aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
main-8.0.x
main
main-7.0.x
master-6.0.x
master-5.0.x
master-4.1.x
master-4.0.x
master-3.2.x
suricata-8.0.6
suricata-7.0.17
suricata-8.0.5
suricata-7.0.16
suricata-8.0.4
suricata-7.0.15
suricata-8.0.3
suricata-7.0.14
suricata-8.0.2
suricata-7.0.13
suricata-8.0.1
suricata-7.0.12
suricata-8.0.0
suricata-7.0.11
suricata-8.0.0-rc1
suricata-8.0.0-beta1
suricata-7.0.10
suricata-7.0.9
suricata-7.0.8
suricata-7.0.7
suricata-7.0.6
suricata-6.0.20
suricata-7.0.5
suricata-6.0.19
suricata-6.0.18
suricata-7.0.4
suricata-6.0.17
suricata-7.0.3
suricata-6.0.16
suricata-7.0.2
suricata-6.0.15
suricata-7.0.1
suricata-6.0.14
suricata-7.0.0
suricata-7.0.0-rc2
suricata-6.0.13
suricata-6.0.12
suricata-6.0.11
suricata-7.0.0-rc1
suricata-6.0.10
suricata-6.0.9
suricata-7.0.0-beta1
suricata-6.0.8
suricata-6.0.7
suricata-6.0.6
suricata-5.0.10
suricata-6.0.5
suricata-5.0.9
suricata-6.0.4
suricata-5.0.8
suricata-6.0.3
suricata-5.0.7
suricata-6.0.2
suricata-5.0.6
suricata-6.0.1
suricata-5.0.5
suricata-4.1.10
suricata-4.1.9
suricata-5.0.4
suricata-6.0.0
suricata-6.0.0-rc1
suricata-6.0.0-beta1
suricata-5.0.3
suricata-4.1.8
suricata-4.1.7
suricata-5.0.2
suricata-4.1.6
suricata-5.0.1
suricata-5.0.0
suricata-5.0.0-rc1
suricata-4.1.5
suricata-5.0.0-beta1
suricata-4.1.4
suricata-4.1.3
suricata-4.0.7
suricata-4.1.2
suricata-4.1.1
suricata-4.1.0
suricata-4.0.6
suricata-4.1.0-rc2
suricata-4.1.0-rc1
suricata-4.0.5
suricata-4.1.0-beta1
suricata-4.0.4
suricata-4.0.3
suricata-4.0.2
suricata-3.2.5
suricata-4.0.1
suricata-3.2.4
suricata-4.0.0
suricata-4.0.0-rc2
suricata-3.2.3
suricata-4.0.0-rc1
suricata-4.0.0-beta1
suricata-3.2.2
suricata-3.1.4
suricata-3.2.1
suricata-3.2
suricata-3.2RC1
suricata-3.1.3
suricata-3.2beta1
suricata-3.1.2
suricata-3.1.1
suricata-3.1
suricata-3.0.2
suricata-3.1RC1
suricata-3.0.1
suricata-3.0.1RC1
suricata-3.0
suricata-2.0.11
suricata-3.0RC3
suricata-3.0RC2
suricata-3.0RC1
suricata-2.0.10
suricata-2.0.9
suricata-2.1beta4
suricata-2.0.8
suricata-2.0.7
suricata-2.1beta3
suricata-2.0.6
suricata-2.0.5
suricata-2.1beta2
suricata-2.0.4
suricata-2.1beta1
suricata-2.0.3
suricata-2.0.2
suricata-2.0.1
suricata-2.0.1rc1
suricata-2.0
suricata-2.0rc3
suricata-2.0rc2
suricata-2.0rc1
suricata-2.0beta2
suricata-1.4.7
suricata-1.4.6
suricata-1.4.5
suricata-2.0beta1
suricata-1.4.4
suricata-1.4.3
suricata-1.4.2
suricata-1.4.1
suricata-1.3.6
suricata-1.4
suricata-1.3.5
suricata-1.4rc1
suricata-1.3.4
suricata-1.4beta3
suricata-1.3.3
suricata-1.4beta2
suricata-1.3.2
suricata-1.4beta1
suricata-1.3.1
suricata-1.3
suricata-1.3rc1
suricata-1.3beta2
suricata-1.3beta1
suricata-1.2.1
suricata-1.2
suricata-1.2rc1
suricata-1.2beta1
suricata-1.1.1
suricata-0.8.2
suricata-1.0.0
suricata-1.0.1
suricata-1.0.2
suricata-1.0.3
suricata-1.0.4
suricata-1.0.5
suricata-1.1
suricata-1.1beta1
suricata-1.1beta2
suricata-1.1beta3
suricata-1.1rc1
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '56541c7c37'
${ noResults }
suricata/src
History
Victor Julien 9d5c4273cb defrag: don't use completed tracker 
When a Tracker is set up for a IPID, frags come in for it and it's
reassembled and complete, the `DefragTracker::remove` flag is set. This
is mean to tell the hash cleanup code to recyle the tracker and to let
the lookup code skip the tracker during lookup.

A logic error lead to the following scenario:

1. there are sufficient frag trackers to make sure the hash table is
   filled with trackers
2. frags for a Packet with IPID X are processed correctly (X1)
3. frags for a new Packet that also has IPID X come in quickly after the
   first (X2).
4. during the lookup, the frag for X2 hashes to a hash row that holds
   more than one tracker
5. as the trackers in hash row are evaluated, it finds the tracker for
   X1, but since the `remove` bit is not checked, it is returned as the
   tracker for X2.
6. reassembly fails, as the tracker is already complete

The logic error is that only for the first tracker in a row the `remove`
bit was checked, leading to reuse to a closed tracker if there were more
trackers in the hash row.

Ticket: #7042.
 		2 years ago
..
