aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
main
main-8.0.x
main-7.0.x
master-6.0.x
master-5.0.x
master-4.1.x
master-4.0.x
master-3.2.x
suricata-8.0.7
suricata-8.0.6
suricata-7.0.17
suricata-8.0.5
suricata-7.0.16
suricata-8.0.4
suricata-7.0.15
suricata-8.0.3
suricata-7.0.14
suricata-8.0.2
suricata-7.0.13
suricata-8.0.1
suricata-7.0.12
suricata-8.0.0
suricata-7.0.11
suricata-8.0.0-rc1
suricata-8.0.0-beta1
suricata-7.0.10
suricata-7.0.9
suricata-7.0.8
suricata-7.0.7
suricata-7.0.6
suricata-6.0.20
suricata-7.0.5
suricata-6.0.19
suricata-6.0.18
suricata-7.0.4
suricata-6.0.17
suricata-7.0.3
suricata-6.0.16
suricata-7.0.2
suricata-6.0.15
suricata-7.0.1
suricata-6.0.14
suricata-7.0.0
suricata-7.0.0-rc2
suricata-6.0.13
suricata-6.0.12
suricata-6.0.11
suricata-7.0.0-rc1
suricata-6.0.10
suricata-6.0.9
suricata-7.0.0-beta1
suricata-6.0.8
suricata-6.0.7
suricata-6.0.6
suricata-5.0.10
suricata-6.0.5
suricata-5.0.9
suricata-6.0.4
suricata-5.0.8
suricata-6.0.3
suricata-5.0.7
suricata-6.0.2
suricata-5.0.6
suricata-6.0.1
suricata-5.0.5
suricata-4.1.10
suricata-4.1.9
suricata-5.0.4
suricata-6.0.0
suricata-6.0.0-rc1
suricata-6.0.0-beta1
suricata-5.0.3
suricata-4.1.8
suricata-4.1.7
suricata-5.0.2
suricata-4.1.6
suricata-5.0.1
suricata-5.0.0
suricata-5.0.0-rc1
suricata-4.1.5
suricata-5.0.0-beta1
suricata-4.1.4
suricata-4.1.3
suricata-4.0.7
suricata-4.1.2
suricata-4.1.1
suricata-4.1.0
suricata-4.0.6
suricata-4.1.0-rc2
suricata-4.1.0-rc1
suricata-4.0.5
suricata-4.1.0-beta1
suricata-4.0.4
suricata-4.0.3
suricata-4.0.2
suricata-3.2.5
suricata-4.0.1
suricata-3.2.4
suricata-4.0.0
suricata-4.0.0-rc2
suricata-3.2.3
suricata-4.0.0-rc1
suricata-4.0.0-beta1
suricata-3.2.2
suricata-3.1.4
suricata-3.2.1
suricata-3.2
suricata-3.2RC1
suricata-3.1.3
suricata-3.2beta1
suricata-3.1.2
suricata-3.1.1
suricata-3.1
suricata-3.0.2
suricata-3.1RC1
suricata-3.0.1
suricata-3.0.1RC1
suricata-3.0
suricata-2.0.11
suricata-3.0RC3
suricata-3.0RC2
suricata-3.0RC1
suricata-2.0.10
suricata-2.0.9
suricata-2.1beta4
suricata-2.0.8
suricata-2.0.7
suricata-2.1beta3
suricata-2.0.6
suricata-2.0.5
suricata-2.1beta2
suricata-2.0.4
suricata-2.1beta1
suricata-2.0.3
suricata-2.0.2
suricata-2.0.1
suricata-2.0.1rc1
suricata-2.0
suricata-2.0rc3
suricata-2.0rc2
suricata-2.0rc1
suricata-2.0beta2
suricata-1.4.7
suricata-1.4.6
suricata-1.4.5
suricata-2.0beta1
suricata-1.4.4
suricata-1.4.3
suricata-1.4.2
suricata-1.4.1
suricata-1.3.6
suricata-1.4
suricata-1.3.5
suricata-1.4rc1
suricata-1.3.4
suricata-1.4beta3
suricata-1.3.3
suricata-1.4beta2
suricata-1.3.2
suricata-1.4beta1
suricata-1.3.1
suricata-1.3
suricata-1.3rc1
suricata-1.3beta2
suricata-1.3beta1
suricata-1.2.1
suricata-1.2
suricata-1.2rc1
suricata-1.2beta1
suricata-1.1.1
suricata-0.8.2
suricata-1.0.0
suricata-1.0.1
suricata-1.0.2
suricata-1.0.3
suricata-1.0.4
suricata-1.0.5
suricata-1.1
suricata-1.1beta1
suricata-1.1beta2
suricata-1.1beta3
suricata-1.1rc1
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '6882bcb3e5'
${ noResults }
suricata/src
History
Victor Julien 6882bcb3e5 stream: add TCP urgent handling options 
TCP urgent handling is a complex topic due to conflicting RFCs and
implementations.

Until now the URG flag and urgent pointer values were simply ignored,
leading to an effective "inline" processing of urgent data. Many
implementations however, do not default to this behavior.

Many actual implementations use the urgent mechanism to send 1 byte of
data out of band to the application.

Complicating the matter is that the way the urgent logic is handled is
generally configurable both of the OS and the app level. So from the
network it is impossible to know with confidence what the settings are.

This patch adds the following policies:

`stream.reassembly.urgent.policy`:

- drop: drop URG packets before they affect the stream engine

- inline: ignore the urgent pointer and process all data inline

- oob (out of band): treat the last byte as out of band

- gap: skip the last byte, but do no adjust sequence offsets, leading to
       gaps in the data

For the `oob` option, tracking of a sequence number offset is required,
as the OOB data does "consume" sequence number space. This is limited to
64k. For this reason, there is a second policy:

`stream.reassembly.urgent.oob-limit-policy`:

- drop: drop URG packets before they affect the stream engine

- inline: ignore the urgent pointer and process all data inline

- gap: skip the last byte, but do no adjust sequence offsets, leading to
       gaps in the data

