostbits.h
|
xbits: implement ip_src/ip_dst support
|
10 years ago |
|
detect-http-client-body.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-http-client-body.h
|
…
|
|
|
detect-http-cookie.c
|
rule parser: set flag for optionless keywords
|
11 years ago |
|
detect-http-cookie.h
|
…
|
|
|
detect-http-header.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-http-header.h
|
…
|
|
|
detect-http-hh.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-http-hh.h
|
Add support for a new keyword to inspect http_host header.
|
13 years ago |
|
detect-http-hrh.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-http-hrh.h
|
Add support for the new keyword - http_raw_host header.
|
13 years ago |
|
detect-http-method.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-http-method.h
|
…
|
|
|
detect-http-raw-header.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-http-raw-header.h
|
…
|
|
|
detect-http-raw-uri.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-http-raw-uri.h
|
…
|
|
|
detect-http-server-body.c
|
find and replace HSBDMATCH by FILEDATA
|
10 years ago |
|
detect-http-server-body.h
|
…
|
|
|
detect-http-stat-code.c
|
rule parser: set flag for optionless keywords
|
11 years ago |
|
detect-http-stat-code.h
|
…
|
|
|
detect-http-stat-msg.c
|
rule parser: set flag for optionless keywords
|
11 years ago |
|
detect-http-stat-msg.h
|
…
|
|
|
detect-http-ua.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-http-ua.h
|
…
|
|
|
detect-http-uri.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-http-uri.h
|
uricontent simplified to use the existing content + http_uri infrastructure.
|
13 years ago |
|
detect-icmp-id.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-icmp-id.h
|
…
|
|
|
detect-icmp-seq.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-icmp-seq.h
|
…
|
|
|
detect-icode.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-icode.h
|
…
|
|
|
detect-id.c
|
detect: fix small memory leaks
|
11 years ago |
|
detect-id.h
|
…
|
|
|
detect-ipopts.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-ipopts.h
|
…
|
|
|
detect-ipproto.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-ipproto.h
|
…
|
|
|
detect-iprep.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-iprep.h
|
Simple IP reputation implementation
|
13 years ago |
|
detect-isdataat.c
|
find and replace HSBDMATCH by FILEDATA
|
10 years ago |
|
detect-isdataat.h
|
…
|
|
|
detect-itype.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-itype.h
|
…
|
|
|
detect-l3proto.c
|
Enforce function coding standard
|
11 years ago |
|
detect-l3proto.h
|
…
|
|
|
detect-lua-extensions.c
|
lua: add export of dns.rrname
|
11 years ago |
|
detect-lua-extensions.h
|
lua: export packet keywords to detect scripts
|
11 years ago |
|
detect-lua.c
|
lua: fix error handling
|
10 years ago |
|
detect-lua.h
|
Rename Lua code to just Lua
|
11 years ago |
|
detect-mark.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-mark.h
|
Add support for 'nfq_set_mark' keyword
|
15 years ago |
|
detect-metadata.c
|
Enforce function coding standard
|
11 years ago |
|
detect-metadata.h
|
…
|
|
|
detect-modbus.c
|
fix Cygwin build fails: array subscript has type char
|
11 years ago |
|
detect-modbus.h
|
Coding style cleanup in detect-modbus files.
|
11 years ago |
|
detect-msg.c
|
classification: remove global from parsing
|
10 years ago |
|
detect-msg.h
|
…
|
|
|
detect-noalert.c
|
Enforce function coding standard
|
11 years ago |
|
detect-noalert.h
|
…
|
|
|
detect-nocase.c
|
find and replace HSBDMATCH by FILEDATA
|
10 years ago |
|
detect-nocase.h
|
…
|
|
|
detect-offset.c
|
find and replace HSBDMATCH by FILEDATA
|
10 years ago |
|
detect-offset.h
|
…
|
|
|
detect-parse.c
|
classification: remove global from parsing
|
10 years ago |
|
detect-parse.h
|
app layer: uint16_t alproto -> AppProto alproto
|
12 years ago |
|
detect-pcre.c
|
find and replace HSBDMATCH by FILEDATA
|
10 years ago |
|
detect-pcre.h
|
pcre: parsing cleanup
|
12 years ago |
|
detect-pkt-data.c
|
find and replace HSBDMATCH by FILEDATA
|
10 years ago |
|
detect-pkt-data.h
|
Keyword pkt_data
|
13 years ago |
|
detect-pktvar.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-pktvar.h
|
…
|
|
|
detect-priority.c
|
detect: fix small memory leaks
|
11 years ago |
|
detect-priority.h
|
…
|
|
|
detect-rawbytes.c
|
Enforce function coding standard
|
11 years ago |
|
detect-rawbytes.h
|
…
|
|
|
detect-reference.c
|
reference: remove global
|
10 years ago |
|
detect-reference.h
|
…
|
|
|
detect-replace.c
|
Formatting cleanup in detect-replace.c
|
10 years ago |
|
detect-replace.h
|
Check replist is not NULL inline before doing any processing.