tests detect/http: fix compile warning in body tests 2 years ago
Makefile.am detect/fileext: reimplement based on file.name 3 years ago
action-globals.h rules: add config action 6 years ago
alert-debuglog.c
…
alert-debuglog.h
…
alert-fastlog.c proto: Remove dependency on /etc/protocols 5 years ago
alert-fastlog.h
…
alert-prelude.c http2: initial support 6 years ago
alert-prelude.h
…
alert-syslog.c proto: Remove dependency on /etc/protocols 5 years ago
alert-syslog.h
…
app-layer-dcerpc-common.h
…
app-layer-dcerpc-udp.c dcerpc: add probe function 6 years ago
app-layer-dcerpc-udp.h
…
app-layer-dcerpc.c dcerpc: add probe function 6 years ago
app-layer-dcerpc.h
…
app-layer-detect-proto.c protocol: forbids concurrent protocol upgrades 4 years ago
app-layer-detect-proto.h protodetect: rename direction to flags 6 years ago
app-layer-dnp3-objects.c dnp3: regenerate object decoding code 5 years ago
app-layer-dnp3-objects.h
…
app-layer-dnp3.c dnp3: optimized tx iterator 3 years ago
app-layer-dnp3.h dnp3: support AppLayerTxData 6 years ago
app-layer-enip-common.c
…
app-layer-enip-common.h enip: use status for probing parser 6 years ago
app-layer-enip.c enip: optimized tx iterator 3 years ago
app-layer-enip.h
…
app-layer-events.c events: reset logged event 4 years ago
app-layer-events.h
…
app-layer-expectation.c ippair/storage: use dedicated 'id' type 4 years ago
app-layer-expectation.h ippair/storage: use dedicated 'id' type 4 years ago
app-layer-ftp.c ftp: don't decrement truncated line len 3 years ago
app-layer-ftp.h ftp: separate truncated line markers 3 years ago
app-layer-htp-body.c
…
app-layer-htp-body.h
…
app-layer-htp-file.c http: support per-tx file accounting 5 years ago
app-layer-htp-file.h http: support per-tx file accounting 5 years ago
app-layer-htp-libhtp.c
…
app-layer-htp-libhtp.h
…
app-layer-htp-mem.c src: fix strict-prototype warnings 4 years ago
app-layer-htp-mem.h
…
app-layer-htp-xff.c
…
app-layer-htp-xff.h
…
app-layer-htp.c http1: configurable max number of live tx per flow 3 years ago
app-layer-htp.h http1: remove transactions from their list 3 years ago
app-layer-http2.c http2: null check during upgrade 5 years ago
app-layer-http2.h http2: mimic HTTP1 request from upgrade 6 years ago
app-layer-ikev2.c
…
app-layer-ikev2.h
…
app-layer-krb5.c
…
app-layer-krb5.h
…
app-layer-modbus.c modbus: stop allocating transactions when flooded 6 years ago
app-layer-modbus.h modbus: support AppLayerTxData 6 years ago
app-layer-mqtt.c rust/mqtt: add MQTT parser 6 years ago
app-layer-mqtt.h rust/mqtt: add MQTT parser 6 years ago
app-layer-nbss.h
…
app-layer-nfs-tcp.c applayer: pass parameter to StateAlloc 6 years ago
app-layer-nfs-tcp.h
…
app-layer-nfs-udp.c applayer: pass parameter to StateAlloc 6 years ago
app-layer-nfs-udp.h
…
app-layer-ntp.c
…
app-layer-ntp.h
…
app-layer-parser.c exceptions: add master switch config option 3 years ago
app-layer-parser.h app-layer: add flag to skip detection on TX 3 years ago
app-layer-protos.c tftp: StringToAppProto case 4 years ago
app-layer-protos.h detect/dcerpc: apply dcerpc to smb as well 4 years ago
app-layer-rdp.c
…
app-layer-rdp.h
…
app-layer-register.c applayer/rust: expose truncate callback 6 years ago
app-layer-register.h rust: RustParser same fields as AppLayerParser 4 years ago
app-layer-rfb.c
…
app-layer-rfb.h
…
app-layer-sip.c sip: minor cleanup 6 years ago
app-layer-sip.h sip: minor cleanup 6 years ago
app-layer-smb.c smb: protocol detection on pattern without midstream 4 years ago
app-layer-smb.h
…
app-layer-smtp.c smtp: avoid creating empty transaction 3 years ago
app-layer-smtp.h smtp: avoid creating empty transaction 3 years ago
app-layer-snmp.c
…
app-layer-snmp.h
…
app-layer-ssh.c eve: add Hassh fields to SSH JSON logger and add ssh log condition 6 years ago
app-layer-ssh.h eve: add Hassh fields to SSH JSON logger and add ssh log condition 6 years ago
app-layer-ssl.c tls: fix off by one in supported versions extension 4 years ago
app-layer-ssl.h tls: make version and size checks stricter 4 years ago
app-layer-template-rust.c
…
app-layer-template-rust.h
…
app-layer-template.c applayer: pass parameter to StateAlloc 6 years ago
app-layer-template.h template: support AppLayerTxData 6 years ago
app-layer-tftp.c tftp: use destate 4 years ago
app-layer-tftp.h
…
app-layer.c misc: fix typos, doc, update copyright years 3 years ago
app-layer.h
…
conf-yaml-loader.c conf: avoid quadratic complexity 2 years ago
conf-yaml-loader.h
…
conf.c src: use FatalError whenever possible 6 years ago
conf.h
…
counters.c src: fix strict-prototype warnings 4 years ago
counters.h
…
datasets-md5.c
…
datasets-md5.h
…
datasets-reputation.h
…
datasets-sha256.c
…
datasets-sha256.h
…
datasets-string.c datasets/string: fix buffer overflow 6 years ago
datasets-string.h
…
datasets.c src: fix unused-but-set-variable compile warnings 4 years ago
datasets.h datasets: allow memcap, hashsize be set via yaml or rule 6 years ago
debug.h
…
decode-chdlc.c detect: update copyright years 4 years ago
decode-chdlc.h
…
decode-erspan.c decode: limits the number of decoded layers 6 years ago
decode-erspan.h
…
decode-ethernet.c detect: update copyright years 4 years ago
decode-ethernet.h decode: Add ethertype for VNTAG 5 years ago
decode-events.c stream: add stream.rst_with_data event for RST with data 3 years ago
decode-events.h stream: add stream.rst_with_data event for RST with data 3 years ago
decode-geneve.c decode: limits the number of decoded layers 6 years ago
decode-geneve.h decode/geneve: Add Geneve decoding functionality 6 years ago
decode-gre.c decode: limits the number of decoded layers 6 years ago
decode-gre.h
…
decode-icmpv4.c detect: update copyright years 4 years ago
decode-icmpv4.h decode: Improved handling of ICMPv4 messages 6 years ago
decode-icmpv6.c detect: update copyright years 4 years ago
decode-icmpv6.h
…
decode-ipv4.c detect: update copyright years 4 years ago
decode-ipv4.h
…
decode-ipv6.c decode-ipv6: Set L4 proto on ipv6 incase of GRE decode error 3 years ago
decode-ipv6.h
…
decode-mpls.c detect: update copyright years 4 years ago
decode-mpls.h
…
decode-null.c loopback: decodes IPv6 from all OSes 5 years ago
decode-null.h
…
decode-ppp.c decode: limits the number of decoded layers 6 years ago
decode-ppp.h
…
decode-pppoe.c pppoe: fix protocol field length variation 5 years ago
decode-pppoe.h pppoe: fix protocol field length variation 5 years ago
decode-raw.c
…
decode-raw.h
…
decode-sctp.c
…
decode-sctp.h
…
decode-sll.c decode: limits the number of decoded layers 6 years ago
decode-sll.h
…
decode-tcp.c counters: make tcp stats independent of flow, ssn 3 years ago
decode-tcp.h decode/tcp: allow 4 byte TFO with 2 byte cookie 4 years ago
decode-template.c decode: limits the number of decoded layers 6 years ago
decode-template.h
…
decode-teredo.c decode/teredo: Modified/refactored Teredo logic 6 years ago
decode-teredo.h
…
decode-udp.c decode/udp: fix payload_len calculation 4 years ago
decode-udp.h
…
decode-vlan.c decode: limits the number of decoded layers 6 years ago
decode-vlan.h
…
decode-vntag.c decode/vntag: By default, disable vntag decoding 5 years ago
decode-vntag.h decode/vntag: By default, disable vntag decoding 5 years ago
decode-vxlan.c decode: limits the number of decoded layers 6 years ago
decode-vxlan.h
…
decode.c defrag: fix wrong datalink being logged 2 years ago
decode.h pcap: support LINKTYPE_IPV6 (229) 2 years ago
defrag-config.c src: use FatalError whenever possible 6 years ago
defrag-config.h
…
defrag-hash.c defrag: don't use completed tracker 2 years ago
defrag-hash.h misc: fix typos, doc, update copyright years 3 years ago
defrag-queue.c src: fix strict-prototype warnings 4 years ago