Bug: #7411.
 		2 years ago
..
tests fuzz: simplify target for protocol detection 2 years ago
Makefile.am radix: remove old radix tree implementation 2 years ago
action-globals.h
…
alert-debuglog.c packet-logger: remove ThreadExitPrintStats 2 years ago
alert-debuglog.h
…
alert-fastlog.c packet-logger: remove ThreadExitPrintStats 2 years ago
alert-fastlog.h
…
alert-syslog.c packet-logger: remove ThreadExitPrintStats 2 years ago
alert-syslog.h
…
app-layer-detect-proto.c doh: make dns and http keywords for doh2 2 years ago
app-layer-detect-proto.h doh: implement dns over http2 app-proto 2 years ago
app-layer-dnp3-objects.c app-layer: fix -Wshorten-64-to-32 warnings 2 years ago
app-layer-dnp3-objects.h
…
app-layer-dnp3.c app-layer: track modified/processed txs 2 years ago
app-layer-dnp3.h
…
app-layer-events.c misc: remove unneeded headers 2 years ago
app-layer-events.h app-layer: use uint8_t consistent for event IDs 2 years ago
app-layer-expectation.c style: remove some useless return 2 years ago
app-layer-expectation.h
…
app-layer-frames.c app-layer: fix -Wshorten-64-to-32 warnings 2 years ago
app-layer-frames.h frames: do not rely on FRAME_STREAM_ID 2 years ago
app-layer-ftp.c app-layer: track modified/processed txs 2 years ago
app-layer-ftp.h app-layer/stats: Expand memuse/memcap handling 2 years ago
app-layer-htp-body.c app-layer: remove unused parameters 2 years ago
app-layer-htp-body.h app-layer: remove unused parameters 2 years ago
app-layer-htp-file.c app-layer: fix -Wshorten-64-to-32 warnings 2 years ago
app-layer-htp-file.h src: remove some unused parameters 2 years ago
app-layer-htp-libhtp.c
…
app-layer-htp-libhtp.h
…
app-layer-htp-mem.c style: remove some useless return 2 years ago
app-layer-htp-mem.h
…
app-layer-htp-range.c app-layer/stats: Expand memuse/memcap handling 2 years ago
app-layer-htp-range.h app-layer/stats: Expand memuse/memcap handling 2 years ago
app-layer-htp-xff.c
…
app-layer-htp-xff.h
…
app-layer-htp.c app-layer: track modified/processed txs 2 years ago
app-layer-htp.h http: have a headers limit 2 years ago
app-layer-http2.c app-layer: fix -Wshorten-64-to-32 warnings 2 years ago
app-layer-http2.h
…
app-layer-ike.c
…
app-layer-ike.h
…
app-layer-imap.c imap: extend detection patterns 2 years ago
app-layer-imap.h imap: extend detection patterns 2 years ago
app-layer-modbus.c
…
app-layer-modbus.h
…
app-layer-nfs-tcp.c
…
app-layer-nfs-tcp.h
…
app-layer-nfs-udp.c
…
app-layer-nfs-udp.h
…
app-layer-parser.c app-layer: track modified/processed txs 2 years ago
app-layer-parser.h app-layer: remove ALPROTO_TEST and tests 2 years ago
app-layer-protos.c app-layer: remove ALPROTO_TEST and tests 2 years ago
app-layer-protos.h app-layer: remove ALPROTO_TEST and tests 2 years ago
app-layer-register.c src: remove truncate fn and glue code 2 years ago
app-layer-register.h app-layer: use uint8_t consistent for event IDs 2 years ago
app-layer-smb.c style: remove some useless return 2 years ago
app-layer-smb.h
…
app-layer-smtp.c app-layer: track modified/processed txs 2 years ago
app-layer-smtp.h smtp/frames: initial frame support 2 years ago
app-layer-ssh.c
…
app-layer-ssh.h
…
app-layer-ssl.c app-layer: track modified/processed txs 2 years ago
app-layer-ssl.h tls: store all ALPN records in the state 2 years ago
app-layer-tftp.c misc: remove unneeded headers 2 years ago
app-layer-tftp.h
…
app-layer.c stream: add TCP urgent handling options 2 years ago
app-layer.h src: remove some unused parameters 2 years ago
conf-yaml-loader.c conf: init parser after check with stat() 2 years ago
conf-yaml-loader.h
…
conf.c style: remove some useless return 2 years ago
conf.h src: remove unused headers-exported functions 3 years ago
counters.c threads: move wait for unpause outside of loop 2 years ago
counters.h
…
datasets-ipv4.c util/hash: use randomized hash algorithm 2 years ago
datasets-ipv4.h util/hash: use randomized hash algorithm 2 years ago
datasets-ipv6.c util/hash: use randomized hash algorithm 2 years ago
datasets-ipv6.h util/hash: use randomized hash algorithm 2 years ago
datasets-md5.c util/hash: use randomized hash algorithm 2 years ago
datasets-md5.h util/hash: use randomized hash algorithm 2 years ago
datasets-reputation.h
…
datasets-sha256.c util/hash: use randomized hash algorithm 2 years ago
datasets-sha256.h util/hash: use randomized hash algorithm 2 years ago
datasets-string.c util/hash: use randomized hash algorithm 2 years ago
datasets-string.h util/hash: use randomized hash algorithm 2 years ago
datasets.c detect/datasets: implement unset command 2 years ago
datasets.h detect/datasets: implement unset command 2 years ago
decode-arp.c decode/arp: implement decoder 2 years ago
decode-arp.h decode/arp: implement decoder 2 years ago
decode-chdlc.c decode/tcp: add and use PacketIsTCP inline func 3 years ago
decode-chdlc.h
…
decode-erspan.c
…
decode-erspan.h
…
decode-esp.c decode/esp: move esph into L4 packet data 3 years ago
decode-esp.h decode/esp: move esph into L4 packet data 3 years ago
decode-ethernet.c decode/ethernet: move ethh into L2 section 3 years ago
decode-ethernet.h
…
decode-events.c stream: add TCP urgent handling options 2 years ago
decode-events.h stream: add TCP urgent handling options 2 years ago
decode-geneve.c decode/udp: add and use PacketIsUDP inline func 3 years ago
decode-geneve.h
…
decode-gre.c decode/gre: decode arp packets 2 years ago
decode-gre.h
…
decode-icmpv4.c decode/icmpv4: rename ICMPV4_GET_EMB_IPV4 to PacketGetICMPv4EmbIPv4 3 years ago
decode-icmpv4.h decode/icmpv4: rename ICMPV4_GET_EMB_IPV4 to PacketGetICMPv4EmbIPv4 3 years ago
decode-icmpv6.c style: remove some useless return 2 years ago
decode-icmpv6.h decode/icmpv6: store embedded ip6h ptr as offset 3 years ago
decode-ipv4.c decode/tcp: add and use PacketIsTCP inline func 3 years ago
decode-ipv4.h decode/ipv4: prep for turning ip4h/ip6h into union 3 years ago
decode-ipv6.c style: remove some useless return 2 years ago
decode-ipv6.h clean: remove unused struct definitions 2 years ago
decode-mpls.c
…
decode-mpls.h
…
decode-nsh.c
…
decode-nsh.h
…
decode-null.c
…
decode-ppp.c decode/ppp: fix iplen check int handling 3 years ago
decode-ppp.h decode/ppp: add missing types definitions 3 years ago
decode-pppoe.c decode/pppoe: localize pppoedh pointer 3 years ago
decode-pppoe.h
…
decode-raw.c decode: reduce PKT_IS_IPV4/PKT_IS_IPV6 use 3 years ago
decode-raw.h
…
decode-sctp.c decode/sctp: move sctph into L4 packet data 3 years ago
decode-sctp.h decode/sctp: move sctph into L4 packet data 3 years ago
decode-sll.c
…
decode-sll.h
…
decode-tcp.c decode/tcp: count urg flag 2 years ago
decode-tcp.h decode/tcp: reduce TCPVars by turning bools into bitfields 3 years ago
decode-template.c
…
decode-template.h
…
decode-teredo.c decode: fix -Wshorten-64-to-32 warnings 2 years ago
decode-teredo.h
…
decode-udp.c decode/udp: move udph into L4 packet data 3 years ago
decode-udp.h decode/udp: move udph into L4 packet data 3 years ago
decode-vlan.c
…
decode-vlan.h
…
decode-vntag.c
…
decode-vntag.h
…
decode-vxlan.c decode/udp: add and use PacketIsUDP inline func 3 years ago
decode-vxlan.h
…
decode.c stream: add TCP urgent handling options 2 years ago
decode.h stream: add TCP urgent handling options 2 years ago
defrag-config.c defrag/config: switch to radix4/6 2 years ago
defrag-config.h defrag/config: switch to radix4/6 2 years ago
defrag-hash.c defrag: remove trackers on lookup 2 years ago