|
11 years ago |
|
detect-rev.c
|
Enforce function coding standard
|
11 years ago |
|
detect-rev.h
|
…
|
|
|
detect-rpc.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-rpc.h
|
…
|
|
|
detect-sameip.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-sameip.h
|
…
|
|
|
detect-seq.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-seq.h
|
…
|
|
|
detect-sid.c
|
spelling - dubbed -> duped (for duplicate)
|
10 years ago |
|
detect-sid.h
|
…
|
|
|
detect-ssh-proto-version.c
|
Enforce function coding standard
|
11 years ago |
|
detect-ssh-proto-version.h
|
…
|
|
|
detect-ssh-software-version.c
|
ssh.softwareversion: allow more characters
|
11 years ago |
|
detect-ssh-software-version.h
|
…
|
|
|
detect-ssl-state.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-ssl-state.h
|
…
|
|
|
detect-ssl-version.c
|
Enforce function coding standard
|
11 years ago |
|
detect-ssl-version.h
|
…
|
|
|
detect-stream_size.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-stream_size.h
|
…
|
|
|
detect-tag.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-tag.h
|
Clean up function syntax
|
12 years ago |
|
detect-threshold.c
|
parsing: s/strtok/strtok_r/g
|
10 years ago |
|
detect-threshold.h
|
Clean up function syntax
|
12 years ago |
|
detect-tls-version.c
|
Enforce function coding standard
|
11 years ago |
|
detect-tls-version.h
|
…
|
|
|
detect-tls.c
|
tls: fix a tls.fingerprint issue in debug mode
|
11 years ago |
|
detect-tls.h
|
…
|
|
|
detect-tos.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-tos.h
|
…
|
|
|
detect-ttl.c
|
Change Match() function to take const SigMatchCtx*
|
11 years ago |
|
detect-ttl.h
|
…
|
|
|
detect-uricontent.c
|
Enforce function coding standard
|
11 years ago |
|
detect-uricontent.h
|
Transaction engine redesigned.
|
12 years ago |
|
detect-urilen.c
|
Enforce function coding standard
|
11 years ago |
|
detect-urilen.h
|
…
|
|
|
detect-window.c
|
detect: fix small memory leaks
|
11 years ago |
|
detect-window.h
|
…
|
|
|
detect-within.c
|
find and replace HSBDMATCH by FILEDATA
|
10 years ago |
|
detect-within.h
|
…
|
|
|
detect-xbits.c
|
xbits: fix coverity warnings
|
10 years ago |
|
detect-xbits.h
|
xbits: expire (first steps)
|
10 years ago |
|
detect.c
|
counters: rename threadvars public counters
|
10 years ago |
|
detect.h
|
Feature #1440: support wildcards in rule filenames
|
10 years ago |
|
flow-bit.c
|
detect-flowbits: locking update
|
10 years ago |
|
flow-bit.h
|
detect-flowbits: locking update
|
10 years ago |
|
flow-hash.c
|
flow: make TCP reuse handling in flow engine optional
|
11 years ago |
|
flow-hash.h
|
flow: make TCP reuse handling in flow engine optional
|
11 years ago |
|
flow-manager.c
|
flow: don't hold tv_root_lock longer than needed
|
10 years ago |
|
flow-manager.h
|
packet pool: fix memleaks
|
10 years ago |
|
flow-private.h
|
flow: change flow state logic
|
11 years ago |
|
flow-queue.c
|
Formatting change for function call.
|
12 years ago |
|
flow-queue.h
|
…
|
|
|
flow-storage.c
|
Enforce function coding standard
|
11 years ago |
|
flow-storage.h
|
Storage: rename Init to Alloc to reflect actual functioning. Comment updates.
|
12 years ago |
|
flow-timeout.c
|
packet pool: fix memleaks
|
10 years ago |
|
flow-timeout.h
|
flow timeout: cleanups
|
11 years ago |
|
flow-util.c
|
Correct flow memory usage bookkeeping error
|
11 years ago |
|
flow-util.h
|
detect-state: split flow and tx state
|
10 years ago |
|
flow-var.c
|
Enforce function coding standard
|
11 years ago |
|
flow-var.h
|
vars: optimize layout to reduce size requirements of flowbits and other vars
|
12 years ago |
|
flow.c
|
flow: constify getters param
|
11 years ago |
|
flow.h
|
stream: remove FLOW_NO_APPLAYER_INSPECTION flag
|
10 years ago |
|
host-bit.c
|
hosts: consider hostbits/xbits status in timeout
|
10 years ago |
|
host-bit.h
|
hosts: consider hostbits/xbits status in timeout
|
10 years ago |
|
host-queue.c
|
Enforce function coding standard
|
11 years ago |
|
host-queue.h
|
…
|
|
|
host-storage.c
|
Enforce function coding standard
|
11 years ago |
|
host-storage.h
|
Storage: rename Init to Alloc to reflect actual functioning. Comment updates.