defrag-queue.h
…
defrag-timeout.c
…
defrag-timeout.h
…
defrag.c defrag: fix check for complete packet 2 years ago
defrag.h defrag: fix wrong datalink being logged 2 years ago
detect-app-layer-event.c detect/app-layer-events: improve warnings/errors 6 years ago
detect-app-layer-event.h
…
detect-app-layer-protocol.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-app-layer-protocol.h
…
detect-asn1.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-asn1.h detect/asn1: Update asn1 C files to use rust code 6 years ago
detect-base64-data.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-base64-data.h
…
detect-base64-decode.c base64: add new mode as per RFC 4648 4 years ago
detect-base64-decode.h
…
detect-bsize.c
…
detect-bsize.h
…
detect-bypass.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-bypass.h
…
detect-byte-extract.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-byte-extract.h
…
detect-byte.c detect: Use byte-math to byte var handling func 6 years ago
detect-byte.h detect: Add utility module for byte var handling 6 years ago
detect-bytejump.c detect/bytejump: Improve end-of-buffer handling 3 years ago
detect-bytejump.h detect/bsize: Use U16 bit macros 6 years ago
detect-bytemath.c detect/byte-math: Support multiplication operator 3 years ago
detect-bytemath.h detect: Treat offset as a signed value 6 years ago
detect-bytetest.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-bytetest.h detect: byte_math support 6 years ago
detect-cipservice.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-cipservice.h
…
detect-classtype.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-classtype.h
…
detect-config.c detect: config checks alstate before getting tx 4 years ago
detect-config.h detect/config: initial version 6 years ago
detect-content.c detect/content: cleanup nocase conversion 3 years ago
detect-content.h detect/content: cleanup nocase conversion 3 years ago
detect-csum.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-csum.h
…
detect-datarep.c detect: fix use of uninit memory in DetectDatarepParse 6 years ago
detect-datarep.h
…
detect-dataset.c datasets: flag to disable "write" actions 3 years ago
detect-dataset.h
…
detect-dce-iface.c detect/dcerpc: simplify keyword validation 4 years ago
detect-dce-iface.h
…
detect-dce-opnum.c detect/dcerpc: simplify keyword validation 4 years ago
detect-dce-opnum.h
…
detect-dce-stub-data.c detect/dcerpc: simplify keyword validation 4 years ago
detect-dce-stub-data.h
…
detect-depth.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-depth.h
…
detect-detection-filter.c detect: parsing avoiding infinite loop 4 years ago
detect-detection-filter.h
…
detect-distance.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-distance.h
…
detect-dnp3.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-dnp3.h
…
detect-dns-opcode.c
…
detect-dns-opcode.h
…
detect-dns-query.c dns: create transaction even if z-bit was set 5 years ago
detect-dns-query.h
…
detect-dsize.c detect: update copyright years 4 years ago
detect-dsize.h
…
detect-engine-address-ipv4.c
…
detect-engine-address-ipv4.h
…
detect-engine-address-ipv6.c detect/ipv6: remove useless code 4 years ago
detect-engine-address-ipv6.h
…
detect-engine-address.c detect: fix scan-build warnings 3 years ago
detect-engine-address.h detect/address: Expose DetectAddressCopy function 5 years ago
detect-engine-alert.c detect/alert: Drop packet if rule is pkt only 2 years ago
detect-engine-alert.h detect/alert: add unittests to check packet action 4 years ago
detect-engine-analyzer.c detect/analysis: Move globals to engine ctx 3 years ago
detect-engine-analyzer.h detect/analysis: Move globals to engine ctx 3 years ago
detect-engine-build.c detect/analysis: Move globals to engine ctx 3 years ago
detect-engine-build.h
…
detect-engine-content-inspection.c detect/content: Negated endswith matches 3 years ago
detect-engine-content-inspection.h
…
detect-engine-dcepayload.c
…
detect-engine-dcepayload.h
…
detect-engine-dns.c
…
detect-engine-dns.h
…
detect-engine-enip.c src: fix unused-but-set-variable compile warnings 4 years ago
detect-engine-enip.h
…
detect-engine-event.c decode/events: add strict mode for udp.hlen_invalid; remove rule 4 years ago
detect-engine-event.h
…
detect-engine-file.c
…
detect-engine-file.h
…
detect-engine-iponly.c detect/iponly: fix compile warning 2 years ago
detect-engine-iponly.h detect/iponly: remove DetectEngineIPOnlyThreadCtx 3 years ago
detect-engine-loader.c multi-tenant: fix loader dead lock 3 years ago
detect-engine-loader.h multi-tenant: fix loader dead lock 3 years ago
detect-engine-modbus.c modbus: make subfunction uint16_t 6 years ago
detect-engine-modbus.h
…
detect-engine-mpm.c detect: improve prepare mpms routine 3 years ago
detect-engine-mpm.h detect/engine: fix typos in assorted files 4 years ago
detect-engine-payload.c
…
detect-engine-payload.h
…
detect-engine-port.c detect: fix possible leak found by coverity 3 years ago
detect-engine-port.h
…
detect-engine-prefilter-common.c detect/prefilter: fix null ptr deref on invalid rule 6 years ago
detect-engine-prefilter-common.h proto: introduce signature protocol, as extension to flow protocol 5 years ago
detect-engine-prefilter.c detect: parsing avoiding infinite loop 4 years ago
detect-engine-prefilter.h
…
detect-engine-profile.c detect/profile: convert match dumps to jsonbuilder 6 years ago
detect-engine-profile.h
…
detect-engine-proto.c
…
detect-engine-proto.h
…
detect-engine-register.c detect/fileext: reimplement based on file.name 3 years ago
detect-engine-register.h detect: New enum for icmpv4 header keyword 6 years ago
detect-engine-siggroup.c
…
detect-engine-siggroup.h
…
detect-engine-sigorder.c detect/sigorder: assist scan-build 3 years ago
detect-engine-sigorder.h detect/sigorder: remove unused struct fields 3 years ago
detect-engine-state.c Revert "detect/state: optimize state keeping" 6 years ago
detect-engine-state.h detect: store detect flags in AppLayerTxData 6 years ago
detect-engine-tag.c src: fix strict-prototype warnings 4 years ago
detect-engine-tag.h
…
detect-engine-threshold.c threshold: suppress debug notice message 4 years ago
detect-engine-threshold.h thresholds: Fix buffer overflow in threshold context 5 years ago
detect-engine-uint.c detect: fix bad BUG_ON pattern 4 years ago
detect-engine-uint.h detect: adds engine for u8 keywords 6 years ago
detect-engine.c detect: free all tenant detect engines 3 years ago
detect-engine.h detect: free all tenant detect engines 3 years ago
detect-fast-pattern.c detect-fast-pattern: remove unused var alertcnt 3 years ago
detect-fast-pattern.h
…
detect-file-data.c doc: update file.data keyword documentation 3 years ago
detect-file-data.h
…
detect-file-hash-common.c file-hash-common: fix rule_file truncation 6 years ago
detect-file-hash-common.h
…
detect-filemagic.c detect/filemagic: fix thread ctx registration; reloads 3 years ago
detect-filemagic.h magic: get rid of global lock 6 years ago
detect-filemd5.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-filemd5.h
…
detect-filename.c detect/file: correct registration for HTTP 3 years ago
detect-filename.h
…
detect-filesha1.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-filesha1.h
…
detect-filesha256.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-filesha256.h
…
detect-filesize.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-filesize.h
…
detect-filestore.c proto: introduce signature protocol, as extension to flow protocol 5 years ago
detect-filestore.h
…
detect-flow.c detect/flow: test cleanup 6 years ago
detect-flow.h
…
detect-flowbits.c detect/analysis: Move globals to engine ctx 3 years ago