defrag-hash.h defrag: turn hash row into single linked list 2 years ago
defrag-stack.c defrag: turn queue into stack 2 years ago
defrag-stack.h defrag: turn queue into stack 2 years ago
defrag-timeout.c defrag: timeout check on look up; tag for removal 2 years ago
defrag-timeout.h defrag: timeout check on look up; tag for removal 2 years ago
defrag.c defrag: fix off by one 2 years ago
defrag.h defrag: fix -Wshorten-64-to-32 warnings 2 years ago
detect-app-layer-event.c app-layer: use uint8_t consistent for event IDs 2 years ago
detect-app-layer-event.h
…
detect-app-layer-protocol.c detect/app-layer-proto: don't run detection on ALPROTO_UNKNOWN 2 years ago
detect-app-layer-protocol.h
…
detect-asn1.c
…
detect-asn1.h
…
detect-base64-data.c
…
detect-base64-data.h
…
detect-base64-decode.c detect/base64: minor cleanups 2 years ago
detect-base64-decode.h
…
detect-bsize.c detect/integers: harmonize parser return handling 2 years ago
detect-bsize.h
…
detect-bypass.c
…
detect-bypass.h
…
detect-byte-extract.c detect/byte_extract: Move keyword parser to Rust 2 years ago
detect-byte-extract.h detect/byte_extract: Move keyword parser to Rust 2 years ago
detect-byte.c detect/byte_extract: Move keyword parser to Rust 2 years ago
detect-byte.h
…
detect-bytejump.c
…
detect-bytejump.h
…
detect-bytemath.c detect/byte: Refactor endian, base 2 years ago
detect-bytemath.h
…
detect-bytetest.c
…
detect-bytetest.h
…
detect-classtype.c
…
detect-classtype.h
…
detect-config.c
…
detect-config.h
…
detect-content.c fuzz/detect: forbid rule with pcre only on stream 2 years ago
detect-content.h
…
detect-csum.c detect/csum: remove pseudo packet checks 2 years ago
detect-csum.h
…
detect-datarep.c style: remove some useless return 2 years ago
detect-datarep.h
…
detect-dataset.c detect/dataset: abort only in debug mode 2 years ago
detect-dataset.h datasets: restrict scope of macro/enum 2 years ago
detect-dce-iface.c
…
detect-dce-iface.h
…
detect-dce-opnum.c
…
detect-dce-opnum.h
…
detect-dce-stub-data.c ci: fix and test with Wunused-macros 2 years ago
detect-dce-stub-data.h
…
detect-depth.c
…
detect-depth.h
…
detect-detection-filter.c thresholds: use dedicated storage 2 years ago
detect-detection-filter.h
…
detect-distance.c
…
detect-distance.h
…
detect-dnp3.c
…
detect-dnp3.h
…
detect-dns-answer-name.c detect: unify functions for multi-buffer 2 years ago
detect-dns-answer-name.h
…
detect-dns-opcode.c rust/dns: ffi naming and visibility cleanups 3 years ago
detect-dns-opcode.h
…
detect-dns-query-name.c detect: unify functions for multi-buffer 2 years ago
detect-dns-query-name.h
…
detect-dns-query.c lua: remove lua as a compile time feature 2 years ago
detect-dns-query.h
…
detect-dns-rcode.c rust/dns: ffi naming and visibility cleanups 3 years ago
detect-dns-rcode.h
…
detect-dns-rrtype.c rust/dns: ffi naming and visibility cleanups 3 years ago
detect-dns-rrtype.h
…
detect-dsize.c detect/integers: harmonize parser return handling 2 years ago
detect-dsize.h
…
detect-engine-address-ipv4.c detect/address: convert ipv4 unittests to FAIL/PASS 2 years ago
detect-engine-address-ipv4.h
…
detect-engine-address-ipv6.c detect/address: constify ipv6 cmp funcs 2 years ago
detect-engine-address-ipv6.h detect/address: constify ipv6 cmp funcs 2 years ago
detect-engine-address.c style: remove some useless return 2 years ago
detect-engine-address.h src: remove unused headers-exported functions 3 years ago
detect-engine-alert.c detect: implement 'alert' keyword as a companion to 'noalert' 2 years ago
detect-engine-alert.h
…
detect-engine-analyzer.c detect: absent keyword to test absence of sticky buffer 2 years ago
detect-engine-analyzer.h
…
detect-engine-build.c detect: fix decoder only events 2 years ago
detect-engine-build.h
…
detect-engine-content-inspection.c detect: absent keyword to test absence of sticky buffer 2 years ago
detect-engine-content-inspection.h detect: absent keyword to test absence of sticky buffer 2 years ago
detect-engine-dcepayload.c
…
detect-engine-dcepayload.h
…
detect-engine-event.c detect: make events prefilterable 2 years ago
detect-engine-event.h
…
detect-engine-file.c files: remove the need for state in callbacks 2 years ago
detect-engine-file.h
…
detect-engine-frame.c
…
detect-engine-frame.h misc: Remove duplicate function declarations 2 years ago
detect-engine-helper.c transforms: move strip_whitespace to rust 2 years ago
detect-engine-helper.h transforms: move strip_whitespace to rust 2 years ago
detect-engine-iponly.c detect/ip-only: code cleanups 2 years ago
detect-engine-iponly.h
…
detect-engine-loader.c threads: move wait for unpause outside of loop 2 years ago
detect-engine-loader.h
…
detect-engine-mpm.c detect: absent keyword to test absence of sticky buffer 2 years ago
detect-engine-mpm.h misc: Remove duplicate function declarations 2 years ago
detect-engine-payload.c style: remove some useless return 2 years ago
detect-engine-payload.h
…
detect-engine-port.c style: remove some useless return 2 years ago
detect-engine-port.h misc: move prototypes to correct header 2 years ago
detect-engine-prefilter-common.c detect/prefilter: use sig mask to exclude pkt engines 2 years ago
detect-engine-prefilter-common.h detect/prefilter: use sig mask to exclude pkt engines 2 years ago
detect-engine-prefilter.c doh: make dns and http keywords for doh2 2 years ago
detect-engine-prefilter.h detect/prefilter: use sig mask to exclude pkt engines 2 years ago
detect-engine-profile.c
…
detect-engine-profile.h
…
detect-engine-proto.c
…
detect-engine-proto.h detect/proto: use BIT macros instead of expr 2 years ago
detect-engine-register.c sigtable: add function to test for a keyword 2 years ago
detect-engine-register.h sigtable: add function to test for a keyword 2 years ago
detect-engine-siggroup.c style: remove some useless return 2 years ago
detect-engine-siggroup.h src: remove unused headers-exported functions 3 years ago
detect-engine-sigorder.c detect/engine/flowint: apply clang format changes 2 years ago
detect-engine-sigorder.h detect/sigorder: remove data structs from global namespace 2 years ago
detect-engine-state.c files: remove the need for state in callbacks 2 years ago
detect-engine-state.h
…
detect-engine-tag.c src: remove unused headers-exported functions 3 years ago
detect-engine-tag.h src: remove unused headers-exported functions 3 years ago
detect-engine-threshold.c util/hash: use randomized hash algorithm 2 years ago
detect-engine-threshold.h thresholds: use dedicated storage 2 years ago
detect-engine-uint.c
…
detect-engine-uint.h
…
detect-engine.c detect: rename stream_log variables 2 years ago
detect-engine.h transforms: move strip_whitespace to rust 2 years ago
detect-fast-pattern.c style: remove some useless return 2 years ago
detect-fast-pattern.h
…
detect-file-data.c detect: absent keyword to test absence of sticky buffer 2 years ago
detect-file-data.h
…
detect-file-hash-common.c
…
detect-file-hash-common.h
…
detect-filemagic.c detect: absent keyword to test absence of sticky buffer 2 years ago
detect-filemagic.h
…
detect-filemd5.c style: remove some useless return 2 years ago
detect-filemd5.h
…
detect-filename.c detect: absent keyword to test absence of sticky buffer 2 years ago
detect-filename.h
…
detect-filesha1.c style: remove some useless return 2 years ago
detect-filesha1.h
…
detect-filesha256.c style: remove some useless return 2 years ago
detect-filesha256.h
…
