| .. |
|
tests
|
detect: add http.response_body sticky buffer
|
8 years ago |
|
Makefile.am
|
file-log: remove and add warning
|
8 years ago |
|
action-globals.h
|
…
|
|
|
alert-debuglog.c
|
output: introduce init return type
|
9 years ago |
|
alert-debuglog.h
|
…
|
|
|
alert-fastlog.c
|
output: introduce init return type
|
9 years ago |
|
alert-fastlog.h
|
output: introduce init return type
|
9 years ago |
|
alert-prelude.c
|
prelude: fix potential uninitialized value use
|
8 years ago |
|
alert-prelude.h
|
…
|
|
|
alert-syslog.c
|
outputs: fix memleaks in the error paths reported by coverity
|
8 years ago |
|
alert-syslog.h
|
…
|
|
|
alert-unified2-alert.c
|
outputs: fix memleaks in the error paths reported by coverity
|
8 years ago |
|
alert-unified2-alert.h
|
unified2: fix xff extra-data output (Bug #2305)
|
9 years ago |
|
app-layer-dcerpc-common.h
|
dcerpc: improve stub buffer handling
|
9 years ago |
|
app-layer-dcerpc-udp.c
|
dcerpc/udp: fix int mishandling in opnum parsing
|
8 years ago |
|
app-layer-dcerpc-udp.h
|
dcerpc/udp: add missing tx support
|
10 years ago |
|
app-layer-dcerpc.c
|
app-layer: pass STREAM_* flags to parser
|
8 years ago |
|
app-layer-dcerpc.h
|
…
|
|
|
app-layer-detect-proto.c
|
proto/detect: workaround dns misdetected as dcerpc
|
8 years ago |
|
app-layer-detect-proto.h
|
proto/detect: remove probing parser offset argument
|
8 years ago |
|
app-layer-dhcp.c
|
rust/dhcp: Rust based DHCP decoder and logger.
|
8 years ago |
|
app-layer-dhcp.h
|
rust/dhcp: Rust based DHCP decoder and logger.
|
8 years ago |
|
app-layer-dnp3-objects.c
|
dnp3: regenerate object decoding code
|
9 years ago |
|
app-layer-dnp3-objects.h
|
…
|
|
|
app-layer-dnp3.c
|
proto/detect: remove probing parser offset argument
|
8 years ago |
|
app-layer-dnp3.h
|
…
|
|
|
app-layer-dns-common.c
|
app-layer: remove has events callback - not used
|
9 years ago |
|
app-layer-dns-common.h
|
dns: shrink per flow state by improving layout
|
8 years ago |
|
app-layer-dns-tcp-rust.c
|
proto/detect: remove probing parser offset argument
|
8 years ago |
|
app-layer-dns-tcp-rust.h
|
rust: DNS app-layer.
|
10 years ago |
|
app-layer-dns-tcp.c
|
rust/dns: don't compile unused C code if Rust is enabled
|
8 years ago |
|
app-layer-dns-tcp.h
|
…
|
|
|
app-layer-dns-udp-rust.c
|
proto/detect: remove probing parser offset argument
|
8 years ago |
|
app-layer-dns-udp-rust.h
|
rust: DNS app-layer.
|
10 years ago |
|
app-layer-dns-udp.c
|
app-layer: fix tx tracking updates in tx cleanup
|
8 years ago |
|
app-layer-dns-udp.h
|
…
|
|
|
app-layer-enip-common.c
|
enip: harden byte parsing code
|
8 years ago |
|
app-layer-enip-common.h
|
…
|
|
|
app-layer-enip.c
|
proto/detect: remove probing parser offset argument
|
8 years ago |
|
app-layer-enip.h
|
…
|
|
|
app-layer-events.c
|
app-layer: protocol change API
|
10 years ago |
|
app-layer-events.h
|
app-layer: protocol change API
|
10 years ago |
|
app-layer-expectation.c
|
app-layer-expectation: expectation system
|
9 years ago |
|
app-layer-expectation.h
|
app-layer-expectation: expectation system
|
9 years ago |
|
app-layer-ftp.c
|
eve/ftp: don't alloc memory to log filename
|
8 years ago |
|
app-layer-ftp.h
|
app-layer-ftp: add memcap for ftp
|
9 years ago |
|
app-layer-htp-body.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
app-layer-htp-body.h
|
…
|
|
|
app-layer-htp-file.c
|
htp: remove usused file flags
|
9 years ago |
|
app-layer-htp-file.h
|
…
|
|
|
app-layer-htp-libhtp.c
|
htp: fix potential (but unlikely) memleak in uri normalization
|
8 years ago |
|
app-layer-htp-libhtp.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
app-layer-htp-mem.c
|
htp: destroy atomic vars
|
9 years ago |
|
app-layer-htp-mem.h
|
htp: destroy atomic vars
|
9 years ago |
|
app-layer-htp-xff.c
|
xff: HttpXFFGetCfg - allow conf to be NULL
|
9 years ago |
|
app-layer-htp-xff.h
|
xff: Use XFF configuration in eve and filestore
|
9 years ago |
|
app-layer-htp.c
|
app-layer: fix tx tracking updates in tx cleanup
|
8 years ago |
|
app-layer-htp.h
|
http: implement min size stream logic
|
8 years ago |
|
app-layer-ikev2.c
|
Remove the 'experimental' mark for IKEv2
|
9 years ago |
|
app-layer-ikev2.h
|
Add new parser: IKEv2
|
9 years ago |
|
app-layer-krb5.c
|
Add Kerberos 5 application layer
|
8 years ago |
|
app-layer-krb5.h
|
Add Kerberos 5 application layer
|
8 years ago |
|
app-layer-modbus.c
|
proto/detect: remove probing parser offset argument
|
8 years ago |
|
app-layer-modbus.h
|
modbus: Support Unit Identifier
|
9 years ago |
|
app-layer-nbss.h
|
…
|
|
|
app-layer-nfs-tcp.c
|
proto/detect: remove probing parser offset argument
|
8 years ago |
|
app-layer-nfs-tcp.h
|
rust/nfs: implement events
|
9 years ago |
|
app-layer-nfs-udp.c
|
proto/detect: remove probing parser offset argument
|
8 years ago |
|
app-layer-nfs-udp.h
|
nfs: rename nfs3 to nfs
|
10 years ago |
|
app-layer-ntp.c
|
rust: remove multi level 'experimental'
|
9 years ago |
|
app-layer-ntp.h
|
Add NTP parser (rust-experimental)
|
9 years ago |
|
app-layer-parser.c
|
app-layer: improve transaction cleanup handling
|
8 years ago |
|
app-layer-parser.h
|
unittests/app-layer: add helper to get app tx trackers
|
8 years ago |
|
app-layer-protos.c
|
templates: C stub template for Rust parser
|
8 years ago |
|
app-layer-protos.h
|
templates: C stub template for Rust parser
|
8 years ago |
|
app-layer-register.c
|
app-layer-register: add GetTxIterator
|
8 years ago |
|
app-layer-register.h
|
app-layer-register: add GetTxIterator
|
8 years ago |
|
app-layer-smb-tcp-rust.c
|
app-layer: improve transaction cleanup handling
|
8 years ago |
|
app-layer-smb-tcp-rust.h
|
rust/smb: initial support
|
9 years ago |
|
app-layer-smb.c
|
smb/c: don't accept null input
|
8 years ago |
|
app-layer-smb.h
|
rust/smb: initial support
|
9 years ago |
|
app-layer-smb2.c
|
app-layer: pass STREAM_* flags to parser
|
8 years ago |
|
app-layer-smb2.h
|
…
|
|
|
app-layer-smtp.c
|
smtp: minor code cleanup and debug addition
|
8 years ago |
|
app-layer-smtp.h
|
smtp: create raw-extraction feature
|
8 years ago |
|
app-layer-ssh.c
|
ssh: fix out of bounds read in banner parsing
|
8 years ago |
|
app-layer-ssh.h
|
ssh: implement DetectFlags API
|
9 years ago |
|
app-layer-ssl.c
|
app-layer-ssl: check that cipher suites length is divisible by two
|
8 years ago |
|
app-layer-ssl.h
|
app-layer-ssl: add Facebook TLSv1.3 draft versions
|
8 years ago |