detect-flowbits.h
…
detect-flowint.c var-names: reimplement var name handling 3 years ago
detect-flowint.h
…
detect-flowvar.c var-names: reimplement var name handling 3 years ago
detect-flowvar.h var-names: reimplement var name handling 3 years ago
detect-fragbits.c detect: update copyright years 4 years ago
detect-fragbits.h detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-fragoffset.c detect: update copyright years 4 years ago
detect-fragoffset.h
…
detect-ftpbounce.c detect: Fix FTP bounce detection IP address comparison 3 years ago
detect-ftpbounce.h
…
detect-ftpdata.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-ftpdata.h
…
detect-geoip.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-geoip.h
…
detect-gid.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-gid.h detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-hostbits.c var-names: reimplement var name handling 3 years ago
detect-hostbits.h
…
detect-http-accept-enc.c
…
detect-http-accept-enc.h
…
detect-http-accept-lang.c
…
detect-http-accept-lang.h
…
detect-http-accept.c
…
detect-http-accept.h
…
detect-http-client-body.c detect: fixes InspectionBuffer id with transforms 5 years ago
detect-http-client-body.h
…
detect-http-connection.c
…
detect-http-connection.h
…
detect-http-content-len.c
…
detect-http-content-len.h
…
detect-http-content-type.c
…
detect-http-content-type.h
…
detect-http-cookie.c http2: http.cookie keyword now works for HTTP2 5 years ago
detect-http-cookie.h
…
detect-http-header-common.c
…
detect-http-header-common.h
…
detect-http-header-names.c http2: http.header_names keyword now works for HTTP2 5 years ago
detect-http-header-names.h
…
detect-http-header.c http2: http.header keyword now works for HTTP2 5 years ago
detect-http-header.h
…
detect-http-headers-stub.h http2: makes all HTTP1 header keywords work 5 years ago
detect-http-headers.c
…
detect-http-headers.h
…
detect-http-host.c http2: http.host normalized keyword now works for HTTP2 5 years ago
detect-http-host.h
…
detect-http-location.c
…
detect-http-location.h
…
detect-http-method.c http2: http.method keyword now works for HTTP2 5 years ago
detect-http-method.h
…
detect-http-protocol.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-http-protocol.h
…
detect-http-raw-header.c http2: http.header keyword now works for HTTP2 5 years ago
detect-http-raw-header.h
…
detect-http-referer.c
…
detect-http-referer.h
…
detect-http-request-line.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-http-request-line.h
…
detect-http-response-line.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-http-response-line.h
…
detect-http-server-body.c
…
detect-http-server-body.h
…
detect-http-server.c
…
detect-http-server.h
…
detect-http-start.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-http-start.h
…
detect-http-stat-code.c http2: http.stat_code keyword now works for HTTP2 5 years ago
detect-http-stat-code.h
…
detect-http-stat-msg.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-http-stat-msg.h
…
detect-http-ua.c http2: http.user_agent keyword now works for HTTP2 5 years ago
detect-http-ua.h
…
detect-http-uri.c detect/uri: Remove unnecessary include 4 years ago
detect-http-uri.h
…
detect-http2.c detect/http2: warning that http2.header is removed 3 years ago
detect-http2.h http2: initial support 6 years ago
detect-icmp-id.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-icmp-id.h
…
detect-icmp-seq.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-icmp-seq.h
…
detect-icmpv4hdr.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-icmpv4hdr.h detect: Add icmpv4.hdr sticky buffer 6 years ago
detect-icmpv6-mtu.c detect: adds engine for u8 keywords 6 years ago
detect-icmpv6-mtu.h
…
detect-icmpv6hdr.c icmpv6: bail out for icmpv6.hdr keyword if not ICMPv6 6 years ago
detect-icmpv6hdr.h
…
detect-icode.c detect/icmp: reject invalid rules for icode/itype 6 years ago
detect-icode.h
…
detect-id.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-id.h
…
detect-ipopts.c detect: update copyright years 4 years ago
detect-ipopts.h
…
detect-ipproto.c unittests: alloc Packet with PacketGetFromAlloc 4 years ago
detect-ipproto.h
…
detect-iprep.c detect/iprep: fix host locking issues 5 years ago
detect-iprep.h
…
detect-ipv4hdr.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-ipv4hdr.h
…
detect-ipv6hdr.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-ipv6hdr.h
…
detect-isdataat.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-isdataat.h detect: byte_math support 6 years ago
detect-itype.c detect/icmp: reject invalid rules for icode/itype 6 years ago
detect-itype.h
…
detect-krb5-cname.c detect: fix multi inspect buffer issue; clean up 5 years ago
detect-krb5-cname.h
…
detect-krb5-errcode.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-krb5-errcode.h
…
detect-krb5-msgtype.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-krb5-msgtype.h
…
detect-krb5-sname.c detect: fix multi inspect buffer issue; clean up 5 years ago
detect-krb5-sname.h
…
detect-l3proto.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-l3proto.h
…
detect-lua-extensions.c general: Correct typo 6 years ago
detect-lua-extensions.h
…
detect-lua.c var-names: reimplement var name handling 3 years ago
detect-lua.h
…
detect-mark.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-mark.h detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-metadata.c eve/metadata: create preformatted json string at start up 6 years ago
detect-metadata.h eve/metadata: create preformatted json string at start up 6 years ago
detect-modbus.c modbus: fix memory leak in signature parsing 5 years ago
detect-modbus.h modbus: align comments properly 6 years ago
detect-mqtt-connack-sessionpresent.c detect-mqtt: unify error handling in rule parsing 6 years ago
detect-mqtt-connack-sessionpresent.h rust/mqtt: add MQTT parser 6 years ago
detect-mqtt-connect-clientid.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-mqtt-connect-clientid.h rust/mqtt: add MQTT parser 6 years ago
detect-mqtt-connect-flags.c detect-mqtt: unify error handling in rule parsing 6 years ago
detect-mqtt-connect-flags.h rust/mqtt: add MQTT parser 6 years ago
detect-mqtt-connect-password.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-mqtt-connect-password.h rust/mqtt: add MQTT parser 6 years ago
detect-mqtt-connect-username.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-mqtt-connect-username.h rust/mqtt: add MQTT parser 6 years ago
detect-mqtt-connect-willmessage.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-mqtt-connect-willmessage.h rust/mqtt: add MQTT parser 6 years ago
detect-mqtt-connect-willtopic.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-mqtt-connect-willtopic.h rust/mqtt: add MQTT parser 6 years ago
detect-mqtt-flags.c detect-mqtt: unify error handling in rule parsing 6 years ago
detect-mqtt-flags.h rust/mqtt: add MQTT parser 6 years ago
detect-mqtt-protocol-version.c rust/mqtt: add MQTT parser 6 years ago
detect-mqtt-protocol-version.h rust/mqtt: add MQTT parser 6 years ago
detect-mqtt-publish-message.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-mqtt-publish-message.h rust/mqtt: add MQTT parser 6 years ago
detect-mqtt-publish-topic.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-mqtt-publish-topic.h rust/mqtt: add MQTT parser 6 years ago
detect-mqtt-qos.c rust/mqtt: add MQTT parser 6 years ago
detect-mqtt-qos.h rust/mqtt: add MQTT parser 6 years ago
detect-mqtt-reason-code.c rust/mqtt: add MQTT parser 6 years ago
detect-mqtt-reason-code.h rust/mqtt: add MQTT parser 6 years ago
detect-mqtt-subscribe-topic.c detect: fix multi inspect buffer issue; clean up 5 years ago