detect-filesize.c detect/integers: harmonize parser return handling 2 years ago
detect-filesize.h
…
detect-filestore.c files: remove the need for state in callbacks 2 years ago
detect-filestore.h
…
detect-flow-age.c detect/prefilter: use sig mask to exclude pkt engines 2 years ago
detect-flow-age.h
…
detect-flow-pkts.c detect/prefilter: use sig mask to exclude pkt engines 2 years ago
detect-flow-pkts.h
…
detect-flow.c util: fix -Wshorten-64-to-32 warnings 2 years ago
detect-flow.h
…
detect-flowbits.c detect: set ACTION_ALERT for rules that should alert 2 years ago
detect-flowbits.h
…
detect-flowint.c detect/engine/flowint: apply clang format changes 2 years ago
detect-flowint.h flowint: add isnotset support 2 years ago
detect-flowvar.c
…
detect-flowvar.h
…
detect-fragbits.c detect/prefilter: use sig mask to exclude pkt engines 2 years ago
detect-fragbits.h
…
detect-fragoffset.c detect/prefilter: use sig mask to exclude pkt engines 2 years ago
detect-fragoffset.h
…
detect-frame.c
…
detect-frame.h
…
detect-ftpbounce.c
…
detect-ftpbounce.h
…
detect-ftpdata.c
…
detect-ftpdata.h
…
detect-geoip.c detect: remove pseudo checks from packet keywords 2 years ago
detect-geoip.h
…
detect-gid.c detect: Clear errno before strtoul 2 years ago
detect-gid.h
…
detect-hostbits.c detect: set ACTION_ALERT for rules that should alert 2 years ago
detect-hostbits.h
…
detect-http-accept-enc.c
…
detect-http-accept-enc.h
…
detect-http-accept-lang.c
…
detect-http-accept-lang.h
…
detect-http-accept.c
…
detect-http-accept.h
…
detect-http-client-body.c detect: absent keyword to test absence of sticky buffer 2 years ago
detect-http-client-body.h
…
detect-http-connection.c
…
detect-http-connection.h
…
detect-http-content-len.c
…
detect-http-content-len.h
…
detect-http-content-type.c
…
detect-http-content-type.h
…
detect-http-cookie.c detect: minor http.cookie keyword typo fix 3 years ago
detect-http-cookie.h
…
detect-http-header-common.c
…
detect-http-header-common.h
…
detect-http-header-names.c
…
detect-http-header-names.h
…
detect-http-header.c detect: absent keyword to test absence of sticky buffer 2 years ago
detect-http-header.h misc: Remove duplicate function declarations 2 years ago
detect-http-headers-stub.h
…
detect-http-headers.c
…
detect-http-headers.h
…
detect-http-host.c
…
detect-http-host.h
…
detect-http-location.c
…
detect-http-location.h
…
detect-http-method.c
…
detect-http-method.h
…
detect-http-protocol.c detect: checks for space in http.protcol keyword 2 years ago
detect-http-protocol.h
…
detect-http-raw-header.c
…
detect-http-raw-header.h
…
detect-http-referer.c
…
detect-http-referer.h
…
detect-http-request-line.c
…
detect-http-request-line.h
…
detect-http-response-line.c
…
detect-http-response-line.h
…
detect-http-server-body.c detect/http-server-body: avoid FP on toserver direction 3 years ago
detect-http-server-body.h
…
detect-http-server.c
…
detect-http-server.h
…
detect-http-start.c
…
detect-http-start.h
…
detect-http-stat-code.c
…
detect-http-stat-code.h
…
detect-http-stat-msg.c
…
detect-http-stat-msg.h
…
detect-http-ua.c
…
detect-http-ua.h
…
detect-http-uri.c
…
detect-http-uri.h
…
detect-http2.c detect: helper function for multibuffer 2 years ago
detect-http2.h
…
detect-icmp-id.c detect/icmp-id: remove prefilter pseudo check 2 years ago
detect-icmp-id.h
…
detect-icmp-seq.c detect/icmp: require real packet in signature 2 years ago
detect-icmp-seq.h
…
detect-icmpv4hdr.c misc: Remove duplicate function declarations 2 years ago
detect-icmpv4hdr.h
…
detect-icmpv6-mtu.c detect/prefilter: use sig mask to exclude pkt engines 2 years ago
detect-icmpv6-mtu.h
…
detect-icmpv6hdr.c style: remove some useless return 2 years ago
detect-icmpv6hdr.h
…
detect-icode.c detect/integers: harmonize parser return handling 2 years ago
detect-icode.h
…
detect-id.c detect/prefilter: use sig mask to exclude pkt engines 2 years ago
detect-id.h
…
detect-ike-chosen-sa.c
…
detect-ike-chosen-sa.h
…
detect-ike-exch-type.c
…
detect-ike-exch-type.h
…
detect-ike-key-exchange-payload-length.c
…
detect-ike-key-exchange-payload-length.h
…
detect-ike-key-exchange-payload.c
…
detect-ike-key-exchange-payload.h
…
detect-ike-nonce-payload-length.c
…
detect-ike-nonce-payload-length.h
…
detect-ike-nonce-payload.c
…
detect-ike-nonce-payload.h
…
detect-ike-spi.c
…
detect-ike-spi.h
…
detect-ike-vendor.c detect: unify functions for multi-buffer 2 years ago
detect-ike-vendor.h
…
detect-ipaddr.c decode: reduce PKT_IS_IPV4/PKT_IS_IPV6 use 3 years ago
detect-ipaddr.h
…
detect-ipopts.c detect: remove pseudo checks from packet keywords 2 years ago
detect-ipopts.h
…
detect-ipproto.c style: remove some useless return 2 years ago
detect-ipproto.h
…
detect-iprep.c detect/iprep: update function naming 2 years ago
detect-iprep.h
…
detect-ipv4hdr.c style: remove some useless return 2 years ago
detect-ipv4hdr.h
…
detect-ipv6hdr.c style: remove some useless return 2 years ago
detect-ipv6hdr.h
…
detect-isdataat.c detect: absent keyword to test absence of sticky buffer 2 years ago
detect-isdataat.h detect: absent keyword to test absence of sticky buffer 2 years ago
detect-itype.c detect/integers: harmonize parser return handling 2 years ago
detect-itype.h
…
detect-ja4-hash.c config/ja3: Eliminate warnings when JA3 is disabled 2 years ago
detect-ja4-hash.h ja4: implement for TLS and QUIC 3 years ago
detect-krb5-cname.c detect: unify functions for multi-buffer 2 years ago
detect-krb5-cname.h
…
detect-krb5-errcode.c app-layer: remove unused C wrappers 3 years ago
detect-krb5-errcode.h
…
detect-krb5-msgtype.c app-layer: remove unused C wrappers 3 years ago
detect-krb5-msgtype.h
…
detect-krb5-sname.c detect: unify functions for multi-buffer 2 years ago
detect-krb5-sname.h
…
detect-krb5-ticket-encryption.c
…
detect-krb5-ticket-encryption.h
…
detect-l3proto.c decode/ipv6: prep for turning ip4h/ip6h into union 3 years ago
detect-l3proto.h
…
detect-lua-extensions.c lua: remove lua as a compile time feature 2 years ago
detect-lua-extensions.h lua: remove lua as a compile time feature 2 years ago
detect-lua.c style: remove some useless return 2 years ago
detect-lua.h lua: remove lua as a compile time feature 2 years ago
detect-mark.c
…
detect-mark.h
…
detect-metadata.c
…
detect-metadata.h
…
detect-modbus.c
…
detect-modbus.h
…
detect-msg.c
…
detect-msg.h
…
detect-nfs-procedure.c detect/nfs: do not free a null pointer 2 years ago
detect-nfs-procedure.h
…
detect-nfs-version.c
…
detect-nfs-version.h
…
detect-noalert.c detect/noalert: point noalert/alert to new doc 2 years ago
detect-noalert.h
…
detect-nocase.c
…
detect-nocase.h
…
detect-offset.c
…
detect-offset.h
…
detect-parse.c detect: absent keyword to test absence of sticky buffer 2 years ago
detect-parse.h detect: helper to have pure rust keywords 2 years ago
detect-pcre.c style: remove some useless return 2 years ago
detect-pcre.h
…
detect-pkt-data.c
…
detect-pkt-data.h
…
detect-pktvar.c
…
detect-pktvar.h
…
detect-prefilter.c
…
detect-prefilter.h
…
detect-priority.c
…
detect-priority.h
…
detect-quic-cyu-hash.c detect: unify functions for multi-buffer 2 years ago
detect-quic-cyu-hash.h
…
detect-quic-cyu-string.c detect: unify functions for multi-buffer 2 years ago
detect-quic-cyu-string.h
…
detect-quic-sni.c ci: fix and test with Wunused-macros 2 years ago
detect-quic-sni.h
…
detect-quic-ua.c ci: fix and test with Wunused-macros 2 years ago
detect-quic-ua.h
…
detect-quic-version.c ci: fix and test with Wunused-macros 2 years ago