|
app-layer-template-rust.c
|
rust: app-layer template parser and logger
|
8 years ago |
|
app-layer-template-rust.h
|
templates: C stub template for Rust parser
|
8 years ago |
|
app-layer-template.c
|
app-layer/template: code cleanups
|
8 years ago |
|
app-layer-template.h
|
app-layer/template: code cleanups
|
8 years ago |
|
app-layer-tftp.c
|
proto/detect: remove probing parser offset argument
|
8 years ago |
|
app-layer-tftp.h
|
rust/tftp: add tftp parsing and logging
|
9 years ago |
|
app-layer.c
|
profiling/app-layer: fix TCP parsers showing UDP stats
|
8 years ago |
|
app-layer.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
conf-yaml-loader.c
|
yaml: fix potential memleak and suppress coverity issue
|
8 years ago |
|
conf-yaml-loader.h
|
…
|
|
|
conf.c
|
mingw: minor compile warning fixes
|
9 years ago |
|
conf.h
|
conf: new function: ConfNodeHasChildren
|
9 years ago |
|
counters.c
|
eve.stats: warn that output might miss decoder-events
|
8 years ago |
|
counters.h
|
eve.stats: warn that output might miss decoder-events
|
8 years ago |
|
debug.h
|
…
|
|
|
decode-afl.c
|
cleanup: remove all uint use
|
9 years ago |
|
decode-erspan.c
|
decode: set pktlen of decode handler to uint32
|
8 years ago |
|
decode-erspan.h
|
…
|
|
|
decode-ethernet.c
|
decode: set pktlen of decode handler to uint32
|
8 years ago |
|
decode-ethernet.h
|
decoder: implement IEEE802.1AH
|
9 years ago |
|
decode-events.c
|
flow/stream: 'wrong thread' as stream event & counter
|
8 years ago |
|
decode-events.h
|
flow/stream: 'wrong thread' as stream event & counter
|
8 years ago |
|
decode-gre.c
|
decode: set pktlen of decode handler to uint32
|
8 years ago |
|
decode-gre.h
|
mingw: add SCNtohl and SCNtohs macro's
|
9 years ago |
|
decode-icmpv4.c
|
decode: set pktlen of decode handler to uint32
|
8 years ago |
|
decode-icmpv4.h
|
flow: track flow for ICMP
|
9 years ago |
|
decode-icmpv6.c
|
decode: set pktlen of decode handler to uint32
|
8 years ago |
|
decode-icmpv6.h
|
flow: track flow for ICMP
|
9 years ago |
|
decode-ipv4.c
|
flow: track flow for ip proto 41
|
9 years ago |
|
decode-ipv4.h
|
mingw: add SCNtohl and SCNtohs macro's
|
9 years ago |
|
decode-ipv6.c
|
decoder: add gre over ipv6 support
|
8 years ago |
|
decode-ipv6.h
|
mingw: add SCNtohl and SCNtohs macro's
|
9 years ago |
|
decode-mpls.c
|
decode: set pktlen of decode handler to uint32
|
8 years ago |
|
decode-mpls.h
|
…
|
|
|
decode-null.c
|
decode: set pktlen of decode handler to uint32
|
8 years ago |
|
decode-null.h
|
…
|
|
|
decode-ppp.c
|
decode: set pktlen of decode handler to uint32
|
8 years ago |
|
decode-ppp.h
|
…
|
|
|
decode-pppoe.c
|
decode: set pktlen of decode handler to uint32
|
8 years ago |
|
decode-pppoe.h
|
…
|
|
|
decode-raw.c
|
decode: set pktlen of decode handler to uint32
|
8 years ago |
|
decode-raw.h
|
…
|
|
|
decode-sctp.c
|
…
|
|
|
decode-sctp.h
|
mingw: add SCNtohl and SCNtohs macro's
|
9 years ago |
|
decode-sll.c
|
decode: set pktlen of decode handler to uint32
|
8 years ago |
|
decode-sll.h
|
…
|
|
|
decode-tcp.c
|
decode/tcp: rewrite options decoding to assist scan-build
|
8 years ago |
|
decode-tcp.h
|
mingw: add SCNtohl and SCNtohs macro's
|
9 years ago |
|
decode-template.c
|
decode/template: minor updates
|
8 years ago |
|
decode-template.h
|
decode/template: minor updates
|
8 years ago |
|
decode-teredo.c
|
teredo: be stricter on what to consider valid teredo
|
8 years ago |
|
decode-teredo.h
|
decode: add config option to disable teredo
|
9 years ago |
|
decode-udp.c
|
tcp/udp: rename checksum functions for better meaning
|
10 years ago |
|
decode-udp.h
|
mingw: add SCNtohl and SCNtohs macro's
|
9 years ago |
|
decode-vlan.c
|
decode: set pktlen of decode handler to uint32
|
8 years ago |
|
decode-vlan.h
|
mingw: add SCNtohl and SCNtohs macro's
|
9 years ago |
|
decode.c
|
decoder: improve stats hash error handling
|
8 years ago |
|
decode.h
|
tile: remove files
|
8 years ago |
|
defrag-config.c
|
…
|
|
|
defrag-config.h
|
…
|
|
|
defrag-hash.c
|
defrag: use rb tree to store fragments
|
8 years ago |
|
defrag-hash.h
|
defrag: get/set memcap value
|
9 years ago |
|
defrag-queue.c
|
…
|
|
|
defrag-queue.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
defrag-timeout.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
defrag-timeout.h
|
…
|
|
|
defrag.c
|
defrag: break out of loop in linux profile when able to
|
8 years ago |
|
defrag.h
|
defrag: use rb tree to store fragments
|
8 years ago |
|
detect-ack.c
|
detect/prefilter: add de_ctx to registration
|
9 years ago |
|
detect-ack.h
|
…
|
|
|
detect-app-layer-event.c
|
detect: fix memory leak in app-layer-event keyword
|
8 years ago |
|
detect-app-layer-event.h
|
detect: set events in inspection phase
|
9 years ago |
|
detect-app-layer-protocol.c
|
detect/prefilter: add de_ctx to registration
|
9 years ago |
|
detect-app-layer-protocol.h
|
…
|
|
|
detect-asn1.c
|
detect-asn1: fix memory leak in error path
|
9 years ago |
|
detect-asn1.h
|
…
|
|
|
detect-base64-data.c
|
detect/content: pass START/END flags to inspection
|
9 years ago |
|
detect-base64-data.h
|
…
|
|
|
detect-base64-decode.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-base64-decode.h
|
…
|
|
|
detect-bsize.c
|
detect: bsize keyword
|
9 years ago |
|
detect-bsize.h
|
detect: bsize keyword
|
9 years ago |
|
detect-bypass.c
|
doc: add missing and fix 404 for --list-keywords
|
8 years ago |
|
detect-bypass.h
|
…
|
|
|
detect-byte-extract.c
|
detect: register dynamic buffers into de_ctx
|
9 years ago |
|
detect-byte-extract.h
|
…
|
|
|
detect-bytejump.c
|
content inspection: support transforms
|
9 years ago |
|
detect-bytejump.h
|
…
|
|
|
detect-bytetest.c
|
detect/bytetest: don't print errors at runtime
|
8 years ago |
|
detect-bytetest.h
|
…
|
|
|
detect-cipservice.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-cipservice.h
|
…
|
|
|
detect-classtype.c
|
rule-parser: detect duplicate classtype keyword
|
9 years ago |
|
detect-classtype.h
|
…
|
|
|
detect-content.c
|
detect/distance: improve value parsing and fix broken test
|
8 years ago |
|
detect-content.h
|
detect/analyzer: show pattern that is used by mpm
|
8 years ago |
|
detect-csum.c
|
mingw: add SCNtohl and SCNtohs macro's
|
9 years ago |
|
detect-csum.h
|
…
|
|
|
detect-dce-iface.c
|
dcerpc: fix dce_iface not matching
|
8 years ago |
|
detect-dce-iface.h
|
…
|
|
|
detect-dce-opnum.c
|
detect/dce: keyword cleanups