detect-mqtt-subscribe-topic.h rust/mqtt: add MQTT parser 6 years ago
detect-mqtt-type.c rust/mqtt: add MQTT parser 6 years ago
detect-mqtt-type.h rust/mqtt: add MQTT parser 6 years ago
detect-mqtt-unsubscribe-topic.c detect: fix multi inspect buffer issue; clean up 5 years ago
detect-mqtt-unsubscribe-topic.h rust/mqtt: add MQTT parser 6 years ago
detect-msg.c detect: parsing avoiding infinite loop 4 years ago
detect-msg.h
…
detect-nfs-procedure.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-nfs-procedure.h
…
detect-nfs-version.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-nfs-version.h
…
detect-noalert.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-noalert.h
…
detect-nocase.c detect/content: cleanup nocase conversion 3 years ago
detect-nocase.h
…
detect-offset.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-offset.h
…
detect-parse.c detect/parse: set limits for pcre2 2 years ago
detect-parse.h detect: fail properly on invalid transform pcrexform 6 years ago
detect-pcre.c var-names: reimplement var name handling 3 years ago
detect-pcre.h detect: impose limits on pcrexform 4 years ago
detect-pkt-data.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-pkt-data.h
…
detect-pktvar.c var-names: reimplement var name handling 3 years ago
detect-pktvar.h
…
detect-prefilter.c detect/prefilter: fix handling of prefilter as fast_pattern alias 6 years ago
detect-prefilter.h
…
detect-priority.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-priority.h
…
detect-rawbytes.c
…
detect-rawbytes.h
…
detect-reference.c
…
detect-reference.h
…
detect-replace.c content: don't error out on incomplete hex 4 years ago
detect-replace.h
…
detect-rev.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-rev.h
…
detect-rfb-name.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-rfb-name.h
…
detect-rfb-secresult.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-rfb-secresult.h
…
detect-rfb-sectype.c
…
detect-rfb-sectype.h
…
detect-rpc.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-rpc.h
…
detect-sameip.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-sameip.h
…
detect-sid.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-sid.h
…
detect-sip-method.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-sip-method.h
…
detect-sip-protocol.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-sip-protocol.h
…
detect-sip-request-line.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-sip-request-line.h
…
detect-sip-response-line.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-sip-response-line.h
…
detect-sip-stat-code.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-sip-stat-code.h
…
detect-sip-stat-msg.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-sip-stat-msg.h
…
detect-sip-uri.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-sip-uri.h
…
detect-smb-share.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-smb-share.h
…
detect-snmp-community.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-snmp-community.h
…
detect-snmp-pdu_type.c
…
detect-snmp-pdu_type.h
…
detect-snmp-version.c
…
detect-snmp-version.h
…
detect-ssh-hassh-server-string.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-ssh-hassh-server-string.h detect: add (mpm) hassh keywords 6 years ago
detect-ssh-hassh-server.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-ssh-hassh-server.h detect: add (mpm) hassh keywords 6 years ago
detect-ssh-hassh-string.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-ssh-hassh-string.h detect: add (mpm) hassh keywords 6 years ago
detect-ssh-hassh.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-ssh-hassh.h detect: add (mpm) hassh keywords 6 years ago
detect-ssh-proto-version.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-ssh-proto-version.h
…
detect-ssh-proto.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-ssh-proto.h
…
detect-ssh-software-version.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-ssh-software-version.h
…
detect-ssh-software.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-ssh-software.h
…
detect-ssl-state.c
…
detect-ssl-state.h
…
detect-ssl-version.c ssl: improves keyword ssl_version parsing 6 years ago
detect-ssl-version.h
…
detect-stream_size.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-stream_size.h
…
detect-tag.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-tag.h
…
detect-target.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-target.h
…
detect-tcp-ack.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-tcp-ack.h
…
detect-tcp-flags.c detect: update copyright years 4 years ago
detect-tcp-flags.h detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-tcp-seq.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-tcp-seq.h
…
detect-tcp-window.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-tcp-window.h
…
detect-tcphdr.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-tcphdr.h
…
detect-tcpmss.c src: remove multiple uses of atoi 6 years ago
detect-tcpmss.h
…
detect-template-buffer.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-template-buffer.h
…
detect-template-rust-buffer.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-template-rust-buffer.h
…
detect-template.c src: remove multiple uses of atoi 6 years ago
detect-template.h
…
detect-template2.c src: remove multiple uses of atoi 6 years ago
detect-template2.h
…
detect-threshold.c detect: parsing avoiding infinite loop 4 years ago
detect-threshold.h detect/threshold: Function to deep-copy thresh obj 5 years ago
detect-tls-cert-fingerprint.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-tls-cert-fingerprint.h
…
detect-tls-cert-issuer.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-tls-cert-issuer.h
…
detect-tls-cert-serial.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-tls-cert-serial.h
…
detect-tls-cert-subject.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-tls-cert-subject.h
…
detect-tls-cert-validity.c
…
detect-tls-cert-validity.h
…
detect-tls-certs.c detect: fix multi inspect buffer issue; clean up 5 years ago
detect-tls-certs.h
…
detect-tls-ja3-hash.c tls: remove incomplete tests 4 years ago
detect-tls-ja3-hash.h
…
detect-tls-ja3-string.c tls: remove incomplete tests 4 years ago
detect-tls-ja3-string.h
…
detect-tls-ja3s-hash.c tls: remove incomplete tests 4 years ago
detect-tls-ja3s-hash.h
…
detect-tls-ja3s-string.c tls: remove incomplete tests 4 years ago
detect-tls-ja3s-string.h
…
detect-tls-sni.c tls: remove incomplete tests 4 years ago
detect-tls-sni.h
…
detect-tls-version.c
…
detect-tls-version.h
…
detect-tls.c detect/tls: minor fingerprint cleanup 3 years ago
detect-tls.h detect/tls: minor fingerprint cleanup 3 years ago
detect-tos.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-tos.h
…
detect-transform-compress-whitespace.c detect: transforms check for 0-sized buffer 4 years ago
detect-transform-compress-whitespace.h
…
detect-transform-dotprefix.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-transform-dotprefix.h
…
detect-transform-md5.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-transform-md5.h
…
detect-transform-pcrexform.c detect: impose limits on pcrexform 4 years ago
detect-transform-pcrexform.h detect/pcrexform: New transform: applies RE 6 years ago
detect-transform-sha1.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-transform-sha1.h
…
detect-transform-sha256.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-transform-sha256.h
…
detect-transform-strip-whitespace.c detect: transforms check for 0-sized buffer 4 years ago
detect-transform-strip-whitespace.h
…