detect-quic-version.h
…
detect-rawbytes.c
…
detect-rawbytes.h
…
detect-reference.c alert/reference: Optionally add reference(s) 2 years ago
detect-reference.h alert/reference: Optionally add reference(s) 2 years ago
detect-replace.c src: remove some unused parameters 2 years ago
detect-replace.h
…
detect-requires.c
…
detect-requires.h
…
detect-rev.c detect: Clear errno before strtoul 2 years ago
detect-rev.h
…
detect-rpc.c decode/udp: add and use PacketIsUDP inline func 3 years ago
detect-rpc.h
…
detect-sameip.c
…
detect-sameip.h
…
detect-sid.c detect: Clear errno before strtoul 2 years ago
detect-sid.h
…
detect-sip-method.c app-layer: remove unused C wrappers 3 years ago
detect-sip-method.h
…
detect-sip-uri.c app-layer: remove unused C wrappers 3 years ago
detect-sip-uri.h
…
detect-smb-ntlmssp.c
…
detect-smb-ntlmssp.h
…
detect-smb-share.c
…
detect-smb-share.h
…
detect-smb-version.c detect/smb: fix the sigmatch table for url 2 years ago
detect-smb-version.h
…
detect-ssh-hassh-server-string.c
…
detect-ssh-hassh-server-string.h
…
detect-ssh-hassh-server.c
…
detect-ssh-hassh-server.h
…
detect-ssh-hassh-string.c
…
detect-ssh-hassh-string.h
…
detect-ssh-hassh.c
…
detect-ssh-hassh.h
…
detect-ssh-proto-version.c detect/ssh: remove deprecated keywords 2 years ago
detect-ssh-proto-version.h detect/ssh: remove deprecated keywords 2 years ago
detect-ssh-proto.c
…
detect-ssh-proto.h
…
detect-ssh-software-version.c detect/ssh: remove deprecated keywords 2 years ago
detect-ssh-software-version.h detect/ssh: remove deprecated keywords 2 years ago
detect-ssh-software.c
…
detect-ssh-software.h
…
detect-ssl-state.c style: remove some useless return 2 years ago
detect-ssl-state.h
…
detect-ssl-version.c
…
detect-ssl-version.h
…
detect-stream_size.c detect/stream_size: allow match on pseudo packets 2 years ago
detect-stream_size.h
…
detect-tag.c
…
detect-tag.h
…
detect-target.c
…
detect-target.h
…
detect-tcp-ack.c detect/prefilter: use sig mask to exclude pkt engines 2 years ago
detect-tcp-ack.h
…
detect-tcp-flags.c detect/prefilter: use sig mask to exclude pkt engines 2 years ago
detect-tcp-flags.h
…
detect-tcp-seq.c detect/prefilter: use sig mask to exclude pkt engines 2 years ago
detect-tcp-seq.h
…
detect-tcp-window.c detect: remove pseudo checks from packet keywords 2 years ago
detect-tcp-window.h
…
detect-tcphdr.c style: remove some useless return 2 years ago
detect-tcphdr.h
…
detect-tcpmss.c detect/prefilter: use sig mask to exclude pkt engines 2 years ago
detect-tcpmss.h
…
detect-template.c decode: reduce PKT_IS_IPV4/PKT_IS_IPV6 use 3 years ago
detect-template.h
…
detect-template2.c detect/prefilter: use sig mask to exclude pkt engines 2 years ago
detect-template2.h
…
detect-threshold.c detect/threshold: implement backoff type 2 years ago
detect-threshold.h detect/threshold: implement backoff type 2 years ago
detect-tls-alpn.c detect: add tls.alpn keyword 2 years ago
detect-tls-alpn.h detect: add tls.alpn keyword 2 years ago
detect-tls-cert-fingerprint.c
…
detect-tls-cert-fingerprint.h
…
detect-tls-cert-issuer.c
…
detect-tls-cert-issuer.h
…
detect-tls-cert-serial.c
…
detect-tls-cert-serial.h
…
detect-tls-cert-subject.c
…
detect-tls-cert-subject.h
…
detect-tls-cert-validity.c
…
detect-tls-cert-validity.h
…
detect-tls-certs.c detect: unify functions for multi-buffer 2 years ago
detect-tls-certs.h
…
detect-tls-ja3-hash.c config/ja3: Eliminate warnings when JA3 is disabled 2 years ago
detect-tls-ja3-hash.h
…
detect-tls-ja3-string.c config/ja3: Eliminate warnings when JA3 is disabled 2 years ago
detect-tls-ja3-string.h
…
detect-tls-ja3s-hash.c config/ja3: Eliminate warnings when JA3 is disabled 2 years ago
detect-tls-ja3s-hash.h
…
detect-tls-ja3s-string.c config/ja3: Eliminate warnings when JA3 is disabled 2 years ago
detect-tls-ja3s-string.h
…
detect-tls-random.c tls/random: fix incorrect direction handling 3 years ago
detect-tls-random.h
…
detect-tls-sni.c
…
detect-tls-sni.h
…
detect-tls-subjectaltname.c detect: unify functions for multi-buffer 2 years ago
detect-tls-subjectaltname.h detect/tls-subjectaltname: add sticky buffer 2 years ago
detect-tls-version.c
…
detect-tls-version.h
…
detect-tls.c detect/tls.store: fix direction check 2 years ago
detect-tls.h
…
detect-tos.c detect: remove pseudo checks from packet keywords 2 years ago
detect-tos.h
…
detect-transform-base64.c transform/base64: check for 0-sized buffer 2 years ago
detect-transform-base64.h detect/transform: Add from_base64 transform 2 years ago
detect-transform-pcrexform.c
…
detect-transform-pcrexform.h
…
detect-ttl.c detect/prefilter: use sig mask to exclude pkt engines 2 years ago
detect-ttl.h
…
detect-udphdr.c style: remove some useless return 2 years ago
detect-udphdr.h
…
detect-uricontent.c
…
detect-uricontent.h
…
detect-urilen.c
…
detect-urilen.h
…
detect-within.c
…
detect-within.h
…
detect-xbits.c detect: set ACTION_ALERT for rules that should alert 2 years ago
detect-xbits.h
…
detect.c detect: don't run pkt sigs on ffr pkts 2 years ago
detect.h detect: rename stream_log variables 2 years ago
device-storage.c src: remove unused headers-exported functions 3 years ago
device-storage.h src: remove unused headers-exported functions 3 years ago
feature.c features: fix -Wshorten-64-to-32 warnings 2 years ago
feature.h ja4: implement for TLS and QUIC 3 years ago
flow-bit.c
…
flow-bit.h
…
flow-bypass.c threads: move wait for unpause outside of loop 2 years ago
flow-bypass.h
…
flow-callbacks.c flow: add callbacks for flow init and flow updates 2 years ago
flow-callbacks.h flow: add callbacks for flow init and flow updates 2 years ago
flow-hash.c flow: add callbacks for flow init and flow updates 2 years ago
flow-hash.h
…
flow-manager.c flow/manager: add chunk debug output 2 years ago
flow-manager.h
…
flow-private.h
…
flow-queue.c
…
flow-queue.h
…
flow-spare-pool.c flow: declare and use constansts where possible 2 years ago
flow-spare-pool.h flow: declare and use constansts where possible 2 years ago
flow-storage.c
…
flow-storage.h
…
flow-timeout.c flow/timeout: add frame awareness 2 years ago
flow-timeout.h flow/timeout: cleanup fn names and comments 2 years ago
flow-util.c flow: add callbacks for flow init and flow updates 2 years ago
flow-util.h flow: add callbacks for flow init and flow updates 2 years ago
flow-var.c
…
flow-var.h
…
flow-worker.c output: remove remaining ThreadExitPrintStats callbacks 2 years ago
flow-worker.h
…
flow.c flow: add callbacks for flow init and flow updates 2 years ago
flow.h eve/flow: log flow state directly 2 years ago
host-bit.c
…
host-bit.h
…
host-queue.c src: remove unused headers-exported functions 3 years ago
host-queue.h src: remove unused headers-exported functions 3 years ago
host-storage.c src: remove unused headers-exported functions 3 years ago
host-storage.h src: remove unused headers-exported functions 3 years ago
host-timeout.c thresholds: use dedicated storage 2 years ago
host-timeout.h src: remove unused headers-exported functions 3 years ago
host.c style: remove some useless return 2 years ago
host.h src: remove unused headers-exported functions 3 years ago
interval-tree.h
…
ippair-bit.c
…
ippair-bit.h
…
ippair-queue.c src: remove unused headers-exported functions 3 years ago
ippair-queue.h src: remove unused headers-exported functions 3 years ago
ippair-storage.c src: remove unused headers-exported functions 3 years ago
ippair-storage.h src: remove unused headers-exported functions 3 years ago