|
8 years ago |
|
detect-dce-opnum.h
|
…
|
|
|
detect-dce-stub-data.c
|
detect/dce: keyword cleanups
|
8 years ago |
|
detect-dce-stub-data.h
|
…
|
|
|
detect-depth.c
|
detect-depth: remove semi coma from desc
|
8 years ago |
|
detect-depth.h
|
…
|
|
|
detect-detection-filter.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-detection-filter.h
|
…
|
|
|
detect-distance.c
|
detect/distance: improve value parsing and fix broken test
|
8 years ago |
|
detect-distance.h
|
…
|
|
|
detect-dnp3.c
|
detect/dnp3: cleanup list and proto registration
|
8 years ago |
|
detect-dnp3.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-dns-query.c
|
detect/parse: error out on unused sticky buffers
|
8 years ago |
|
detect-dns-query.h
|
…
|
|
|
detect-dsize.c
|
detect/prefilter: add de_ctx to registration
|
9 years ago |
|
detect-dsize.h
|
detect: reject dsize rules that can't match
|
9 years ago |
|
detect-engine-address-ipv4.c
|
mingw: add SCNtohl and SCNtohs macro's
|
9 years ago |
|
detect-engine-address-ipv4.h
|
…
|
|
|
detect-engine-address-ipv6.c
|
mingw: add SCNtohl and SCNtohs macro's
|
9 years ago |
|
detect-engine-address-ipv6.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-engine-address.c
|
detect/address: minor memory handling cleanups
|
8 years ago |
|
detect-engine-address.h
|
rules: optimize bidir rules with same src/dst
|
9 years ago |
|
detect-engine-alert.c
|
detect: fix mix of pass and noalert
|
9 years ago |
|
detect-engine-alert.h
|
…
|
|
|
detect-engine-analyzer.c
|
engine-analysis: add support for http_host buffer
|
8 years ago |
|
detect-engine-analyzer.h
|
rule analyzer: simple rules to json dumper
|
9 years ago |
|
detect-engine-build.c
|
detect/analyzer: fix json analyzer being called on incomplete rules
|
8 years ago |
|
detect-engine-build.h
|
detect: rewrite of the detect engine
|
9 years ago |
|
detect-engine-content-inspection.c
|
detect: bsize keyword
|
9 years ago |
|
detect-engine-content-inspection.h
|
detect/content: pass START/END flags to inspection
|
9 years ago |
|
detect-engine-dcepayload.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-engine-dcepayload.h
|
…
|
|
|
detect-engine-dns.c
|
detect/dns_query: move to API v2. Supports transforms.
|
9 years ago |
|
detect-engine-dns.h
|
detect/dns_query: move to API v2. Supports transforms.
|
9 years ago |
|
detect-engine-enip.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-engine-enip.h
|
…
|
|
|
detect-engine-event.c
|
stream/events: log as stats
|
8 years ago |
|
detect-engine-event.h
|
…
|
|
|
detect-engine-file.c
|
detect/http-client-body: move tests into tests/
|
8 years ago |
|
detect-engine-file.h
|
detect/file: cleanups
|
10 years ago |
|
detect-engine-iponly.c
|
detect: rewrite of the detect engine
|
9 years ago |
|
detect-engine-iponly.h
|
detect: rewrite of the detect engine
|
9 years ago |
|
detect-engine-loader.c
|
detect/analyzer: fix json analyzer being called on incomplete rules
|
8 years ago |
|
detect-engine-loader.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-engine-modbus.c
|
modbus: Support Unit Identifier
|
9 years ago |
|
detect-engine-modbus.h
|
…
|
|
|
detect-engine-mpm.c
|
tile: remove files
|
8 years ago |
|
detect-engine-mpm.h
|
detect/prefilter: add de_ctx to registration
|
9 years ago |
|
detect-engine-payload.c
|
stream: introduce min inspect depth logic
|
8 years ago |
|
detect-engine-payload.h
|
detect/prefilter: add de_ctx to registration
|
9 years ago |
|
detect-engine-port.c
|
rules: optimize bidir rules with same src/dst
|
9 years ago |
|
detect-engine-port.h
|
rules: optimize bidir rules with same src/dst
|
9 years ago |
|
detect-engine-prefilter-common.c
|
detect/prefilter: add de_ctx to registration
|
9 years ago |
|
detect-engine-prefilter-common.h
|
detect/prefilter: add de_ctx to registration
|
9 years ago |
|
detect-engine-prefilter.c
|
detect/prefilter: add closing debug return statement
|
8 years ago |
|
detect-engine-prefilter.h
|
detect/prefilter: move hash into detect engine ctx
|
9 years ago |
|
detect-engine-profile.c
|
output/json: update callers to use explicit directions
|
9 years ago |
|
detect-engine-profile.h
|
detect: rewrite of the detect engine
|
9 years ago |
|
detect-engine-proto.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-engine-proto.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-engine-register.c
|
detect/http-server-body: move tests to tests/
|
8 years ago |
|
detect-engine-register.h
|
detect: add file.name sticky buffer
|
8 years ago |
|
detect-engine-siggroup.c
|
detect/prefilter: move hash into detect engine ctx
|
9 years ago |
|
detect-engine-siggroup.h
|
detect/prefilter: move hash into detect engine ctx
|
9 years ago |
|
detect-engine-sigorder.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-engine-sigorder.h
|
…
|
|
|
detect-engine-state.c
|
app-layer: remove unused HasTxDetectState call
|
9 years ago |
|
detect-engine-state.h
|
detect/state: clean up old code
|
9 years ago |
|
detect-engine-tag.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-engine-tag.h
|
…
|
|
|
detect-engine-threshold.c
|
threshold: minor cleanups
|
9 years ago |
|
detect-engine-threshold.h
|
rate_filter by_both through IPPair storage
|
9 years ago |
|
detect-engine.c
|
mpm: rename internal id for ac-tile to ac-ks
|
8 years ago |
|
detect-engine.h
|
detect: improve inspect buffer handling
|
8 years ago |
|
detect-fast-pattern.c
|
doc: fix some links in list-keywords command
|
8 years ago |
|
detect-fast-pattern.h
|
detect: move buffer type map into detect ctx
|
9 years ago |
|
detect-file-data.c
|
detect/http-server-body: move tests to tests/
|
8 years ago |
|
detect-file-data.h
|
…
|
|
|
detect-file-hash-common.c
|
detect/filehash: try to open data file from rulefile dir
|
8 years ago |
|
detect-file-hash-common.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-fileext.c
|
detect/file: fix minor scan-build warnings
|
8 years ago |
|
detect-fileext.h
|
…
|
|
|
detect-filemagic.c
|
detect/file: fix minor scan-build warnings
|
8 years ago |
|
detect-filemagic.h
|
…
|
|
|
detect-filemd5.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-filemd5.h
|
…
|
|
|
detect-filename.c
|
detect: add file.name sticky buffer
|
8 years ago |
|
detect-filename.h
|
…
|
|
|
detect-filesha1.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-filesha1.h
|
…
|
|
|
detect-filesha256.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-filesha256.h