detect-transform-urldecode.c detect: transforms check for 0-sized buffer 4 years ago
detect-transform-urldecode.h transform: adds url_decode keyword 6 years ago
detect-ttl.c ttl: Make IPV4 TTL uint_8t 6 years ago
detect-ttl.h
…
detect-udphdr.c detect: fix heap overflow issue with buffer setup 6 years ago
detect-udphdr.h
…
detect-uricontent.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-uricontent.h
…
detect-urilen.c detect/urilen: fix applying urilen as depth 4 years ago
detect-urilen.h
…
detect-within.c detect: hide RegisterTests behind ifdef UNITTESTS 6 years ago
detect-within.h
…
detect-xbits.c var-names: reimplement var name handling 3 years ago
detect-xbits.h
…
detect.c detect: add check to validate drops 3 years ago
detect.h detect/analysis: Move globals to engine ctx 3 years ago
device-storage.c
…
device-storage.h
…
feature.c
…
feature.h
…
flow-bit.c
…
flow-bit.h
…
flow-bypass.c src: fix strict-prototype warnings 4 years ago
flow-bypass.h
…
flow-hash.c misc: fix typos, doc, update copyright years 3 years ago
flow-hash.h exceptions: initial exception-policy implementation 4 years ago
flow-manager.c flow/timeout: no pseudo packets for dropped flows 3 years ago
flow-manager.h flow/recycler: bring back pthread_cond_t sleep 4 years ago
flow-private.h flow: redesign of flow timeout handling 6 years ago
flow-queue.c src: fix strict-prototype warnings 4 years ago
flow-queue.h flow: redesign of flow timeout handling 6 years ago
flow-spare-pool.c flow: free spare pool more aggressively 5 years ago
flow-spare-pool.h flow: redesign of flow timeout handling 6 years ago
flow-storage.c flow/storage: use dedicated 'id' type 4 years ago
flow-storage.h flow/storage: use dedicated 'id' type 4 years ago
flow-timeout.c threading: don't pass locked flow between threads 5 years ago
flow-timeout.h flow: minor code cleanup 6 years ago
flow-util.c flow: cleanup and clarify ancient debug messages 4 years ago
flow-util.h flow: redesign of flow timeout handling 6 years ago
flow-var.c
…
flow-var.h
…
flow-worker.c detect: update packet action on protocol change 3 years ago
flow-worker.h flow: redesign of flow timeout handling 6 years ago
flow.c flow: apply flow to packet on flow lookup 3 years ago
flow.h exceptions: initial exception-policy implementation 4 years ago
host-bit.c src: use FatalError whenever possible 6 years ago
host-bit.h
…
host-queue.c src: fix strict-prototype warnings 4 years ago
host-queue.h
…
host-storage.c
…
host-storage.h
…
host-timeout.c host/iprep: run all timeout logic 3 years ago
host-timeout.h
…
host.c iprep: unify free handling 5 years ago
host.h
…
ippair-bit.c ippair/storage: use dedicated 'id' type 4 years ago
ippair-bit.h
…
ippair-queue.c src: fix strict-prototype warnings 4 years ago
ippair-queue.h
…
ippair-storage.c ippair/storage: use dedicated 'id' type 4 years ago
ippair-storage.h ippair/storage: use dedicated 'id' type 4 years ago
ippair-timeout.c
…
ippair-timeout.h
…
ippair.c src: use FatalError whenever possible 6 years ago
ippair.h
…
log-cf-common.c src: fix strict-prototype warnings 4 years ago
log-cf-common.h
…
log-httplog.c
…
log-httplog.h
…
log-pcap.c pcap-log: close pcap_dead_handle on close 3 years ago
log-pcap.h
…
log-stats.c
…
log-stats.h
…
log-tcp-data.c
…
log-tcp-data.h
…
log-tlslog.c
…
log-tlslog.h
…
log-tlsstore.c output: use BASE64_BUFFER_SIZE macro 6 years ago
log-tlsstore.h
…
main.c
…
output-file.c output: use flow's proto for file loggers 4 years ago
output-file.h
…
output-filedata.c output: skip files logging for ICMP packets 4 years ago
output-filedata.h
…
output-filestore.c eve: add common options to loggers missing it 4 years ago
output-filestore.h filestore: fix global counter init in unix socket mode 6 years ago
output-flow.c output/flow: fix deinit after incomplete init 6 years ago
output-flow.h
…
output-json-alert.c output/alert: add verdict field 3 years ago
output-json-alert.h output/alert: add verdict field 3 years ago
output-json-anomaly.c log/anomaly: Move metadata out of anomaly section 6 years ago
output-json-anomaly.h
…
output-json-common.c output/json: Multi-threaded EVE logging support 6 years ago
output-json-dcerpc.c eve: add common options to loggers missing it 4 years ago
output-json-dcerpc.h logging: Add DCERPC logger 6 years ago
output-json-dhcp.c eve/dhcp: avoid to call common logging twice 6 years ago
output-json-dhcp.h
…
output-json-dnp3-objects.c dnp3: check Base64Encode return value for logging 4 years ago
output-json-dnp3-objects.h dnp3/eve: regenerator object logging code 6 years ago
output-json-dnp3.c output: fix integer warnings 4 years ago
output-json-dnp3.h dnp3/eve: convert to jsonbuilder (non generated code) 6 years ago
output-json-dns.c dns/eve: use default formats if formats is empty 3 years ago
output-json-dns.h dns/eve: convert to jsonbuilder 6 years ago
output-json-drop.c output/drop: add verdict field 3 years ago
output-json-drop.h
…
output-json-email-common.c jsonbuilder: fix build error 6 years ago
output-json-email-common.h output/json: Multi-threaded EVE logging support 6 years ago
output-json-file.c output/file: http2 metdata is logged in http object 3 years ago
output-json-file.h eve: add common options to loggers missing it 4 years ago
output-json-flow.c flow: log action applied to all packets 4 years ago
output-json-flow.h flow/eve: convert to jsonbuilder 6 years ago
output-json-ftp.c src: fix unused-but-set-variable compile warnings 4 years ago
output-json-ftp.h
…
output-json-http.c output: use BASE64_BUFFER_SIZE macro 6 years ago
output-json-http.h http/eve: remove jansson version of metadata logger 6 years ago
output-json-http2.c output/http2: Multi-threaded EVE logging support 6 years ago
output-json-http2.h http2: initial support 6 years ago
output-json-ikev2.c output/json: Multi-threaded EVE logging support 6 years ago
output-json-ikev2.h
…
output-json-krb5.c output/json: Multi-threaded EVE logging support 6 years ago
output-json-krb5.h
…
output-json-metadata.c eve: fix memory leak in metadata 6 years ago
output-json-metadata.h
…
output-json-mqtt.c eve: add common options to loggers missing it 4 years ago
output-json-mqtt.h rust/mqtt: add MQTT parser 6 years ago
output-json-netflow.c output: Remove unused output functions 6 years ago
output-json-netflow.h
…
output-json-nfs.c output/json: Multi-threaded EVE logging support 6 years ago
output-json-nfs.h eve/nfs: switch output to jsonbuilder 6 years ago
output-json-rdp.c output/json: Multi-threaded EVE logging support 6 years ago
output-json-rdp.h
…
output-json-rfb.c eve: add common options to loggers missing it 4 years ago
output-json-rfb.h rfb/eve: convert to jsonbuilder 6 years ago
output-json-sip.c output/json: Multi-threaded EVE logging support 6 years ago
output-json-sip.h sip/eve: convert to jsonbuilder 6 years ago
output-json-smb.c output/json: Multi-threaded EVE logging support 6 years ago
output-json-smb.h smb/eve: convert to jsonbuilder 6 years ago
output-json-smtp.c output/email: use SCCalloc for OutputJsonEmailCtx 3 years ago
output-json-smtp.h smtp/eve: convert to jsonbuilder 6 years ago
output-json-snmp.c output/json: Multi-threaded EVE logging support 6 years ago
output-json-snmp.h
…
output-json-ssh.c output: Remove unused output functions 6 years ago
output-json-ssh.h
…
output-json-stats.c output: fix integer warnings 4 years ago
output-json-stats.h
…
output-json-template-rust.c output/json: Multi-threaded EVE logging support 6 years ago
output-json-template-rust.h
…
output-json-template.c output/json: Multi-threaded EVE logging support 6 years ago
output-json-template.h
…
output-json-tftp.c output/json: Multi-threaded EVE logging support 6 years ago
output-json-tftp.h
…