|
12 years ago |
|
host-timeout.c
|
hosts: consider hostbits/xbits status in timeout
|
10 years ago |
|
host-timeout.h
|
…
|
|
|
host.c
|
detect: hostbits keyword
|
10 years ago |
|
host.h
|
detect: hostbits keyword
|
10 years ago |
|
ippair-bit.c
|
ippair: implement basic timeout check
|
10 years ago |
|
ippair-bit.h
|
ippair: implement basic timeout check
|
10 years ago |
|
ippair-queue.c
|
ippair: track ippairs, enable tests
|
10 years ago |
|
ippair-queue.h
|
ippair: track ippairs, enable tests
|
10 years ago |
|
ippair-storage.c
|
ippair: track ippairs, enable tests
|
10 years ago |
|
ippair-storage.h
|
ippair: track ippairs, enable tests
|
10 years ago |
|
ippair-timeout.c
|
ippair: implement basic timeout check
|
10 years ago |
|
ippair-timeout.h
|
ippair: track ippairs, enable tests
|
10 years ago |
|
ippair.c
|
ippair: track ippairs, enable tests
|
10 years ago |
|
ippair.h
|
ippair: track ippairs, enable tests
|
10 years ago |
|
log-dnslog.c
|
Added support for full parsing of the rcode header in DNS answer
|
10 years ago |
|
log-dnslog.h
|
dns log: cleanups
|
12 years ago |
|
log-droplog.c
|
classification: remove global from parsing
|
10 years ago |
|
log-droplog.h
|
…
|
|
|
log-file.c
|
smtp: make TX aware
|
11 years ago |
|
log-file.h
|
…
|
|
|
log-filestore.c
|
smtp: make TX aware
|
11 years ago |
|
log-filestore.h
|
…
|
|
|
log-httplog.c
|
Enforce function coding standard
|
11 years ago |
|
log-httplog.h
|
…
|
|
|
log-pcap.c
|
pcap-log: add option to honor pass rules
|
11 years ago |
|
log-pcap.h
|
log-pcap: improve profiling
|
11 years ago |
|
log-stats.c
|
log-stats: expand membuffer if necessary
|
11 years ago |
|
log-stats.h
|
Introduce stats log API, convert existing output
|
11 years ago |
|
log-tcp-data.c
|
streaming: pass tx_id to logger
|
11 years ago |
|
log-tcp-data.h
|
tcp-data: new streaming logger
|
11 years ago |
|
log-tlslog.c
|
Enforce function coding standard
|
11 years ago |
|
log-tlslog.h
|
log-tls: clean ups
|
12 years ago |
|
output-file.c
|
Enforce function coding standard
|
11 years ago |
|
output-file.h
|
output: clean file desc at exit.
|
11 years ago |
|
output-filedata.c
|
output-filedata: close files even w/o data
|
11 years ago |
|
output-filedata.h
|
output api: complete shutdown functions
|
11 years ago |
|
output-flow.c
|
Enforce function coding standard
|
11 years ago |
|
output-flow.h
|
flow: output api stub
|
11 years ago |
|
output-json-alert.c
|
output-json: fix type of data parameter
|
10 years ago |
|
output-json-alert.h
|
alert json: move alert info into function
|
10 years ago |
|
output-json-dns.c
|
Added support for full parsing of the rcode header in DNS answer
|
10 years ago |
|
output-json-dns.h
|
json dns: rename output-dnslog -> output-json-dns
|
12 years ago |
|
output-json-drop.c
|
drop json log: log out 'drop' signature
|
10 years ago |
|
output-json-drop.h
|
json tls log: rename to output-json-tls
|
12 years ago |
|
output-json-email-common.c
|
email-json: free temporary 'cc' string
|
10 years ago |
|
output-json-email-common.h
|
smtp: convert logger to tx logger
|
11 years ago |
|
output-json-file.c
|
output-json: fix type of data parameter
|
10 years ago |
|
output-json-file.h
|
json outputs: cleanups
|
12 years ago |
|
output-json-flow.c
|
output-json: fix type of data parameter
|
10 years ago |
|
output-json-flow.h
|
flow-json-log: stub
|
11 years ago |
|
output-json-http.c
|
output-json: fix type of data parameter
|
10 years ago |
|
output-json-http.h
|
json-http: refactoring output code
|
11 years ago |
|
output-json-netflow.c
|
output-json: fix type of data parameter
|
10 years ago |
|
output-json-netflow.h
|
netflow-json: initial version
|
11 years ago |
|
output-json-smtp.c
|
output-json: fix type of data parameter
|
10 years ago |
|
output-json-smtp.h
|
eve-log: SMTP JSON logger
|
11 years ago |
|
output-json-ssh.c
|
output-json: fix type of data parameter
|
10 years ago |
|
output-json-ssh.h
|
json-ssh: export logging function
|
11 years ago |
|
output-json-tls.c
|
output-json: fix type of data parameter
|
10 years ago |
|
output-json-tls.h
|
json-tls: refactor to export logging function
|
11 years ago |
|
output-json.c
|
logfile: rename ALERT_ types to LOGFILE_TYPE_
|
10 years ago |
|
output-json.h
|
log file: add type flag
|
10 years ago |
|
output-lua.c
|
stats: expose stats to Lua output
|
11 years ago |
|
output-lua.h
|
output: Lua HTTP log initial implementation
|
11 years ago |
|
output-packet.c
|
Enforce function coding standard
|
11 years ago |
|
output-packet.h
|
output: clean file desc at exit.