|
…
|
|
|
detect-filesize.c
|
keyword-filesize: add units
|
9 years ago |
|
detect-filesize.h
|
…
|
|
|
detect-filestore.c
|
filestore v2: print sid in json output
|
8 years ago |
|
detect-filestore.h
|
…
|
|
|
detect-flags.c
|
detect/flags: cleanup parsing to not alloc temp strings
|
8 years ago |
|
detect-flags.h
|
…
|
|
|
detect-flow.c
|
detect: use BIT_* macros
|
8 years ago |
|
detect-flow.h
|
detect: set implied flow direction based on keywords
|
9 years ago |
|
detect-flowbits.c
|
detect-flowbits: error on some invalid syntax
|
8 years ago |
|
detect-flowbits.h
|
…
|
|
|
detect-flowint.c
|
doc: fix some links in list-keywords command
|
8 years ago |
|
detect-flowint.h
|
…
|
|
|
detect-flowvar.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-flowvar.h
|
…
|
|
|
detect-fragbits.c
|
doc: fix some links in list-keywords command
|
8 years ago |
|
detect-fragbits.h
|
…
|
|
|
detect-fragoffset.c
|
detect/prefilter: add de_ctx to registration
|
9 years ago |
|
detect-fragoffset.h
|
…
|
|
|
detect-ftpbounce.c
|
doc: fix some links in list-keywords command
|
8 years ago |
|
detect-ftpbounce.h
|
…
|
|
|
detect-ftpdata.c
|
doc: fix some links in list-keywords command
|
8 years ago |
|
detect-ftpdata.h
|
detect-ftpdata: match on ftp-data operation
|
9 years ago |
|
detect-geoip.c
|
mingw: add SCNtohl and SCNtohs macro's
|
9 years ago |
|
detect-geoip.h
|
…
|
|
|
detect-gid.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-gid.h
|
…
|
|
|
detect-hostbits.c
|
detect-hostbits: error on some invalid config
|
8 years ago |
|
detect-hostbits.h
|
…
|
|
|
detect-http-accept-enc.c
|
doc: fix doc links for http keywords
|
10 years ago |
|
detect-http-accept-enc.h
|
detect: implement http_accept_enc sticky buffer
|
10 years ago |
|
detect-http-accept-lang.c
|
doc: fix doc links for http keywords
|
10 years ago |
|
detect-http-accept-lang.h
|
detect: implement http_accept_lang sticky buffer
|
10 years ago |
|
detect-http-accept.c
|
doc: fix doc links for http keywords
|
10 years ago |
|
detect-http-accept.h
|
detect: http_accept sticky buffer + common code
|
10 years ago |
|
detect-http-client-body.c
|
detect: add http.request_body sticky buffer
|
8 years ago |
|
detect-http-client-body.h
|
…
|
|
|
detect-http-connection.c
|
doc: fix doc links for http keywords
|
10 years ago |
|
detect-http-connection.h
|
detect: implement http_connection sticky buffer
|
10 years ago |
|
detect-http-content-len.c
|
doc: fix doc links for http keywords
|
10 years ago |
|
detect-http-content-len.h
|
detect: implement http_content_len sticky buffer
|
10 years ago |
|
detect-http-content-type.c
|
doc: fix doc links for http keywords
|
10 years ago |
|
detect-http-content-type.h
|
detect: implement http_content_type sticky buffer
|
10 years ago |
|
detect-http-cookie.c
|
detect: add http.cookie sticky buffer keyword
|
8 years ago |
|
detect-http-cookie.h
|
…
|
|
|
detect-http-header-common.c
|
cleanup: remove all uint use
|
9 years ago |
|
detect-http-header-common.h
|
…
|
|
|
detect-http-header-names.c
|
detect/content: pass START/END flags to inspection
|
9 years ago |
|
detect-http-header-names.h
|
…
|
|
|
detect-http-header.c
|
detect: add http.header sticky buffer keyword
|
8 years ago |
|
detect-http-header.h
|
…
|
|
|
detect-http-headers-stub.h
|
detect/content: pass START/END flags to inspection
|
9 years ago |
|
detect-http-headers.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-http-headers.h
|
detect: http_accept sticky buffer + common code
|
10 years ago |
|
detect-http-hh.c
|
detect: add http.host.raw sticky buffer
|
8 years ago |
|
detect-http-hh.h
|
…
|
|
|
detect-http-method.c
|
detect/http_method: add http.method sticky buffer
|
8 years ago |
|
detect-http-method.h
|
…
|
|
|
detect-http-protocol.c
|
detect/content: pass START/END flags to inspection
|
9 years ago |
|
detect-http-protocol.h
|
…
|
|
|
detect-http-raw-header.c
|
detect: add http.header.raw sticky buffer keyword
|
8 years ago |
|
detect-http-raw-header.h
|
…
|
|
|
detect-http-referer.c
|
doc: fix doc links for http keywords
|
10 years ago |
|
detect-http-referer.h
|
detect: implement http referer sticky buffer
|
10 years ago |
|
detect-http-request-line.c
|
doc: fix some links in list-keywords command
|
8 years ago |
|
detect-http-request-line.h
|
…
|
|
|
detect-http-response-line.c
|
doc: fix some links in list-keywords command
|
8 years ago |
|
detect-http-response-line.h
|
…
|
|
|
detect-http-server-body.c
|
detect: add http.response_body sticky buffer
|
8 years ago |
|
detect-http-server-body.h
|
…
|
|
|
detect-http-start.c
|
detect/content: pass START/END flags to inspection
|
9 years ago |
|
detect-http-start.h
|
…
|
|
|
detect-http-stat-code.c
|
detect: add http.stat_code sticky buffer keyword
|
8 years ago |
|
detect-http-stat-code.h
|
…
|
|
|
detect-http-stat-msg.c
|
detect: add http.stat_msg sticky buffer keyword
|
8 years ago |
|
detect-http-stat-msg.h
|
…
|
|
|
detect-http-ua.c
|
detect/http_user_agent: set alternative and info flags
|
8 years ago |
|
detect-http-ua.h
|
…
|
|
|
detect-http-uri.c
|
detect/http: add http.uri.raw sticky buffer keyword
|
8 years ago |
|
detect-http-uri.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-icmp-id.c
|
detect/prefilter: add de_ctx to registration
|
9 years ago |
|
detect-icmp-id.h
|
…
|
|
|
detect-icmp-seq.c
|
detect/prefilter: add de_ctx to registration
|
9 years ago |
|
detect-icmp-seq.h
|
…
|
|
|
detect-icode.c
|
detect/prefilter: add de_ctx to registration
|
9 years ago |
|
detect-icode.h
|
…
|
|
|
detect-id.c
|
detect/prefilter: add de_ctx to registration
|
9 years ago |
|
detect-id.h
|
…
|
|
|
detect-ipopts.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-ipopts.h
|
…
|
|
|
detect-ipproto.c
|
ipproto: fix memleak in error case
|
8 years ago |
|
detect-ipproto.h
|
…
|
|
|
detect-iprep.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-iprep.h
|
…
|
|
|
detect-isdataat.c
|
doc: fix some links in list-keywords command
|
8 years ago |
|
detect-isdataat.h
|
…
|
|
|
detect-itype.c
|
detect/prefilter: add de_ctx to registration
|
9 years ago |
|
detect-itype.h
|
…
|
|
|
detect-krb5-cname.c
|
detect: improve inspect buffer handling
|
8 years ago |
|
detect-krb5-cname.h
|
Add krb5_cname and krb5_sname detection keywords
|
8 years ago |
|
detect-krb5-errcode.c
|
detect: cleanup direct SIG_FLAG_STATE_MATCH use
|
8 years ago |
|
detect-krb5-errcode.h
|