ippair-timeout.c thresholds: use dedicated storage 2 years ago
ippair-timeout.h src: remove unused headers-exported functions 3 years ago
ippair.c style: remove some useless return 2 years ago
ippair.h src: remove unused headers-exported functions 3 years ago
log-cf-common.c log: fix -Wshorten-64-to-32 warnings 2 years ago
log-cf-common.h
…
log-httplog.c output-tx: remove ThreadExitPrintStats callback 2 years ago
log-httplog.h
…
log-pcap.c stream: track pcap log segments timestamp with SCTime_t 2 years ago
log-pcap.h
…
log-stats.c output-stats: remove ThreadExitPrintStats callback 2 years ago
log-stats.h
…
log-tcp-data.c output-streaming: rename and document registration 2 years ago
log-tcp-data.h
…
log-tlslog.c output-tx: remove ThreadExitPrintStats callback 2 years ago
log-tlslog.h log: fix -Wshorten-64-to-32 warnings 2 years ago
log-tlsstore.c output-tx: remove ThreadExitPrintStats callback 2 years ago
log-tlsstore.h
…
main.c suricata: expose and break out configuration loading 3 years ago
output-eve-null.c
…
output-eve-null.h
…
output-eve-stream.c eve: user callbacks for adding additional data 2 years ago
output-eve-stream.h
…
output-eve-syslog.c
…
output-eve-syslog.h
…
output-eve.c eve: user callbacks for adding additional data 2 years ago
output-eve.h eve: user callbacks for adding additional data 2 years ago
output-file.c output-file: rename and document registration function 2 years ago
output-file.h output-file: rename and document registration function 2 years ago
output-filedata.c output-filedata: rename and document registration function 2 years ago
output-filedata.h output-filedata: rename and document registration function 2 years ago
output-filestore.c output-filedata: remove ThreadExitPrintStats callback 2 years ago
output-filestore.h
…
output-flow.c eve/flow: log flow state directly 2 years ago
output-flow.h devguide: more on low level logging 2 years ago
output-json-alert.c detect: log app-layer metadata in alert with single tx 2 years ago
output-json-alert.h output/json: Remove unneeded parameters 2 years ago
output-json-anomaly.c eve: user callbacks for adding additional data 2 years ago
output-json-anomaly.h
…
output-json-arp.c eve: user callbacks for adding additional data 2 years ago
output-json-arp.h output-json/arp: implement logger 2 years ago
output-json-common.c
…
output-json-dcerpc.c eve: user callbacks for adding additional data 2 years ago
output-json-dcerpc.h
…
output-json-dhcp.c eve: user callbacks for adding additional data 2 years ago
output-json-dhcp.h
…
output-json-dnp3-objects.c
…
output-json-dnp3-objects.h
…
output-json-dnp3.c eve: user callbacks for adding additional data 2 years ago
output-json-dnp3.h output/dnp3: restrict function scope to one file 3 years ago
output-json-dns.c eve: user callbacks for adding additional data 2 years ago
output-json-dns.h doh2: log like dns v3 2 years ago
output-json-drop.c eve: user callbacks for adding additional data 2 years ago
output-json-drop.h
…
output-json-email-common.c output: fix -Wshorten-64-to-32 warnings 2 years ago
output-json-email-common.h output: fix -Wshorten-64-to-32 warnings 2 years ago
output-json-file.c eve: user callbacks for adding additional data 2 years ago
output-json-file.h
…
output-json-flow.c eve: user callbacks for adding additional data 2 years ago
output-json-flow.h
…
output-json-frame.c eve/frame: require frame length to be known 2 years ago
output-json-frame.h eve/frame: improve frame payload logging 3 years ago
output-json-ftp.c output: generic simple tx json logger 3 years ago
output-json-ftp.h output: generic simple tx json logger 3 years ago
output-json-http.c output/http: log invalid status as a string 2 years ago
output-json-http.h
…
output-json-ike.c eve: user callbacks for adding additional data 2 years ago
output-json-ike.h
…
output-json-metadata.c eve: user callbacks for adding additional data 2 years ago
output-json-metadata.h
…
output-json-mqtt.c eve: user callbacks for adding additional data 2 years ago
output-json-mqtt.h
…
output-json-netflow.c eve: user callbacks for adding additional data 2 years ago
output-json-netflow.h
…
output-json-nfs.c eve: user callbacks for adding additional data 2 years ago
output-json-nfs.h
…
output-json-pgsql.c eve: user callbacks for adding additional data 2 years ago
output-json-pgsql.h eve/alert: add missing pgsql metadata 3 years ago
output-json-smb.c eve: user callbacks for adding additional data 2 years ago
output-json-smb.h
…
output-json-smtp.c eve: user callbacks for adding additional data 2 years ago
output-json-smtp.h
…
output-json-stats.c output-stats: remove ThreadExitPrintStats callback 2 years ago
output-json-stats.h eve/stats: allow hiding counters whose valued is 0 3 years ago
output-json-tls.c eve: user callbacks for adding additional data 2 years ago
output-json-tls.h eve/tls: cleanup headers; update copyright year 2 years ago
output-json.c output-json: cleanup, have OutputJsonBuilderBuffer return void 2 years ago
output-json.h output-json: cleanup, have OutputJsonBuilderBuffer return void 2 years ago
output-lua.c output/lua: handle registration error 2 years ago
output-lua.h
…
output-packet.c output: remove remaining ThreadExitPrintStats callbacks 2 years ago
output-packet.h devguide: more on low level logging 2 years ago
output-stats.c output-stats: remove ThreadExitPrintStats callback 2 years ago
output-stats.h output-stats: remove ThreadExitPrintStats callback 2 years ago
output-streaming.c output: fix -Wshorten-64-to-32 warnings 2 years ago
output-streaming.h output-streaming: rename and document registration 2 years ago
output-tx.c app-layer: track modified/processed txs 2 years ago
output-tx.h output-tx: rename and document transaction logger registration 2 years ago
output.c eve: user callbacks for adding additional data 2 years ago
output.h output-filedata: rename and document registration function 2 years ago
packet-queue.c
…
packet-queue.h
…
packet.c misc: Remove duplicate function declarations 2 years ago
packet.h
…
pkt-var.c
…
pkt-var.h
…
queue.h
…
reputation.c reputation: switch cidr handling to radix4/6 2 years ago
reputation.h reputation: switch cidr handling to radix4/6 2 years ago
respond-reject-libnet11.c decode/tcp: move tcph into L4 packet data 3 years ago
respond-reject-libnet11.h
…
respond-reject.c decode/tcp: add and use PacketIsTCP inline func 3 years ago
respond-reject.h
…
runmode-af-packet.c runmode: fix coverity warning 2 years ago
runmode-af-packet.h
…
runmode-af-xdp.c runmode: fix coverity warning 2 years ago
runmode-af-xdp.h
…
runmode-dpdk.c dpdk/hw_offload: add support for vlan stripping 2 years ago
runmode-dpdk.h dpdk/hw_offload: add support for vlan stripping 2 years ago
runmode-erf-dag.c style: remove some useless return 2 years ago
runmode-erf-dag.h
…
runmode-erf-file.c style: remove some useless return 2 years ago
runmode-erf-file.h
…
runmode-ipfw.c style: remove some useless return 2 years ago
runmode-ipfw.h
…
runmode-netmap.c runmode: fix coverity warning 2 years ago
runmode-netmap.h
…
runmode-nflog.c style: remove some useless return 2 years ago
runmode-nflog.h
…
runmode-nfq.c style: remove some useless return 2 years ago
runmode-nfq.h
…
runmode-pcap-file.c style: remove some useless return 2 years ago
runmode-pcap-file.h
…
runmode-pcap.c runmodes: fix -Wshorten-64-to-32 warnings 2 years ago
runmode-pcap.h
…
runmode-unittests.c radix: remove old radix tree implementation 2 years ago