output-json-tls.c output: use BASE64_BUFFER_SIZE macro 6 years ago
output-json-tls.h tls/eve: convert to jsonbuilder 6 years ago
output-json.c community-id: Fix IPv6 address sorting not respecting byte order 3 years ago
output-json.h plugins: initial support for a filetype plugin 6 years ago
output-lua.c lua/output: fix typo 5 years ago
output-lua.h
…
output-packet.c
…
output-packet.h
…
output-stats.c
…
output-stats.h
…
output-streaming.c
…
output-streaming.h
…
output-tx.c detect: config keyword transaction logic fix 4 years ago
output-tx.h
…
output.c output: Remove unused output functions 6 years ago
output.h output: Remove unused output functions 6 years ago
packet-queue.c
…
packet-queue.h
…
pkt-var.c
…
pkt-var.h
…
queue.h
…
reputation.c iprep: unify free handling 5 years ago
reputation.h iprep: unify free handling 5 years ago
respond-reject-libnet11.c respond/reject: fix IPv6 TCP resets 3 years ago
respond-reject-libnet11.h reject: minor code cleanup 6 years ago
respond-reject.c sources: hide RegisterTests behind ifdef UNITTESTS 6 years ago
respond-reject.h reject: minor code cleanup 6 years ago
runmode-af-packet.c af-packet: terminate on same interface & copyiface 3 years ago
runmode-af-packet.h
…
runmode-erf-dag.c src: use FatalError whenever possible 6 years ago
runmode-erf-dag.h
…
runmode-erf-file.c runmodes: minor format string fixes 4 years ago
runmode-erf-file.h
…
runmode-ipfw.c
…
runmode-ipfw.h
…
runmode-napatech.c napatech: remove deprecated hba support 3 years ago
runmode-napatech.h
…
runmode-netmap.c runmodes: earlier evaluation of IPS mode 3 years ago
runmode-netmap.h netmap: V14 API changes 4 years ago
runmode-nflog.c plugins: config.h: move into src and rename to autoconf.h 6 years ago
runmode-nflog.h
…
runmode-nfq.c
…
runmode-nfq.h
…
runmode-pcap-file.c runmodes: minor format string fixes 4 years ago
runmode-pcap-file.h
…
runmode-pcap.c src: use FatalError whenever possible 6 years ago
runmode-pcap.h
…
runmode-pfring.c gen: Typo correction 3 years ago
runmode-pfring.h
…
runmode-unittests.c runmodes: introduce unknown engine runmode 3 years ago
runmode-unittests.h
…
runmode-unix-socket.c stat: add wrappers to isolate OS_WIN32 specifics 3 years ago
runmode-unix-socket.h
…
runmode-windivert.c
…
runmode-windivert.h
…
runmodes.c config/thread: Use config'd per-thread stack size 5 years ago
runmodes.h config/thread: Use config'd per-thread stack size 5 years ago
rust-context.c suricata: expose the SuricataContext with a function 6 years ago
rust-context.h rust/context: add AppLayerParserTriggerRawStreamReassembly 6 years ago
rust.h json: macro for setting formatted false value 6 years ago
source-af-packet.c src: fix extern max_pending_packets type 3 years ago
source-af-packet.h af-packet: use configured cluster-id when checking for fanout 5 years ago
source-erf-dag.c src: fix extern max_pending_packets type 3 years ago
source-erf-dag.h
…
source-erf-file.c sources: hide RegisterTests behind ifdef UNITTESTS 6 years ago
source-erf-file.h
…
source-ipfw.c src: fix extern max_pending_packets type 3 years ago
source-ipfw.h
…
source-napatech.c napatech: update docs to remove hba reference 3 years ago
source-napatech.h napatech: remove deprecated hba support 3 years ago
source-netmap.c netmap: packet stall 4 years ago
source-netmap.h netmap: V14 API changes 4 years ago
source-nflog.c sources: hide RegisterTests behind ifdef UNITTESTS 6 years ago
source-nflog.h
…
source-nfq-prototypes.h
…
source-nfq.c src: fix extern max_pending_packets type 3 years ago
source-nfq.h
…
source-pcap-file-directory-helper.c stat: add wrappers to isolate OS_WIN32 specifics 3 years ago
source-pcap-file-directory-helper.h pcap: read directories recursively 6 years ago
source-pcap-file-helper.c pcap: support LINKTYPE_IPV6 (229) 2 years ago
source-pcap-file-helper.h
…
source-pcap-file.c pcap/file: minor code cleanup 3 years ago
source-pcap-file.h
…
source-pcap.c pcap: fix reopen logic 3 years ago
source-pcap.h
…
source-pfring.c pfring: Packet structure for ts fix 3 years ago
source-pfring.h pf-ring: Add add'l cluster types 3 years ago
source-windivert-prototypes.h
…
source-windivert.c windivert: fix compile warnings 3 years ago
source-windivert.h
…
stream-tcp-inline.c stream: fix overlap detection 4 years ago
stream-tcp-inline.h
…
stream-tcp-list.c stream: remove bug on from packet path 4 years ago
stream-tcp-list.h
…
stream-tcp-private.h stream: accept and flag ack of ZWP data 4 years ago
stream-tcp-reassemble.c stats: Track stream reassembly drops 3 years ago
stream-tcp-reassemble.h stream/unittests: fix failures after last_ack fix 4 years ago
stream-tcp-sack.c stream: D-SACK detection and logging 4 years ago
stream-tcp-sack.h
…
stream-tcp-util.c
…
stream-tcp-util.h
…
stream-tcp.c stream: add stream.rst_with_data event for RST with data 3 years ago
stream-tcp.h counters: make tcp stats independent of flow, ssn 3 years ago
stream.c
…
stream.h
…
suricata-common.h scan-build: treat as debug validate 3 years ago
suricata-plugin.h plugins: support for capture plugins 6 years ago
suricata.c detect: free all tenant detect engines 3 years ago
suricata.h runmodes: introduce unknown engine runmode 3 years ago
threads-debug.h
…
threads-profile.h
…
threads.c
…
threads.h plugins: config.h: move into src and rename to autoconf.h 6 years ago
threadvars.h threading: force break loop on flow inject 5 years ago
tm-modules.c plugins: support for capture plugins 6 years ago
tm-modules.h sources: hide RegisterTests behind ifdef UNITTESTS 6 years ago
tm-queuehandlers.c
…
tm-queuehandlers.h
…
tm-queues.c
…
tm-queues.h
…
tm-threads-common.h plugins: support for capture plugins 6 years ago
tm-threads.c detect: inspect all packets in multi-layer tunneling 3 years ago
tm-threads.h detect: inspect all packets in multi-layer tunneling 3 years ago
tmqh-flow.c flow: fix unlikely issue with int handling 6 years ago
tmqh-flow.h
…
tmqh-packetpool.c detect: fixes to action handling; fix PASS 4 years ago
tmqh-packetpool.h
…
tmqh-simple.c
…
tmqh-simple.h
…
tree.h
…
unix-manager.c src: use FatalError whenever possible 6 years ago
unix-manager.h
…
util-action.c src: fix strict-prototype warnings 4 years ago
util-action.h
…
util-affinity.c src: fix strict-prototype warnings 4 years ago
util-affinity.h affinity: Convert nb_threads to uint32_t 6 years ago
util-atomic.c
…
util-atomic.h atomics: Add "decl and init with value" function 6 years ago
util-base64.c util/base64: fix buffer overflow 2 years ago
util-base64.h util/mime: skip over any invalid char 3 years ago
util-bloomfilter-counting.c
…
util-bloomfilter-counting.h
…
util-bloomfilter.c
…
util-bloomfilter.h
…
util-bpf.c bpf: remove OpenBSD guards 3 years ago
util-bpf.h bpf: remove OpenBSD guards 3 years ago
util-buffer.c
…
util-buffer.h
…
util-byte.c util: fix trailing char check with ByteExtractString 6 years ago
util-byte.h
…
util-checksum.c
…
util-checksum.h
…
util-cidr.c util: add unit tests for CIDRFromMask() 4 years ago
util-cidr.h util: add unit tests for CIDRFromMask() 4 years ago
util-classification-config.c classification: remove useless clear 4 years ago
util-classification-config.h
…
util-clock.h
…
util-conf.c stat: add wrappers to isolate OS_WIN32 specifics 3 years ago
util-conf.h
…
util-config.h config: common definitions 6 years ago
util-coredump-config.c
…
util-coredump-config.h
…
util-cpu.c src: remove multiple uses of atoi 6 years ago
util-cpu.h
…
util-crypt.c
…
util-crypt.h util: right parenthesises for base64 macro 4 years ago
util-daemon.c ci: update to macos latest 3 years ago
util-daemon.h
…
util-debug-filters.c src: fix strict-prototype warnings 4 years ago
util-debug-filters.h
…