Add krb5_err_code detection keyword
|
8 years ago |
|
detect-krb5-msgtype.c
|
detect: cleanup direct SIG_FLAG_STATE_MATCH use
|
8 years ago |
|
detect-krb5-msgtype.h
|
Add krb5_msg_type detection keyword
|
8 years ago |
|
detect-krb5-sname.c
|
detect: improve inspect buffer handling
|
8 years ago |
|
detect-krb5-sname.h
|
Add krb5_cname and krb5_sname detection keywords
|
8 years ago |
|
detect-l3proto.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-l3proto.h
|
…
|
|
|
detect-lua-extensions.c
|
lua: add Ja3GetHash function
|
9 years ago |
|
detect-lua-extensions.h
|
…
|
|
|
detect-lua.c
|
uricontent: move debug func into unittests
|
8 years ago |
|
detect-lua.h
|
…
|
|
|
detect-mark.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-mark.h
|
…
|
|
|
detect-metadata.c
|
hash: move string hash funcs into util files
|
8 years ago |
|
detect-metadata.h
|
detect-metadata: add a string storage to de_ctx
|
9 years ago |
|
detect-modbus.c
|
modbus: Support Unit Identifier
|
9 years ago |
|
detect-modbus.h
|
modbus: Support Unit Identifier
|
9 years ago |
|
detect-msg.c
|
detect-msg: cleanup error message
|
9 years ago |
|
detect-msg.h
|
…
|
|
|
detect-nfs-procedure.c
|
detect: cleanup direct SIG_FLAG_STATE_MATCH use
|
8 years ago |
|
detect-nfs-procedure.h
|
nfs: rename nfs3 to nfs
|
10 years ago |
|
detect-nfs-version.c
|
detect: cleanup direct SIG_FLAG_STATE_MATCH use
|
8 years ago |
|
detect-nfs-version.h
|
nfs: nfs_version keyword
|
10 years ago |
|
detect-noalert.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-noalert.h
|
…
|
|
|
detect-nocase.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-nocase.h
|
…
|
|
|
detect-offset.c
|
detect/offset: improve value parsing
|
8 years ago |
|
detect-offset.h
|
…
|
|
|
detect-parse.c
|
detect/parse: error out on unused sticky buffers
|
8 years ago |
|
detect-parse.h
|
detect: move buffer type map into detect ctx
|
9 years ago |
|
detect-pcre.c
|
detect/pcre: fix false positive
|
8 years ago |
|
detect-pcre.h
|
…
|
|
|
detect-pkt-data.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-pkt-data.h
|
…
|
|
|
detect-pktvar.c
|
detect/pktvar: clean up keyword parsing
|
9 years ago |
|
detect-pktvar.h
|
…
|
|
|
detect-prefilter.c
|
doc: add missing and fix 404 for --list-keywords
|
8 years ago |
|
detect-prefilter.h
|
…
|
|
|
detect-priority.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-priority.h
|
…
|
|
|
detect-rawbytes.c
|
detect/rawbytes: improve error message plus do minor cleanups
|
8 years ago |
|
detect-rawbytes.h
|
…
|
|
|
detect-reference.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-reference.h
|
…
|
|
|
detect-replace.c
|
detect: fix coverity memory leak warnings
|
8 years ago |
|
detect-replace.h
|
…
|
|
|
detect-rev.c
|
rule-parser: detect duplicate rev keyword
|
9 years ago |
|
detect-rev.h
|
…
|
|
|
detect-rpc.c
|
mingw: add SCNtohl and SCNtohs macro's
|
9 years ago |
|
detect-rpc.h
|
mingw: add SCNtohl and SCNtohs macro's
|
9 years ago |
|
detect-sameip.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-sameip.h
|
…
|
|
|
detect-seq.c
|
detect/prefilter: add de_ctx to registration
|
9 years ago |
|
detect-seq.h
|
…
|
|
|
detect-sid.c
|
rule-parser: detect duplicate sid keyword
|
9 years ago |
|
detect-sid.h
|
…
|
|
|
detect-smb-share.c
|
detect: improve inspect buffer handling
|
8 years ago |
|
detect-smb-share.h
|
rust/smb: initial support
|
9 years ago |
|
detect-ssh-proto-version.c
|
detect-ssh-proto-version: add description and url to keyword
|
8 years ago |
|
detect-ssh-proto-version.h
|
…
|
|
|
detect-ssh-proto.c
|
detect-ssh-proto: fix url for keyword
|
8 years ago |
|
detect-ssh-proto.h
|
…
|
|
|
detect-ssh-software-version.c
|
detect-ssh-software-version: add description and url to keyword
|
8 years ago |
|
detect-ssh-software-version.h
|
…
|
|
|
detect-ssh-software.c
|
detect-ssh-software: fix url for keyword
|
8 years ago |
|
detect-ssh-software.h
|
…
|
|
|
detect-ssl-state.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-ssl-state.h
|
…
|
|
|
detect-ssl-version.c
|
detect-ssl-version: add support for TLSv1.3
|
8 years ago |
|
detect-ssl-version.h
|
detect-ssl-version: add support for TLSv1.3
|
8 years ago |
|
detect-stream_size.c
|
detect/stream_size: code cleanups
|
8 years ago |
|
detect-stream_size.h
|
…
|
|
|
detect-tag.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-tag.h
|
…
|
|
|
detect-target.c
|
detect-target: introduce new keyword
|
10 years ago |
|
detect-target.h
|
detect-target: introduce new keyword
|
10 years ago |
|
detect-template-buffer.c
|
detect: improve inspect buffer handling
|
8 years ago |
|
detect-template-buffer.h
|
template: minor updates
|
9 years ago |
|
detect-template-rust-buffer.c
|
rust: app-layer detect template for rust parsers
|
8 years ago |
|
detect-template-rust-buffer.h
|
rust: app-layer detect template for rust parsers
|
8 years ago |
|
detect-template.c
|
detect/template: clean up packet keyword
|
8 years ago |
|
detect-template.h
|
template: minor updates
|
9 years ago |
|
detect-template2.c
|
detect/template2: template with prefilter (copy of ttl)
|
8 years ago |
|
detect-template2.h
|
detect/template2: template with prefilter (copy of ttl)
|
8 years ago |
|
detect-threshold.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-threshold.h
|
rate_filter by_both through IPPair storage
|
9 years ago |
|
detect-tls-cert-fingerprint.c
|
detect: improve inspect buffer handling
|
8 years ago |
|
detect-tls-cert-fingerprint.h
|
detect: add (mpm) keyword tls_cert_fingerprint
|
9 years ago |
|
detect-tls-cert-issuer.c
|
detect: improve inspect buffer handling
|
8 years ago |
|
detect-tls-cert-issuer.h
|
…
|
|
|
detect-tls-cert-serial.c
|
detect: improve inspect buffer handling
|
8 years ago |
|
detect-tls-cert-serial.h
|
…
|
|
|
detect-tls-cert-subject.c
|
detect: improve inspect buffer handling
|
8 years ago |
|
detect-tls-cert-subject.h
|
…
|
|
|
detect-tls-cert-validity.c
|
detect/tls: consolidate validity code
|
8 years ago |
|
detect-tls-cert-validity.h
|
…
|
|
|
detect-tls-ja3-hash.c
|
doc: fix some links in list-keywords command
|
8 years ago |
|
detect-tls-ja3-hash.h
|
detect: add (mpm) keyword ja3_hash
|
9 years ago |
|
detect-tls-ja3-string.c
|
doc: fix some links in list-keywords command
|
8 years ago |
|
detect-tls-ja3-string.h
|
detect: add (mpm) keyword ja3_string
|
9 years ago |
|
detect-tls-sni.c
|
detect: improve inspect buffer handling