|
11 years ago |
|
output-stats.c
|
stats: disable stats if no loggers are enabled
|
11 years ago |
|
output-stats.h
|
stats: disable stats if no loggers are enabled
|
11 years ago |
|
output-streaming.c
|
output streaming: cleanup at runmode destruction
|
11 years ago |
|
output-streaming.h
|
output streaming: cleanup at runmode destruction
|
11 years ago |
|
output-tx.c
|
Enforce function coding standard
|
11 years ago |
|
output-tx.h
|
output: clean file desc at exit.
|
11 years ago |
|
output.c
|
Introduce stats log API, convert existing output
|
11 years ago |
|
output.h
|
Introduce stats log API, convert existing output
|
11 years ago |
|
packet-queue.c
|
Enforce function coding standard
|
11 years ago |
|
packet-queue.h
|
…
|
|
|
pkt-var.c
|
Enforce function coding standard
|
11 years ago |
|
pkt-var.h
|
…
|
|
|
ptxdump.py
|
…
|
|
|
queue.h
|
Add removal safe TAILQ iterator.
|
13 years ago |
|
reputation.c
|
fix reputation parser so that it accepts ipv6 addresses in configuration file.
|
10 years ago |
|
reputation.h
|
iprep: cleanup ctx on shutdown
|
11 years ago |
|
respond-reject-libnet11.c
|
Coverity 1100842: add missing return statement
|
12 years ago |
|
respond-reject-libnet11.h
|
Add reject for IPv6
|
12 years ago |
|
respond-reject.c
|
Reject ICMP traffic, not only TCP/UDP
|
10 years ago |
|
respond-reject.h
|
…
|
|
|
runmode-af-packet.c
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-af-packet.h
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-erf-dag.c
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-erf-dag.h
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-erf-file.c
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-erf-file.h
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-ipfw.c
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-ipfw.h
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-napatech.c
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-napatech.h
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-netmap.c
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-netmap.h
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-nflog.c
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-nflog.h
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-nfq.c
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-nfq.h
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-pcap-file.c
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-pcap-file.h
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-pcap.c
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-pcap.h
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-pfring.c
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-pfring.h
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-tile.c
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-tile.h
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmode-unittests.c
|
reference/classification: call global init for unittests
|
10 years ago |
|
runmode-unittests.h
|
Suppress Suri prefix.
|
12 years ago |
|
runmode-unix-socket.c
|
packet pool: fix memleaks
|
10 years ago |
|
runmode-unix-socket.h
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
runmodes.c
|
Bug 1340: fix missing flow cleanup
|
10 years ago |
|
runmodes.h
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
source-af-packet.c
|
af-packet: use max packet size as snaplen
|
10 years ago |
|
source-af-packet.h
|
af-packet: clean APFPacketVar before release.
|
13 years ago |
|
source-erf-dag.c
|
Make suricata_ctl_flags be volatile
|
11 years ago |
|
source-erf-dag.h
|
erf-dag: fix typo in header guard
|
12 years ago |
|
source-erf-file.c
|
decode: pass ThreadVars to DecodeThreadVarsFree
|
11 years ago |
|
source-erf-file.h
|
…
|
|
|
source-ipfw.c
|
Enforce function coding standard
|
11 years ago |
|
source-ipfw.h
|
build cleanups
|
13 years ago |
|
source-mpipe.c
|
Inject pseudo packet periodically when there is not traffic in mPIPE.
|
11 years ago |
|
source-mpipe.h
|
Add TILE-Gx mPIPE packet processing support.
|
12 years ago |
|
source-napatech.c
|
Make suricata_ctl_flags be volatile
|
11 years ago |
|
source-napatech.h
|
Added host buffer allowance and stream configuration for Napatech 3GD
|
13 years ago |
|
source-netmap.c
|
netmap support
|
11 years ago |
|
source-netmap.h
|
netmap support
|
11 years ago |
|
source-nflog.c
|
Enforce function coding standard
|
11 years ago |
|
source-nflog.h
|
Bootstraping NFLOG capture mode
|
11 years ago |
|
source-nfq-prototypes.h
|
…
|
|
|
source-nfq.c
|
source-nfq: fix display of next queue
|
11 years ago |
|
source-nfq.h
|
nfq: be sure to always verdict packets
|
12 years ago |
|
source-pcap-file.c
|
pcap: implement LINKTYPE_NULL
|
10 years ago |
|
source-pcap-file.h
|
pcap-file: add missing atomic init
|
11 years ago |
|
source-pcap.c
|
pcap: implement LINKTYPE_NULL
|
10 years ago |
|
source-pcap.h
|
Fix build with old pcap library.