runmode-unittests.h
…
runmode-unix-socket.c app-layer/stats: Expand memuse/memcap handling 2 years ago
runmode-unix-socket.h
…
runmode-windivert.c
…
runmode-windivert.h
…
runmodes.c napatech: remove, to make room for plugin 2 years ago
runmodes.h napatech: remove, to make room for plugin 2 years ago
rust-context.c
…
rust-context.h app-layer: remove unused C wrappers 3 years ago
rust.h
…
source-af-packet.c af-packet: speed up thread sync during startup 2 years ago
source-af-packet.h
…
source-af-xdp.c ci: fix and test with Wunused-macros 2 years ago
source-af-xdp.h src: remove unused headers-exported functions 3 years ago
source-dpdk.c dpdk: replace TSC clock with GetTime (gettimeofday) function 2 years ago
source-dpdk.h dpdk/hw_offload: add support for vlan stripping 2 years ago
source-erf-dag.c packetpool: allow larger max-pending-packets 2 years ago
source-erf-dag.h
…
source-erf-file.c source: fix -Wshorten-64-to-32 warnings 2 years ago
source-erf-file.h
…
source-ipfw.c packetpool: allow larger max-pending-packets 2 years ago
source-ipfw.h
…
source-netmap.c
…
source-netmap.h
…
source-nflog.c
…
source-nflog.h
…
source-nfq-prototypes.h
…
source-nfq.c runmode: fix coverity warning 2 years ago
source-nfq.h
…
source-pcap-file-directory-helper.c pcap-file: improve setvbuf implementation 2 years ago
source-pcap-file-directory-helper.h
…
source-pcap-file-helper.c pcap-file: limit setvbuf to linux 2 years ago
source-pcap-file-helper.h pcap-file: limit setvbuf to linux 2 years ago
source-pcap-file.c pcap-file: limit setvbuf to linux 2 years ago
source-pcap-file.h
…
source-pcap.c source: fix -Wshorten-64-to-32 warnings 2 years ago
source-pcap.h
…
source-windivert-prototypes.h
…
source-windivert.c
…
source-windivert.h
…
stream-tcp-cache.c
…
stream-tcp-cache.h
…
stream-tcp-inline.c decode/tcp: move tcph into L4 packet data 3 years ago
stream-tcp-inline.h
…
stream-tcp-list.c stream: add TCP urgent handling options 2 years ago
stream-tcp-list.h
…
stream-tcp-private.h stream: add TCP urgent handling options 2 years ago
stream-tcp-reassemble.c stream: add TCP urgent handling options 2 years ago
stream-tcp-reassemble.h stream: add TCP urgent handling options 2 years ago
stream-tcp-sack.c decode/tcp: move tcph into L4 packet data 3 years ago
stream-tcp-sack.h
…
stream-tcp-util.c stream: remove unused function argument 2 years ago
stream-tcp-util.h
…
stream-tcp.c stream: add TCP urgent handling options 2 years ago
stream-tcp.h stream: add TCP urgent handling options 2 years ago
stream.c
…
stream.h
…
suricata-common.h profiling: create a LOGGER_USER id 2 years ago
suricata-plugin.h
…
suricata.c detect: break apart sigtable setup and initialization 2 years ago
suricata.h misc: Remove duplicate function declarations 2 years ago
thread-callbacks.c threads: add initialization callbacks 2 years ago
thread-callbacks.h threads: add initialization callbacks 2 years ago
thread-storage.c threads: add storage api, based on flow storage 2 years ago
thread-storage.h threads: add storage api, based on flow storage 2 years ago
threads-debug.h
…
threads-profile.h
…
threads.c threads: add storage api, based on flow storage 2 years ago
threads.h
…
threadvars.h threads: add storage api, based on flow storage 2 years ago
tm-modules.c napatech: remove, to make room for plugin 2 years ago
tm-modules.h threading: remove TM_FLAG_LOGAPI_TM as its not used 2 years ago
tm-queuehandlers.c
…
tm-queuehandlers.h
…
tm-queues.c
…
tm-queues.h
…
tm-threads-common.h napatech: remove, to make room for plugin 2 years ago
tm-threads.c threads: add initialization callbacks 2 years ago
tm-threads.h threads: move wait for unpause outside of loop 2 years ago
tmqh-flow.c style: remove some useless return 2 years ago
tmqh-flow.h
…
tmqh-packetpool.c packetpool: allow larger max-pending-packets 2 years ago
tmqh-packetpool.h src: remove unused headers-exported functions 3 years ago
tmqh-simple.c
…
tmqh-simple.h
…
tree.h
…
unix-manager.c style: remove some useless return 2 years ago
unix-manager.h
…
util-action.c detect: set ACTION_ALERT for rules that should alert 2 years ago
util-action.h
…
util-affinity.c style: remove some useless return 2 years ago
util-affinity.h
…
util-atomic.c style: remove some useless return 2 years ago
util-atomic.h
…
util-bpf.c
…
util-bpf.h
…
util-buffer.c util-buffer: expand by multiples of 4k 2 years ago
util-buffer.h membuffer: annotate printf style function 3 years ago
util-byte.c
…
util-byte.h
…
util-checksum.c decode/tcp: move tcph into L4 packet data 3 years ago
util-checksum.h
…
util-cidr.c
…
util-cidr.h
…
util-classification-config.c style: remove some useless return 2 years ago
util-classification-config.h
…
util-clock.h
…
util-conf.c run-mode: remove duplicate var; add setter function 3 years ago
util-conf.h
…
util-config.h
…
util-coredump-config.c ci: fix and test with Wunused-macros 2 years ago
util-coredump-config.h
…
util-cpu.c src: remove unused headers-exported functions 3 years ago
util-cpu.h src: remove unused headers-exported functions 3 years ago
util-daemon.c
…
util-daemon.h
…
util-datalink.c
…
util-datalink.h
…
util-debug-filters.c style: remove some useless return 2 years ago
util-debug-filters.h src: remove unused headers-exported functions 3 years ago
util-debug.c style: remove some useless return 2 years ago
util-debug.h
…
util-detect.c
…
util-detect.h
…
util-device.c device: don't crash on unix command 'iface-bypassed-stat' 2 years ago
util-device.h src: remove unused headers-exported functions 3 years ago
util-dpdk-bonding.c ci: fix and test with Wunused-macros 2 years ago
util-dpdk-bonding.h
…
util-dpdk-i40e.c
…
util-dpdk-i40e.h
…
util-dpdk-ice.c dpdk: set ice PMD RSS key length to 52 bytes for all DPDK versions 2 years ago
util-dpdk-ice.h dpdk: support 52 byte long key on ice (E810) cards 3 years ago
util-dpdk-ixgbe.c
…
util-dpdk-ixgbe.h
…
util-dpdk.c misc: remove some unused includes 3 years ago
util-dpdk.h
…
util-ebpf.c style: remove some useless return 2 years ago
util-ebpf.h
…
util-enum.c
…
util-enum.h
…
util-error.c
…
util-error.h
…
util-exception-policy-types.h decode/flow: add exception policy stats counters 3 years ago
util-exception-policy.c src: remove some unused parameters 2 years ago
util-exception-policy.h decode/flow: add exception policy stats counters 3 years ago
util-file-decompression.c
…
util-file-decompression.h
…
util-file-swf-decompression.c
…
util-file-swf-decompression.h
…
util-file.c util/file: add validation check for extreme data chunk sizes 3 years ago
util-file.h
…
util-fix_checksum.c
…
util-fix_checksum.h
…
util-fmemopen.c
…
util-fmemopen.h
…
util-hash-lookup3.c ci: fix and test with Wunused-macros 2 years ago
util-hash-lookup3.h
…
util-hash-string.c util/hash-string: fix compile warning 2 years ago
util-hash-string.h
…
util-hash.c src: remove unused headers-exported functions 3 years ago
util-hash.h src: remove unused headers-exported functions 3 years ago
util-hashlist.c src: remove unused headers-exported functions 3 years ago
util-hashlist.h src: remove unused headers-exported functions 3 years ago
util-host-info.c host-info: remove pcre2_substring_list_free use 3 years ago
util-host-info.h
…
util-host-os-info.c host-os-policy: switch to radix4/6 2 years ago
util-host-os-info.h host-os-policy: switch to radix4/6 2 years ago
util-hugepages.c
…
util-hugepages.h
…
util-hyperscan.c
…
util-hyperscan.h
…
util-ioctl.c