|
8 years ago |
|
detect-tls-sni.h
|
…
|
|
|
detect-tls-version.c
|
doc: fix some links in list-keywords command
|
8 years ago |
|
detect-tls-version.h
|
detect-tls-version: add support for 'raw' matching
|
8 years ago |
|
detect-tls.c
|
doc: fix some links in list-keywords command
|
8 years ago |
|
detect-tls.h
|
…
|
|
|
detect-tos.c
|
doc: added tos keyword
|
8 years ago |
|
detect-tos.h
|
…
|
|
|
detect-transform-compress-whitespace.c
|
doc: fix some links in list-keywords command
|
8 years ago |
|
detect-transform-compress-whitespace.h
|
detect/transform: initial compress_whitespace implementation
|
9 years ago |
|
detect-transform-md5.c
|
detect/transform: add to_md5 keyword
|
8 years ago |
|
detect-transform-md5.h
|
detect/transform: add to_md5 keyword
|
8 years ago |
|
detect-transform-sha1.c
|
detect/transform: add to_sha1 keyword
|
8 years ago |
|
detect-transform-sha1.h
|
detect/transform: add to_sha1 keyword
|
8 years ago |
|
detect-transform-sha256.c
|
doc: fix some links in list-keywords command
|
8 years ago |
|
detect-transform-sha256.h
|
detect/transform: initial to_sha256 implementation
|
9 years ago |
|
detect-transform-strip-whitespace.c
|
doc: fix some links in list-keywords command
|
8 years ago |
|
detect-transform-strip-whitespace.h
|
detect/transform: initial strip_whitespace implementation
|
9 years ago |
|
detect-ttl.c
|
detect/ttl: major clean up of ttl code
|
8 years ago |
|
detect-ttl.h
|
…
|
|
|
detect-uricontent.c
|
util-binsearch: remove the files
|
8 years ago |
|
detect-uricontent.h
|
uricontent: move debug func into unittests
|
8 years ago |
|
detect-urilen.c
|
detect: save invalid rules
|
9 years ago |
|
detect-urilen.h
|
detect: save invalid rules
|
9 years ago |
|
detect-window.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
detect-window.h
|
…
|
|
|
detect-within.c
|
detect/within: clean up option value parsing
|
8 years ago |
|
detect-within.h
|
…
|
|
|
detect-xbits.c
|
detect-xbits: error on some invalid config
|
8 years ago |
|
detect-xbits.h
|
…
|
|
|
detect.c
|
detect/http-server-body: move tests to tests/
|
8 years ago |
|
detect.h
|
detect/http-client-body: convert to inspect api v2
|
8 years ago |
|
device-storage.c
|
device-storage: introduce feature
|
9 years ago |
|
device-storage.h
|
device-storage: introduce feature
|
9 years ago |
|
flow-bit.c
|
…
|
|
|
flow-bit.h
|
…
|
|
|
flow-bypass.c
|
flow-bypass: introduce update function
|
9 years ago |
|
flow-bypass.h
|
flow-bypass: introduce update function
|
9 years ago |
|
flow-hash.c
|
flow: track flow for ICMP
|
9 years ago |
|
flow-hash.h
|
…
|
|
|
flow-manager.c
|
flow-manager: improve thread shutdown loops
|
8 years ago |
|
flow-manager.h
|
…
|
|
|
flow-private.h
|
cleanup: get rid of %llu format specifiers
|
10 years ago |
|
flow-queue.c
|
…
|
|
|
flow-queue.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
flow-storage.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
flow-storage.h
|
…
|
|
|
flow-timeout.c
|
flow/timeout: code simplification and cleanup
|
8 years ago |
|
flow-timeout.h
|
…
|
|
|
flow-util.c
|
flow: track flow for ICMP
|
9 years ago |
|
flow-util.h
|
flow: add parent_id field
|
9 years ago |
|
flow-var.c
|
detect/flowint: harden code
|
9 years ago |
|
flow-var.h
|
…
|
|
|
flow-worker.c
|
stream/events: log as stats
|
8 years ago |
|
flow-worker.h
|
profile: account flow-worker tcp-prune step
|
10 years ago |
|
flow.c
|
flow: flag packets as established for async
|
8 years ago |
|
flow.h
|
tile: remove files
|
8 years ago |
|
host-bit.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
host-bit.h
|
…
|
|
|
host-queue.c
|
…
|
|
|
host-queue.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
host-storage.c
|
…
|
|
|
host-storage.h
|
…
|
|
|
host-timeout.c
|
rate_filter by_both through IPPair storage
|
9 years ago |
|
host-timeout.h
|
…
|
|
|
host.c
|
host: get/set memcap value
|
9 years ago |
|
host.h
|
host: get/set memcap value
|
9 years ago |
|
ippair-bit.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
ippair-bit.h
|
…
|
|
|
ippair-queue.c
|
…
|
|
|
ippair-queue.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
ippair-storage.c
|
…
|
|
|
ippair-storage.h
|
…
|
|
|
ippair-timeout.c
|
rate_filter by_both through IPPair storage
|
9 years ago |
|
ippair-timeout.h
|
…
|
|
|
ippair.c
|
mingw: add SCNtohl and SCNtohs macro's
|
9 years ago |
|
ippair.h
|
ippair: get/set memcap value
|
9 years ago |
|
log-cf-common.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
log-cf-common.h
|
log: tls custom format log
|
10 years ago |
|
log-dnslog.c
|
output: introduce init return type
|
9 years ago |
|
log-dnslog.h
|
…
|
|
|
log-droplog.c
|
output: introduce init return type
|
9 years ago |
|
log-droplog.h
|
…
|
|
|
log-filestore.c
|
file-log: remove and add warning
|
8 years ago |
|
log-filestore.h
|
filestore: avoid open write close sequence
|
10 years ago |
|
log-httplog.c
|
output: introduce init return type
|
9 years ago |
|
log-httplog.h
|
output: introduce init return type
|
9 years ago |
|
log-pcap.c
|
log-pcap: fix coverity memleak warning
|
8 years ago |
|
log-pcap.h
|
…
|
|
|
log-stats.c
|
log/stats: fix formatting of long decoder events
|
8 years ago |
|
log-stats.h
|
…
|
|
|
log-tcp-data.c
|
output: introduce init return type
|
9 years ago |
|
log-tcp-data.h
|
output: introduce init return type
|
9 years ago |
|
log-tlslog.c
|
tlslog: don't log as "resumed" without ServerHello
|
8 years ago |
|
log-tlslog.h
|
…
|
|
|
log-tlsstore.c
|
gcc8: fix format truncation warnings
|
9 years ago |
|
log-tlsstore.h
|
…
|
|
|
output-file.c
|
files: only prune in own direction
|
8 years ago |
|
output-file.h
|
file: update logger API to log direction
|
9 years ago |
|
output-filedata.c
|
file: update logger API to log direction
|
9 years ago |
|
output-filedata.h
|
file: update logger API to log direction
|
9 years ago |
|
output-filestore.c
|
filestore: fix compiler truncation warnings
|
8 years ago |
|
output-filestore.h
|
filestore v2 - initial version
|
9 years ago |
|
output-flow.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
output-flow.h
|
…
|
|
|
output-json-alert.c
|
rust/dns: add dns to dns alerts
|
8 years ago |
|
output-json-alert.h
|
output-json-alert: conditionaly output metadata
|
9 years ago |
|
output-json-common.c
|
eve/json: add common helper funcs
|
8 years ago |
|
output-json-dhcp.c
|
rust/dhcp: Rust based DHCP decoder and logger.