|
13 years ago |
|
source-pfring.c
|
pfring: fixes memleaks
|
11 years ago |
|
source-pfring.h
|
PF_RING: force cluster type if vlan is disabled
|
11 years ago |
|
stream-tcp-inline.c
|
Enforce function coding standard
|
11 years ago |
|
stream-tcp-inline.h
|
…
|
|
|
stream-tcp-private.h
|
stream: remove FLOW_NO_APPLAYER_INSPECTION use from tests
|
10 years ago |
|
stream-tcp-reassemble.c
|
stream: remove FLOW_NO_APPLAYER_INSPECTION flag
|
10 years ago |
|
stream-tcp-reassemble.h
|
stream: remove FLOW_NO_APPLAYER_INSPECTION flag
|
10 years ago |
|
stream-tcp-sack.c
|
sanity check tcp SACK edges prior to recording. Attempt to avoid Cisco ASA
|
11 years ago |
|
stream-tcp-sack.h
|
Enforce function coding standard
|
11 years ago |
|
stream-tcp-util.c
|
stream: update inline tests
|
11 years ago |
|
stream-tcp-util.h
|
stream: update inline tests
|
11 years ago |
|
stream-tcp.c
|
stream: remove FLOW_NO_APPLAYER_INSPECTION flag
|
10 years ago |
|
stream-tcp.h
|
flow: tag first packet in each direction
|
11 years ago |
|
stream.c
|
Enforce function coding standard
|
11 years ago |
|
stream.h
|
stream: configurable stream chunk prealloc
|
12 years ago |
|
suricata-common.h
|
mpm: implement prefiltering for smtp
|
10 years ago |
|
suricata.c
|
unix-manager: convert to thread module
|
10 years ago |
|
suricata.h
|
detect-reload: enable unconditionally
|
10 years ago |
|
threads-arch-tile.h
|
threads: add untimed control cond call
|
10 years ago |
|
threads-debug.h
|
threads: add untimed control cond call
|
10 years ago |
|
threads-profile.h
|
threads: add untimed control cond call
|
10 years ago |
|
threads.c
|
Fix OS X 10.10 unittest failure
|
11 years ago |
|
threads.h
|
threads: add untimed control cond call
|
10 years ago |
|
threadvars.h
|
counters: rename threadvars public counters
|
10 years ago |
|
tm-modules.c
|
unix-manager: convert to thread module
|
10 years ago |
|
tm-modules.h
|
unix-manager: convert to thread module
|
10 years ago |
|
tm-queuehandlers.c
|
Enforce function coding standard
|
11 years ago |
|
tm-queuehandlers.h
|
…
|
|
|
tm-queues.c
|
Enforce function coding standard
|
11 years ago |
|
tm-queues.h
|
…
|
|
|
tm-threads-common.h
|
unix-manager: convert to thread module
|
10 years ago |
|
tm-threads.c
|
counters: rename threadvars public counters
|
10 years ago |
|
tm-threads.h
|
threading: remove unused cmd thread create func
|
10 years ago |
|
tmqh-flow.c
|
autofp: reduce flow storage space requirement
|
10 years ago |
|
tmqh-flow.h
|
Revert TmqhFlowMode alignment as it breaks on CLANG
|
12 years ago |
|
tmqh-nfq.c
|
Enforce function coding standard
|
11 years ago |
|
tmqh-nfq.h
|
…
|
|
|
tmqh-packetpool.c
|
packet pool: init pool for autofp workers as well
|
10 years ago |
|
tmqh-packetpool.h
|
packet pool: init pool for autofp workers as well
|
10 years ago |
|
tmqh-ringbuffer.c
|
Enforce function coding standard
|
11 years ago |
|
tmqh-ringbuffer.h
|
…
|
|
|
tmqh-simple.c
|
Enforce function coding standard
|
11 years ago |
|
tmqh-simple.h
|
…
|
|
|
unix-manager.c
|
counters: rename threadvars public counters
|
10 years ago |
|
unix-manager.h
|
unix-manager: convert to thread module
|
10 years ago |
|
util-action.c
|
Don't require an action-order configuration section. If not present,
|
11 years ago |
|
util-action.h
|
…
|
|
|
util-affinity.c
|
Enforce function coding standard
|
11 years ago |
|
util-affinity.h
|
Move header thread_affinity declaration to extern to avoid duplicate declarations.