util-debug.c src: fix strict-prototype warnings 4 years ago
util-debug.h debug: add bool string print helper macro 4 years ago
util-decode-mime.c util/mime: fix memory leak 3 years ago
util-decode-mime.h mime: avoid quadratic complexity in MimeDecAddEntity 3 years ago
util-detect.c
…
util-detect.h
…
util-device.c src: fix unused-but-set-variable compile warnings 4 years ago
util-device.h capture: optimize checksum handling 6 years ago
util-ebpf.c ebpf: update deprecated API calls 4 years ago
util-ebpf.h
…
util-enum.c
…
util-enum.h
…
util-error.c path: new funcs to merge paths 3 years ago
util-error.h path: new funcs to merge paths 3 years ago
util-exception-policy.c exception: fix use of master switch with default 3 years ago
util-exception-policy.h exception: parse config values, don't post process 3 years ago
util-file-decompression.c swf: right input length for decompression 5 years ago
util-file-decompression.h
…
util-file-swf-decompression.c swf: fix coverity warnings 5 years ago
util-file-swf-decompression.h
…
util-file.c files: always initialize inspect_window and min_inspect_depth 4 years ago
util-file.h files: always initialize inspect_window and min_inspect_depth 4 years ago
util-fix_checksum.c
…
util-fix_checksum.h
…
util-fmemopen.c
…
util-fmemopen.h
…
util-hash-lookup3.c src: fix strict-prototype warnings 4 years ago
util-hash-lookup3.h
…
util-hash-string.c util: export Djb2 hash string function 5 years ago
util-hash-string.h util: export Djb2 hash string function 5 years ago
util-hash.c
…
util-hash.h
…
util-hashlist.c
…
util-hashlist.h
…
util-host-info.c plugins: config.h: move into src and rename to autoconf.h 6 years ago
util-host-info.h
…
util-host-os-info.c src: use FatalError whenever possible 6 years ago
util-host-os-info.h
…
util-hyperscan.c
…
util-hyperscan.h
…
util-ioctl.c
…
util-ioctl.h
…
util-ip.c src: use FatalError whenever possible 6 years ago
util-ip.h
…
util-ja3.c ja3: fix minor format string warning 4 years ago
util-ja3.h
…
util-log-redis.c src: fix strict-prototype warnings 4 years ago
util-log-redis.h redis: Change port type to uint16_t 6 years ago
util-logopenfile.c logopenfile: fix minor format string warning 4 years ago
util-logopenfile.h output/log: Removed pcie (Tilera) log vestiges 5 years ago
util-lua-common.c util/lua-common: use lua_pushnumber for SCFileInfo 5 years ago
util-lua-common.h
…
util-lua-dnp3-objects.c
…
util-lua-dnp3-objects.h
…
util-lua-dnp3.c
…
util-lua-dnp3.h
…
util-lua-dns.c
…
util-lua-dns.h
…
util-lua-hassh.c lua: add functions to get hassh parameters 6 years ago
util-lua-hassh.h lua: add functions to get hassh parameters 6 years ago
util-lua-http.c
…
util-lua-http.h
…
util-lua-ja3.c
…
util-lua-ja3.h
…
util-lua-smtp.c
…
util-lua-smtp.h
…
util-lua-ssh.c
…
util-lua-ssh.h
…
util-lua-tls.c
…
util-lua-tls.h
…
util-lua.c
…
util-lua.h
…
util-luajit.c
…
util-luajit.h
…
util-macset.c flow/storage: use dedicated 'id' type 4 years ago
util-macset.h flow/storage: use dedicated 'id' type 4 years ago
util-magic.c magic: get rid of global lock 6 years ago
util-magic.h magic: get rid of global lock 6 years ago
util-mem.c
…
util-mem.h scan-build: use simpler aligned alloc wrapper 3 years ago
util-memcmp.c
…
util-memcmp.h memcmp: no-simd no case loop can scan forward 4 years ago
util-memcpy.h
…
util-memrchr.c
…
util-memrchr.h
…
util-misc.c plugins: config.h: move into src and rename to autoconf.h 6 years ago
util-misc.h
…
util-mpm-ac-bs.c mpm/ac-bs: work around scan-build warnings 3 years ago
util-mpm-ac-bs.h
…
util-mpm-ac-ks-small.c
…
util-mpm-ac-ks.c mpm/ac-ks: address int handling issues 4 years ago
util-mpm-ac-ks.h
…
util-mpm-ac.c mpm: allocate StateQueue on the heap 3 years ago
util-mpm-ac.h
…
util-mpm-hs.c mpm/hs: fix scan-build warning 3 years ago
util-mpm-hs.h
…
util-mpm.c detect/mpm: fix id confusion in mpm_ctx sharing 6 years ago
util-mpm.h detect/mpm: fix id confusion in mpm_ctx sharing 6 years ago
util-napatech.c napatech: Removed restriction on use of inline mode 6 years ago
util-napatech.h napatech: make stream_id uint8_t 6 years ago
util-optimize.h
…
util-pages.c
…
util-pages.h
…
util-path.c path: new funcs to merge paths 3 years ago
util-path.h path: new funcs to merge paths 3 years ago
util-pidfile.c
…
util-pidfile.h
…
util-plugin.c plugins: require registration function SCPluginRegister 6 years ago
util-plugin.h plugins: support for capture plugins 6 years ago
util-pool-thread.c
…
util-pool-thread.h
…
util-pool.c
…
util-pool.h
…
util-prefilter.c detect/prefilter: small cleanup 6 years ago
util-prefilter.h detect/prefilter: small cleanup 6 years ago
util-print.c util: PrintRawDataFp handles null 6 years ago
util-print.h
…
util-privs.c src: use FatalError whenever possible 6 years ago
util-privs.h
…
util-profiling-keywords.c src: use FatalError whenever possible 6 years ago
util-profiling-locks.c src: fix strict-prototype warnings 4 years ago
util-profiling-locks.h
…
util-profiling-prefilter.c src: use FatalError whenever possible 6 years ago
util-profiling-rulegroups.c src: use FatalError whenever possible 6 years ago
util-profiling-rules.c src: use FatalError whenever possible 6 years ago
util-profiling.c profiling: fix profiling with sample rate 5 years ago
util-profiling.h
…
util-proto-name.c util/proto: Protocol-name functions 5 years ago
util-proto-name.h util/proto: Protocol-name functions 5 years ago
util-radix-tree.c radix: add debug validation to assist scan-build 3 years ago
util-radix-tree.h
…
util-random.c
…
util-random.h
…
util-reference-config.c src: fix unused-but-set-variable compile warnings 4 years ago
util-reference-config.h
…
util-rohash.c
…
util-rohash.h
…
util-rule-vars.c
…
util-rule-vars.h
…
util-runmodes.c runmodes: fix more warnings 4 years ago
util-runmodes.h
…
util-running-modes.c logging: change ownership of application log if needed 5 years ago
util-running-modes.h cmdline: --list-app-layer-protos respects -c arg 6 years ago
util-signal.c
…
util-signal.h
…
util-spm-bm.c src: use FatalError whenever possible 6 years ago
util-spm-bm.h
…
util-spm-bs.c
…
util-spm-bs.h
…
util-spm-bs2bm.c
…
util-spm-bs2bm.h
…
util-spm-hs.c spm/hs: don't exit on bad patterns 3 years ago
util-spm-hs.h
…
util-spm.c hyperscan: better error message if not compiled 6 years ago
util-spm.h
…
util-storage.c
…
util-storage.h
…
util-streaming-buffer.c streaming: improve error handling 3 years ago
util-streaming-buffer.h streaming/buffer: account sbb data size 5 years ago
util-strlcatu.c src: fix deprecated-non-prototype compile warnings 4 years ago
util-strlcpyu.c src: fix deprecated-non-prototype compile warnings 4 years ago
util-strptime.c
…
util-syslog.c
…
util-syslog.h
…
util-thash.c fuzz: limit memcap for datasets when fuzzing 6 years ago
util-thash.h datasets: allow memcap, hashsize be set via yaml or rule 6 years ago
util-threshold-config.c threshold: fix regex to accept by_both and by_rule 4 years ago
util-threshold-config.h
…
util-time.c time: fix warning in timestring creation 4 years ago
util-time.h time: add timeradd implementation 4 years ago
util-unittest-helper.c flow: redesign of flow timeout handling 6 years ago
util-unittest-helper.h
…
util-unittest.c unittests: check for flow memuse 6 years ago
util-unittest.h general: Correct typos 6 years ago
util-validate.h scan-build: treat as debug validate 3 years ago
util-var-name.c var-names: reimplement var name handling 3 years ago
util-var-name.h var-names: reimplement var name handling 3 years ago
util-var.c
…
util-var.h
…
util-vector.h
…
win32-misc.c
…
win32-misc.h
…
win32-service.c
…
win32-service.h
…
win32-syscall.c src: fix strict-prototype warnings 4 years ago
win32-syscall.h
…
win32-syslog.h
…