|
8 years ago |
|
output-json-dhcp.h
|
dhcp: add author
|
8 years ago |
|
output-json-dnp3-objects.c
|
output-json: ensure string is json-encodable
|
8 years ago |
|
output-json-dnp3-objects.h
|
…
|
|
|
output-json-dnp3.c
|
eve/json: handle common options in central function
|
8 years ago |
|
output-json-dnp3.h
|
…
|
|
|
output-json-dns.c
|
rust/dns: add dns to dns alerts
|
8 years ago |
|
output-json-dns.h
|
rust/dns: add dns to dns alerts
|
8 years ago |
|
output-json-drop.c
|
eve/json: handle common options in central function
|
8 years ago |
|
output-json-drop.h
|
…
|
|
|
output-json-email-common.c
|
output-json: ensure string is json-encodable
|
8 years ago |
|
output-json-email-common.h
|
eve/json: introduce community flow id
|
8 years ago |
|
output-json-file.c
|
file-log: remove and add warning
|
8 years ago |
|
output-json-file.h
|
xff: Use XFF configuration in eve and filestore
|
9 years ago |
|
output-json-flow.c
|
flow: log gap state per direction
|
8 years ago |
|
output-json-flow.h
|
output-json-alert: add app_proto or flow to events
|
9 years ago |
|
output-json-http.c
|
eve/http: add proxy related custom headers
|
8 years ago |
|
output-json-http.h
|
output-json-http: add functions to log http body
|
9 years ago |
|
output-json-ikev2.c
|
eve/json: handle common options in central function
|
8 years ago |
|
output-json-ikev2.h
|
Add logger for IKEv2
|
9 years ago |
|
output-json-krb5.c
|
eve/json: handle common options in central function
|
8 years ago |
|
output-json-krb5.h
|
kerberos: minor doc updates, add author
|
8 years ago |
|
output-json-metadata.c
|
eve/json: handle common options in central function
|
8 years ago |
|
output-json-metadata.h
|
output-json-vars: rename to metadata
|
9 years ago |
|
output-json-netflow.c
|
eve/json: handle common options in central function
|
8 years ago |
|
output-json-netflow.h
|
…
|
|
|
output-json-nfs.c
|
eve/json: handle common options in central function
|
8 years ago |
|
output-json-nfs.h
|
nfs: add to fileinfo events
|
9 years ago |
|
output-json-smb.c
|
smb: use common json output structures
|
8 years ago |
|
output-json-smb.h
|
rust/smb: initial support
|
9 years ago |
|
output-json-smtp.c
|
eve/json: handle common options in central function
|
8 years ago |
|
output-json-smtp.h
|
…
|
|
|
output-json-ssh.c
|
eve/json: handle common options in central function
|
8 years ago |
|
output-json-ssh.h
|
…
|
|
|
output-json-stats.c
|
eve.stats: warn that output might miss decoder-events
|
8 years ago |
|
output-json-stats.h
|
json-stats: print engine stats
|
9 years ago |
|
output-json-template-rust.c
|
templates: C stub output for Rust logger
|
8 years ago |
|
output-json-template-rust.h
|
templates: C stub output for Rust logger
|
8 years ago |
|
output-json-template.c
|
output/json: update callers to use explicit directions
|
9 years ago |
|
output-json-template.h
|
…
|
|
|
output-json-tftp.c
|
output/json: update callers to use explicit directions
|
9 years ago |
|
output-json-tftp.h
|
rust/tftp: add tftp parsing and logging
|
9 years ago |
|
output-json-tls.c
|
eve/json: handle common options in central function
|
8 years ago |
|
output-json-tls.h
|
…
|
|
|
output-json.c
|
eve/json: introduce community flow id
|
8 years ago |
|
output-json.h
|
eve/json: introduce community flow id
|
8 years ago |
|
output-lua.c
|
Fix segfault when the protocol is anything other than HTTP
|
9 years ago |
|
output-lua.h
|
…
|
|
|
output-packet.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
output-packet.h
|
…
|
|
|
output-stats.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
output-stats.h
|
…
|
|
|
output-streaming.c
|
output/streaming: fixes and redo tcp logging
|
10 years ago |
|
output-streaming.h
|
…
|
|
|
output-tx.c
|
output/tx: fix multi-instance logger output
|
8 years ago |
|
output-tx.h
|
…
|
|
|
output.c
|
file-log: remove and add warning
|
8 years ago |
|
output.h
|
output: introduce init return type
|
9 years ago |
|
packet-queue.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
packet-queue.h
|
…
|
|
|
pkt-var.c
|
…
|
|
|
pkt-var.h
|
…
|
|
|
queue.h
|
…
|
|
|
reputation.c
|
iprep: small cleanups
|
8 years ago |
|
reputation.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
respond-reject-libnet11.c
|
…
|
|
|
respond-reject-libnet11.h
|
…
|
|
|
respond-reject.c
|
…
|
|
|
respond-reject.h
|
…
|
|
|
runmode-af-packet.c
|
af-packet: XDP bypass in IPS mode
|
9 years ago |
|
runmode-af-packet.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
runmode-erf-dag.c
|
…
|
|
|
runmode-erf-dag.h
|
…
|
|
|
runmode-erf-file.c
|
gcc7: fix format-truncation warnings in runmodes
|
9 years ago |
|
runmode-erf-file.h
|
…
|
|
|
runmode-ipfw.c
|
…
|
|
|
runmode-ipfw.h
|
…
|
|
|
runmode-napatech.c
|
napatech: fix minor memleak in error path
|
9 years ago |
|
runmode-napatech.h
|
napatech: Implementation of packet counters
|
9 years ago |
|
runmode-netmap.c
|
netmap: switch to nm_* API
|
8 years ago |
|
runmode-netmap.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
runmode-nflog.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
runmode-nflog.h
|
…
|
|
|
runmode-nfq.c
|
…
|
|
|
runmode-nfq.h
|
…
|
|
|
runmode-pcap-file.c
|
gcc7: fix format-truncation warnings in runmodes
|
9 years ago |
|
runmode-pcap-file.h
|
…
|
|
|
runmode-pcap.c
|
pcap: fix buffer size validation logic
|
8 years ago |
|
runmode-pcap.h
|
…
|
|
|
runmode-pfring.c
|
pfring: default to runmode workers
|
8 years ago |
|
runmode-pfring.h
|
…
|
|
|
runmode-unittests.c
|
detect/http-server-body: move tests to tests/
|
8 years ago |
|
runmode-unittests.h
|
gcc7: fixes for format string warnings
|
9 years ago |
|
runmode-unix-socket.c
|
unix-socket: Fix the message for unregister-tenant-handler
|
8 years ago |
|
runmode-unix-socket.h
|
runmode-unix-socket: add commands for memcap handling
|
9 years ago |
|
runmode-windivert.c
|
Adds WinDivert support to Windows builds
|
8 years ago |
|
runmode-windivert.h
|
Adds WinDivert support to Windows builds
|
8 years ago |
|
runmodes.c
|
file-log: remove and add warning
|
8 years ago |
|
runmodes.h
|
tile: remove files
|
8 years ago |
|
rust.h
|
rust/smb: initial support
|
9 years ago |
|
source-af-packet.c
|
af-packet: minor code cleanups
|
8 years ago |
|
source-af-packet.h
|
af-packet: end of map factoring
|
9 years ago |
|
source-erf-dag.c
|
mingw: add SCNtohl and SCNtohs macro's
|
9 years ago |
|
source-erf-dag.h
|
…
|
|
|
source-erf-file.c
|
mingw: add SCNtohl and SCNtohs macro's
|
9 years ago |
|
source-erf-file.h
|
…
|
|
|
source-ipfw.c
|
decode: set pktlen of decode handler to uint32
|
8 years ago |
|
source-ipfw.h
|
…
|
|
|
source-napatech.c
|
napatech: Implementation of packet counters
|
9 years ago |
|
source-napatech.h
|
napatech: Implementation of packet counters
|
9 years ago |
|
source-netmap.c
|
netmap: switch to nm_* API
|
8 years ago |
|
source-netmap.h
|
netmap: switch to nm_* API
|
8 years ago |
|
source-nflog.c
|
decode: set pktlen of decode handler to uint32
|
8 years ago |
|
source-nflog.h
|
…
|
|
|
source-nfq-prototypes.h
|
…
|
|
|
source-nfq.c
|
nfqueue: more descriptive queue names (e.g. 'NFQ#1' instead of '1')
|
8 years ago |
|
source-nfq.h
|
source-nfq: increase maximum queues number to 65535
|
8 years ago |
|
source-pcap-file-directory-helper.c
|
eve: log pcap filename
|
9 years ago |
|
source-pcap-file-directory-helper.h
|
source-pcap-file: Directory mode may miss files (bug #2394)
|
9 years ago |
|
source-pcap-file-helper.c
|
pcap-file: fix segv on bad pcap format
|
8 years ago |
|
source-pcap-file-helper.h
|
decode: set pktlen of decode handler to uint32
|
8 years ago |
|
source-pcap-file.c
|
source-pcap-file: delete when done (2417)
|
8 years ago |
|
source-pcap-file.h
|
eve: log pcap filename
|
9 years ago |
|
source-pcap.c
|
source-pcap:set PktAcqBreakLoop as pcap_breakloop