|
12 years ago |
|
util-atomic.c
|
…
|
|
|
util-atomic.h
|
Support for Tile Gx atomic instructions
|
12 years ago |
|
util-base64.c
|
mime: refactor buffer use
|
11 years ago |
|
util-base64.h
|
mime: refactor buffer use
|
11 years ago |
|
util-binsearch.c
|
…
|
|
|
util-binsearch.h
|
…
|
|
|
util-bloomfilter-counting.c
|
Enforce function coding standard
|
11 years ago |
|
util-bloomfilter-counting.h
|
…
|
|
|
util-bloomfilter.c
|
Enforce function coding standard
|
11 years ago |
|
util-bloomfilter.h
|
Enforce function coding standard
|
11 years ago |
|
util-buffer.c
|
MemBuffer: add expansion call
|
11 years ago |
|
util-buffer.h
|
Fix bug #1435 (data loss when dumping payloads to JSON)
|
10 years ago |
|
util-byte.c
|
Enforce function coding standard
|
11 years ago |
|
util-byte.h
|
Introduce BytesToString utility
|
12 years ago |
|
util-checksum.c
|
Use %u for unsigned ints in checksum warning
|
12 years ago |
|
util-checksum.h
|
…
|
|
|
util-cidr.c
|
Enforce function coding standard
|
11 years ago |
|
util-cidr.h
|
…
|
|
|
util-classification-config.c
|
classification: update pcre globals use
|
10 years ago |
|
util-classification-config.h
|
classification: update pcre globals use
|
10 years ago |
|
util-clock.h
|
…
|
|
|
util-conf.c
|
More concise API for setting config values that
|
12 years ago |
|
util-conf.h
|
Prefix util-conf function with Config
|
12 years ago |
|
util-coredump-config.c
|
…
|
|
|
util-coredump-config.h
|
…
|
|
|
util-cpu.c
|
Formatting change for function call.
|
12 years ago |
|
util-cpu.h
|
…
|
|
|
util-crypt.c
|
…
|
|
|
util-crypt.h
|
…
|
|
|
util-cuda-buffer.c
|
Fix CUDA test warning.
|
12 years ago |
|
util-cuda-buffer.h
|
Modified CudaBufferCullCompletedSlices.
|
12 years ago |
|
util-cuda-handlers.c
|
Fix realloc error handling
|
12 years ago |
|
util-cuda-handlers.h
|
Version 1 of AC Cuda.
|
12 years ago |
|
util-cuda-vars.c
|
Minor cosmetic changes to the cuda code.
|
12 years ago |
|
util-cuda-vars.h
|
Minor cosmetic changes to the cuda code.
|
12 years ago |
|
util-cuda.c
|
Use unlikely in malloc failure test.
|
12 years ago |
|
util-cuda.h
|
update cuda API wrappers
|
12 years ago |
|
util-daemon.c
|
Enforce function coding standard
|
11 years ago |
|
util-daemon.h
|
…
|
|
|
util-debug-filters.c
|
Create SCMUTEX_INITIALIZER to abstract out PTHREAD_MUTEX_INITIALIZER
|
12 years ago |
|
util-debug-filters.h
|
…
|
|
|
util-debug.c
|
Fix potential deadlock in output
|
10 years ago |
|
util-debug.h
|
suricata: add -v[v] option to increase verbosity
|
12 years ago |
|
util-decode-asn1.c
|
Formatting change for function call.
|
12 years ago |
|
util-decode-asn1.h
|
…
|
|
|
util-decode-der-get.c
|
decode-der: decode DC keyword
|
10 years ago |
|
util-decode-der-get.h
|
…
|
|
|
util-decode-der.c
|
Fix possible wrap in uint32_t addition in DER parser
|
10 years ago |
|
util-decode-der.h
|
…
|
|
|
util-decode-mime.c
|
smtp: fix mime boundary parsing issue
|
10 years ago |
|
util-decode-mime.h
|
smtp: fix mime boundary parsing issue
|
10 years ago |
|
util-device.c
|
util-device: fix LiveBuildDeviceListCustom
|
10 years ago |
|
util-device.h
|
Declare a wrapper to parse group option for nflog
|
11 years ago |
|
util-enum.c
|
…
|
|
|
util-enum.h
|
…
|
|
|
util-error.c
|
ippair: track ippairs, enable tests
|
10 years ago |
|
util-error.h
|
ippair: track ippairs, enable tests
|
10 years ago |
|
util-file.c
|
filedata: implement inspected tracker
|
10 years ago |
|
util-file.h
|
filedata: implement inspected tracker
|
10 years ago |
|
util-fix_checksum.c
|
…
|
|
|
util-fix_checksum.h
|
…
|
|
|
util-fmemopen.c
|
Enforce function coding standard
|
11 years ago |
|
util-fmemopen.h
|
…
|
|
|
util-hash-lookup3.c
|
…
|
|
|
util-hash-lookup3.h
|
…
|
|
|
util-hash.c
|
Enforce function coding standard
|
11 years ago |
|
util-hash.h
|
…
|
|
|
util-hashlist.c
|
Enforce function coding standard
|
11 years ago |
|
util-hashlist.h
|
…
|
|
|
util-host-info.c
|
Add new function to work on kernel version.
|
12 years ago |
|
util-host-info.h
|
Add new function to work on kernel version.
|
12 years ago |
|
util-host-os-info.c
|
afl - SCHINfoLoadFromConfig - check for NULL before parsing.