…
util-ioctl.h
…
util-ip.c style: remove some useless return 2 years ago
util-ip.h
…
util-ja3.c ja3: make feature compile time configurable 3 years ago
util-ja3.h ja3: make feature compile time configurable 3 years ago
util-ja4.h ja4: implement for TLS and QUIC 3 years ago
util-landlock.c style: remove some useless return 2 years ago
util-landlock.h
…
util-log-redis.c redis: add automatic trimming support for streams 2 years ago
util-log-redis.h redis: add automatic trimming support for streams 2 years ago
util-logopenfile.c eve: threadinit/deinit callbacks are optional for filetypes 2 years ago
util-logopenfile.h output: fix -Wshorten-64-to-32 warnings 2 years ago
util-lua-common.c lua: use quoted include style to avoid system includes 2 years ago
util-lua-common.h lua: remove lua as a compile time feature 2 years ago
util-lua-dnp3-objects.c lua: use quoted include style to avoid system includes 2 years ago
util-lua-dnp3-objects.h
…
util-lua-dnp3.c lua: use quoted include style to avoid system includes 2 years ago
util-lua-dnp3.h lua: remove lua as a compile time feature 2 years ago
util-lua-dns.c lua: use quoted include style to avoid system includes 2 years ago
util-lua-dns.h lua: remove lua as a compile time feature 2 years ago
util-lua-hassh.c lua: use quoted include style to avoid system includes 2 years ago
util-lua-hassh.h lua: remove lua as a compile time feature 2 years ago
util-lua-http.c lua: use quoted include style to avoid system includes 2 years ago
util-lua-http.h lua: remove lua as a compile time feature 2 years ago
util-lua-ja3.c lua: use quoted include style to avoid system includes 2 years ago
util-lua-ja3.h lua: remove lua as a compile time feature 2 years ago
util-lua-sandbox.c lua: track memory limit exceede errors 2 years ago
util-lua-sandbox.h lua: track memory limit exceede errors 2 years ago
util-lua-smtp.c smtp: use rust for mime parsing 2 years ago
util-lua-smtp.h lua: remove lua as a compile time feature 2 years ago
util-lua-ssh.c lua: use quoted include style to avoid system includes 2 years ago
util-lua-ssh.h lua: remove lua as a compile time feature 2 years ago
util-lua-tls.c lua: use quoted include style to avoid system includes 2 years ago
util-lua-tls.h lua: remove lua as a compile time feature 2 years ago
util-lua.c lua: use quoted include style to avoid system includes 2 years ago
util-lua.h lua: remove lua as a compile time feature 2 years ago
util-macset.c style: remove some useless return 2 years ago
util-macset.h macset: constify addr parameters 3 years ago
util-magic.c misc: Eliminate compiler warnings 2 years ago
util-magic.h
…
util-mem.c
…
util-mem.h
…
util-memcmp.c misc: Eliminate compiler warnings 2 years ago
util-memcmp.h
…
util-memcpy.h
…
util-memrchr.c
…
util-memrchr.h
…
util-misc.c parse/size: support IEEE 1541 size units 2 years ago
util-misc.h
…
util-mpm-ac-ks-small.c
…
util-mpm-ac-ks.c
…
util-mpm-ac-ks.h
…
util-mpm-ac.c style: remove some useless return 2 years ago
util-mpm-ac.h
…
util-mpm-hs.c style: remove some useless return 2 years ago
util-mpm-hs.h
…
util-mpm.c
…
util-mpm.h
…
util-optimize.h
…
util-pages.c
…
util-pages.h
…
util-path.c
…
util-path.h
…
util-pidfile.c
…
util-pidfile.h
…
util-plugin.c run-mode: remove duplicate var; add setter function 3 years ago
util-plugin.h
…
util-pool-thread.c
…
util-pool-thread.h
…
util-pool.c style: remove some useless return 2 years ago
util-pool.h src: remove unused headers-exported functions 3 years ago
util-port-interval-tree.c style: remove some useless return 2 years ago
util-port-interval-tree.h misc: move prototypes to correct header 2 years ago
util-prefilter.c
…
util-prefilter.h
…
util-print.c log: fix -Wshorten-64-to-32 warnings 2 years ago
util-print.h log: fix -Wshorten-64-to-32 warnings 2 years ago
util-privs.c pf-ring: remove, to make room for plugin 2 years ago
util-privs.h
…
util-profiling-keywords.c profiling: allow absolute paths 2 years ago
util-profiling-locks.c style: remove some useless return 2 years ago
util-profiling-locks.h
…
util-profiling-prefilter.c profiling: allow absolute paths 2 years ago
util-profiling-rulegroups.c profiling: allow absolute paths 2 years ago
util-profiling-rules.c profiling: allow absolute paths 2 years ago
util-profiling.c profiling: Correct profiling data array size 2 years ago
util-profiling.h misc: fix build of rules profiling 2 years ago
util-proto-name.c style: remove some useless return 2 years ago
util-proto-name.h
…
util-radix-tree-common.h radix: implement more compact trees 2 years ago
util-radix4-tree.c radix: implement more compact trees 2 years ago
util-radix4-tree.h radix: implement more compact trees 2 years ago
util-radix6-tree.c radix: implement more compact trees 2 years ago
util-radix6-tree.h radix: implement more compact trees 2 years ago
util-random.c
…
util-random.h
…
util-reference-config.c style: remove some useless return 2 years ago
util-reference-config.h
…
util-rohash.c rohash: fix codeql warnings 3 years ago
util-rohash.h
…
util-rule-vars.c style: remove some useless return 2 years ago
util-rule-vars.h
…
util-runmodes.c
…
util-runmodes.h
…
util-running-modes.c suricata: fix list-keywords option 2 years ago
util-running-modes.h
…
util-signal.c style: remove some useless return 2 years ago
util-signal.h src: remove unused headers-exported functions 3 years ago
util-spm-bm.c
…
util-spm-bm.h
…
util-spm-bs.c smtp: use rust for mime parsing 2 years ago
util-spm-bs.h smtp: use rust for mime parsing 2 years ago
util-spm-bs2bm.c src: remove unused headers-exported functions 3 years ago
util-spm-bs2bm.h src: remove unused headers-exported functions 3 years ago
util-spm-hs.c
…
util-spm-hs.h
…
util-spm.c misc: Eliminate compiler warnings 2 years ago
util-spm.h src: remove unused headers-exported functions 3 years ago
util-storage.c threads: add storage api, based on flow storage 2 years ago
util-storage.h threads: add storage api, based on flow storage 2 years ago
util-streaming-buffer.c util/streaming-buffer: add extra safety check 2 years ago
util-streaming-buffer.h
…
util-strlcatu.c
…
util-strlcpyu.c
…
util-strptime.c
…
util-sysfs.c ci: fix and test with Wunused-macros 2 years ago
util-sysfs.h
…
util-syslog.c
…
util-syslog.h
…
util-systemd.c systemd: reimplement sd_notify logic using UNIX socket 3 years ago
util-systemd.h systemd: reimplement sd_notify logic using UNIX socket 3 years ago
util-thash.c thash/memcap: Use atomics for memcap 2 years ago
util-thash.h thash/memcap: Use atomics for memcap 2 years ago
util-threshold-config.c thresholds: use dedicated storage 2 years ago
util-threshold-config.h
…
util-time.c
…
util-time.h time: add SCTIME_CMP_EQ 2 years ago
util-unittest-helper.c decode/tcp: move tcph into L4 packet data 3 years ago
util-unittest-helper.h decode/tcp: move tcph into L4 packet data 3 years ago
util-unittest.c style: remove some useless return 2 years ago
util-unittest.h
…
util-validate.h decode/tcp: move tcph into L4 packet data 3 years ago
util-var-name.c util/var-name: switch to SCTime_t 2 years ago
util-var-name.h
…
util-var.c detect/threshold: implement tracking 'by_flow' 2 years ago
util-var.h detect: add ticket id to var related todos 2 years ago
win32-misc.c
…
win32-misc.h
…
win32-service.c windows: remove argc, argv from SCServiceRemove 3 years ago
win32-service.h windows: remove argc, argv from SCServiceRemove 3 years ago
win32-syscall.c
…
win32-syscall.h
…
win32-syslog.h
…