|
10 years ago |
|
util-host-os-info.h
|
…
|
|
|
util-ioctl.c
|
util-ioctl: don't build code RX ring on old system
|
11 years ago |
|
util-ioctl.h
|
ioctl: make all string args const pointers
|
11 years ago |
|
util-ip.c
|
Added the new files containing the repeated functions
|
12 years ago |
|
util-ip.h
|
Added the new files containing the repeated functions
|
12 years ago |
|
util-logopenfile-tile.c
|
Add option on Tile-Gx for logging for fast.log alerts over PCIe
|
12 years ago |
|
util-logopenfile-tile.h
|
Add option on Tile-Gx for logging for fast.log alerts over PCIe
|
12 years ago |
|
util-logopenfile.c
|
When re-opening a log file on HUP, always append.
|
10 years ago |
|
util-logopenfile.h
|
logfile: rename ALERT_ types to LOGFILE_TYPE_
|
10 years ago |
|
util-lua-common.c
|
lua: in streaming api, indicate open/close
|
11 years ago |
|
util-lua-common.h
|
lua: move function to common utils
|
11 years ago |
|
util-lua-dns.c
|
lua: add export of dns.rrname
|
11 years ago |
|
util-lua-dns.h
|
lua: add export of dns.rrname
|
11 years ago |
|
util-lua-http.c
|
lua: move function to common utils
|
11 years ago |
|
util-lua-http.h
|
lua: move output http funcs to generic util file
|
11 years ago |
|
util-lua.c
|
lua: LuaPushStringBuffer optimization
|
11 years ago |
|
util-lua.h
|
lua: move LuaPushStringBuffer to the generic util-lua.c
|
11 years ago |
|
util-magic.c
|
util-magic: make unittests less specific
|
11 years ago |
|
util-magic.h
|
Bug 585: use per detect thread libmagic ctx
|
13 years ago |
|
util-mem.h
|
Use posix_memalign instead of mm_malloc on non-Windows systems.
|
11 years ago |
|
util-memcmp.c
|
Add test for memcmp issue.
|
11 years ago |
|
util-memcmp.h
|
Create Specialized SCMemcmpNZ() when the length can't be zero.
|
11 years ago |
|
util-memcpy.h
|
Move memcpy_lower() into new util-memcpy.h
|
12 years ago |
|
util-memrchr.c
|
Enforce function coding standard
|
11 years ago |
|
util-memrchr.h
|
Add a fallback memrchr implementation for those platforms that dont support it. Bug #963.
|
12 years ago |
|
util-misc.c
|
ParseSizeString - don't abort on unknown unit type.
|
10 years ago |
|
util-misc.h
|
Change ParseSize api to not leak memory and only setup pcre once.
|
12 years ago |
|
util-mpm-ac-bs.c
|
Use SigIntId as the type for storing signature IDs (Internal)
|
11 years ago |
|
util-mpm-ac-bs.h
|
Use SigIntId as the type for storing signature IDs (Internal)
|
11 years ago |
|
util-mpm-ac-cuda-kernel.cu
|
Version 1 of AC Cuda.
|
12 years ago |
|
util-mpm-ac-gfbs.c
|
Use SigIntId as the type for storing signature IDs (Internal)
|
11 years ago |
|
util-mpm-ac-gfbs.h
|
Use SigIntId as the type for storing signature IDs (Internal)
|
11 years ago |
|
util-mpm-ac-tile-small.c
|
In AC-Tile, convert from using pids for indexing to pattern index
|
11 years ago |
|
util-mpm-ac-tile.c
|
Use SigIntId as the type for storing signature IDs (Internal)
|
11 years ago |
|
util-mpm-ac-tile.h
|
Use SigIntId as the type for storing signature IDs (Internal)
|
11 years ago |
|
util-mpm-ac.c
|
AC: fix memory leak
|
11 years ago |
|
util-mpm-ac.h
|
Use SigIntId as the type for storing signature IDs (Internal)
|
11 years ago |
|
util-mpm-b2g.c
|
Use SigIntId as the type for storing signature IDs (Internal)
|
11 years ago |
|
util-mpm-b2g.h
|
Use SigIntId as the type for storing signature IDs (Internal)
|
11 years ago |
|
util-mpm-b3g.c
|
Use SigIntId as the type for storing signature IDs (Internal)
|
11 years ago |
|
util-mpm-b3g.h
|
Use SigIntId as the type for storing signature IDs (Internal)
|
11 years ago |
|
util-mpm-wumanber.c
|
Use SigIntId as the type for storing signature IDs (Internal)
|
11 years ago |
|
util-mpm-wumanber.h
|
Use SigIntId as the type for storing signature IDs (Internal)
|
11 years ago |
|
util-mpm.c
|
Use SigIntId as the type for storing signature IDs (Internal)
|
11 years ago |
|
util-mpm.h
|
Use SigIntId as the type for storing signature IDs (Internal)
|
11 years ago |
|
util-optimize.h
|
cppcheck: don't use likely/unlikely when -DCPPCHECK is passed to the checker
|
12 years ago |
|
util-path.c
|
Enforce function coding standard
|
11 years ago |
|
util-path.h
|
…
|
|
|
util-pidfile.c
|
Enforce function coding standard
|
11 years ago |
|
util-pidfile.h
|
suricata: avoid concurrent run in daemon mode
|
13 years ago |
|
util-pool-thread.c
|
Enforce function coding standard
|
11 years ago |
|
util-pool-thread.h
|
pool thread: undo CLS alignment
|
12 years ago |
|
util-pool.c
|
Enforce function coding standard
|
11 years ago |
|
util-pool.h
|
pool: rename data structure fields to stack
|
12 years ago |
|
util-print.c
|
Enforce function coding standard
|
11 years ago |
|
util-print.h
|
Add packet and payload logging to JSON alert output
|
11 years ago |
|
util-privs.c
|
Enforce function coding standard
|
11 years ago |
|
util-privs.h
|
…
|
|
|
util-profiling-keywords.c
|
Suppress debug statements
|
11 years ago |
|
util-profiling-locks.c
|
Enforce function coding standard
|
11 years ago |
|
util-profiling-locks.h
|
…
|
|
|
util-profiling-rules.c
|
profiling: fix sorting on very long runs
|
10 years ago |
|
util-profiling.c
|
detect: add profiling for non-mpm list build & filter
|
11 years ago |
|
util-profiling.h
|
profiling: conditional rule profiling
|
12 years ago |
|
util-proto-name.c
|
parsing: s/strtok/strtok_r/g
|
10 years ago |
|
util-proto-name.h
|
…
|
|
|
util-radix-tree.c
|
radix-tree - prevent out of bounds array access
|
10 years ago |
|
util-radix-tree.h
|
radix: don't modify node prefix on lookup
|
12 years ago |
|
util-random.c
|
Enforce function coding standard
|
11 years ago |
|
util-random.h
|
…
|
|
|
util-reference-config.c
|
reference: update pcre globals use
|
10 years ago |
|
util-reference-config.h
|
reference: update pcre globals use
|
10 years ago |
|
util-ringbuffer.c
|
Enforce function coding standard
|
11 years ago |
|
util-ringbuffer.h
|
…
|
|
|
util-rohash.c
|
Enforce function coding standard
|
11 years ago |
|
util-rohash.h
|
…
|
|
|
util-rule-vars.c
|
rule vars: support prefix
|
10 years ago |
|
util-rule-vars.h
|
rule-vars: take detect engine as arg
|
10 years ago |
|
util-runmodes.c
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
util-runmodes.h
|
runmodes: remove DetectEngineCtx passing from API
|
10 years ago |
|
util-running-modes.c
|
util-running-mode: setup config file
|
10 years ago |
|
util-running-modes.h
|
Suppress Suri prefix.
|
12 years ago |
|
util-signal.c
|
…
|
|
|
util-signal.h
|
…
|
|
|
util-spm-bm.c
|
Enforce function coding standard
|
11 years ago |
|
util-spm-bm.h
|
Fix Boyer Moore Nocase bug where BoyerMooreCtxToNocase was missing.
|
11 years ago |
|
util-spm-bs.c
|
Enforce function coding standard
|
11 years ago |
|
util-spm-bs.h
|
…
|
|
|
util-spm-bs2bm.c
|
Enforce function coding standard
|
11 years ago |
|
util-spm-bs2bm.h
|
…
|
|
|
util-spm.c
|
Enforce function coding standard
|
11 years ago |
|
util-spm.h
|
…
|
|
|
util-storage.c
|
ippair: track ippairs, enable tests
|
10 years ago |
|
util-storage.h
|
ippair: track ippairs, enable tests
|
10 years ago |
|
util-strlcatu.c
|
…
|
|
|
util-strlcpyu.c
|
…
|
|
|
util-syslog.c
|
Formatting change for function call.
|
12 years ago |
|
util-syslog.h
|
…
|
|
|
util-threshold-config.c
|
threshold: cleanups
|
10 years ago |
|
util-threshold-config.h
|
…
|
|
|
util-time.c
|
Add timezone to timestamp in JSON logs
|
10 years ago |
|
util-time.h
|
output-json: update timestamp format
|
12 years ago |
|
util-unittest-helper.c
|
Enforce function coding standard
|
11 years ago |
|
util-unittest-helper.h
|
Use u8 for ipproto
|
12 years ago |
|
util-unittest.c
|
Enforce function coding standard
|
11 years ago |
|
util-unittest.h
|
…
|
|
|
util-validate.h
|
debug-validation: fix packet check
|
12 years ago |
|
util-var-name.c
|
vars: redo var name <-> idx handling
|
10 years ago |
|
util-var-name.h
|
vars: redo var name <-> idx handling
|
10 years ago |
|
util-var.c
|
xbits: hostbits use xbits type
|
10 years ago |
|
util-var.h
|
xbits: expire (first steps)
|
10 years ago |
|
util-vector.h
|
…
|
|
|
win32-misc.c
|
Fix indentation of win32 files.
|
13 years ago |
|
win32-misc.h
|
…
|
|
|
win32-service.c
|
Fix indentation of win32 files.
|
13 years ago |
|
win32-service.h
|
…
|
|
|
win32-syslog.h
|
…
|
|