|
8 years ago |
|
source-pcap.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
source-pfring.c
|
pfring: fix bypass counter print uninitialized values
|
8 years ago |
|
source-pfring.h
|
pfring: various build issues
|
9 years ago |
|
source-windivert-prototypes.h
|
Adds WinDivert support to Windows builds
|
8 years ago |
|
source-windivert.c
|
Adds WinDivert support to Windows builds
|
8 years ago |
|
source-windivert.h
|
Adds WinDivert support to Windows builds
|
8 years ago |
|
stream-tcp-inline.c
|
stream/segments: turn linked list into rbtree
|
8 years ago |
|
stream-tcp-inline.h
|
stream/segments: turn linked list into rbtree
|
8 years ago |
|
stream-tcp-list.c
|
stream: introduce min inspect depth logic
|
8 years ago |
|
stream-tcp-list.h
|
stream/segments: turn linked list into rbtree
|
8 years ago |
|
stream-tcp-private.h
|
stream: no more stream events after known issue
|
8 years ago |
|
stream-tcp-reassemble.c
|
stream/ips: set proper payload len for inspection
|
8 years ago |
|
stream-tcp-reassemble.h
|
stream: introduce min inspect depth logic
|
8 years ago |
|
stream-tcp-sack.c
|
stream/sack: optimize SACK size handling
|
8 years ago |
|
stream-tcp-sack.h
|
stream/sack: optimize SACK size handling
|
8 years ago |
|
stream-tcp-util.c
|
stream/segments: turn linked list into rbtree
|
8 years ago |
|
stream-tcp-util.h
|
tcp: streaming implementation
|
10 years ago |
|
stream-tcp.c
|
stream: no more stream events after known issue
|
8 years ago |
|
stream-tcp.h
|
flow/stream: 'wrong thread' as stream event & counter
|
8 years ago |
|
stream.c
|
detect / stream: new 'raw' stream inspection
|
10 years ago |
|
stream.h
|
stream: use BIT_U8 for stream flags
|
8 years ago |
|
suricata-common.h
|
file-log: remove and add warning
|
8 years ago |
|
suricata.c
|
tile: remove files
|
8 years ago |
|
suricata.h
|
suricata: fix list keywords URL in release mode
|
8 years ago |
|
threads-debug.h
|
…
|
|
|
threads-profile.h
|
…
|
|
|
threads.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
threads.h
|
tile: remove files
|
8 years ago |
|
threadvars.h
|
stats: use unshortened interface names in counters
|
9 years ago |
|
tm-modules.c
|
tile: remove files
|
8 years ago |
|
tm-modules.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
tm-queuehandlers.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
tm-queuehandlers.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
tm-queues.c
|
cuda: remove
|
9 years ago |
|
tm-queues.h
|
cuda: remove
|
9 years ago |
|
tm-threads-common.h
|
tile: remove files
|
8 years ago |
|
tm-threads.c
|
threads: move sleep macros into common header
|
8 years ago |
|
tm-threads.h
|
threads: move sleep macros into common header
|
8 years ago |
|
tmqh-flow.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
tmqh-flow.h
|
…
|
|
|
tmqh-nfq.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
tmqh-nfq.h
|
…
|
|
|
tmqh-packetpool.c
|
spelling: fixing minor spelling mistakes
|
8 years ago |
|
tmqh-packetpool.h
|
…
|
|
|
tmqh-simple.c
|
cuda: remove
|
9 years ago |
|
tmqh-simple.h
|
cuda: remove
|
9 years ago |
|
tree.h
|
tree: add scan-build assertions to suppress FPs
|
8 years ago |
|
unix-manager.c
|
unix-socket: add ebpf-bypassed-stats command
|
9 years ago |
|
unix-manager.h
|
bug 2113: unix-socket start up race
|
10 years ago |
|
util-action.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-action.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-affinity.c
|
util-affinity: export CPU set parsing function
|
9 years ago |
|
util-affinity.h
|
util-affinity: export CPU set parsing function
|
9 years ago |
|
util-atomic.c
|
…
|
|
|
util-atomic.h
|
tile: remove files
|
8 years ago |
|
util-base64.c
|
…
|
|
|
util-base64.h
|
…
|
|
|
util-bloomfilter-counting.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-bloomfilter-counting.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-bloomfilter.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-bloomfilter.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-bpf.c
|
util-bpf: workaround OpenBSD old libpcap
|
8 years ago |
|
util-bpf.h
|
util-bpf: workaround OpenBSD old libpcap
|
8 years ago |
|
util-buffer.c
|
…
|
|
|
util-buffer.h
|
af-packet: add support for eBPF cluster and filter
|
9 years ago |
|
util-byte.c
|
byte: add bytes to string w/o allocation
|
8 years ago |
|
util-byte.h
|
byte: add bytes to string w/o allocation
|
8 years ago |
|
util-checksum.c
|
checksum: use u64 types
|
8 years ago |
|
util-checksum.h
|
checksum: use u64 types
|
8 years ago |
|
util-cidr.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-cidr.h
|
…
|
|
|
util-classification-config.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-classification-config.h
|
…
|
|
|
util-clock.h
|
…
|
|
|
util-conf.c
|
conf: NULL-pointer dereference in ConfUnixSocketIsEnable
|
9 years ago |
|
util-conf.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-coredump-config.c
|
conf: fix NULL-pointer dereference in CoredumpLoadConfig
|
9 years ago |
|
util-coredump-config.h
|
…
|
|
|
util-cpu.c
|
tile: remove files
|
8 years ago |
|
util-cpu.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-crypt.c
|
hash/sha1: optimize by avoiding mem alloc
|
8 years ago |
|
util-crypt.h
|
hash/sha1: optimize by avoiding mem alloc
|
8 years ago |
|
util-daemon.c
|
conf: user-configurable umask setting
|
9 years ago |
|
util-daemon.h
|
…
|
|
|
util-debug-filters.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-debug-filters.h
|
…
|
|
|
util-debug.c
|
windows: fix sc_log_stream_lock handling
|
8 years ago |
|
util-debug.h
|
Bug #2466: map SC_LOG_CONFIG level to syslogs LOG_DEBUG
|
9 years ago |
|
util-decode-asn1.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-decode-asn1.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-decode-der-get.c
|
…
|
|
|
util-decode-der-get.h
|
…
|
|
|
util-decode-der.c
|
der: don't overwrite errcode
|
9 years ago |
|
util-decode-der.h
|
DER parser: ensure errcode is set for every return path
|
9 years ago |
|
util-decode-mime.c
|
smtp/mime: fix null ptr deref on bad traffic
|
8 years ago |
|
util-decode-mime.h
|
smtp/mime: fix null ptr deref on bad traffic
|
8 years ago |
|
util-detect.c
|
detect: save invalid rules
|
9 years ago |
|
util-detect.h
|
detect: save invalid rules
|
9 years ago |
|
util-device.c
|
multi-tenant: introduce device selector
|
8 years ago |
|
util-device.h
|
multi-tenant: introduce device selector
|
8 years ago |
|
util-ebpf.c
|
util-ebpf: rename local variable
|
9 years ago |
|
util-ebpf.h
|
unix-socket: add ebpf-bypassed-stats command
|
9 years ago |
|
util-enum.c
|
enum: don't printf on util-enum errors
|
9 years ago |
|
util-enum.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-error.c
|
eve.stats: warn that output might miss decoder-events
|
8 years ago |
|
util-error.h
|
eve.stats: warn that output might miss decoder-events
|
8 years ago |
|
util-file-decompression.c
|
flash: code cleanups
|
9 years ago |
|
util-file-decompression.h
|
file_data: update to API v2
|
9 years ago |
|
util-file-swf-decompression.c
|
file/swf: fix undefined int behaviour
|
8 years ago |
|
util-file-swf-decompression.h
|
flash: code cleanups
|
9 years ago |
|
util-file.c
|
filestore v2: print sid in json output
|
8 years ago |
|
util-file.h
|
filestore v2: print sid in json output
|
8 years ago |
|
util-fix_checksum.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-fix_checksum.h
|
…
|
|
|
util-fmemopen.c
|
…
|
|
|
util-fmemopen.h
|
…
|
|
|
util-hash-lookup3.c
|
gcc7: fixes for format string warnings
|
9 years ago |
|
util-hash-lookup3.h
|
…
|
|
|
util-hash-string.c
|
hash: move string hash funcs into util files
|
8 years ago |
|
util-hash-string.h
|
hash: move string hash funcs into util files
|
8 years ago |
|
util-hash.c
|
Hash table: free bucker in case of insertion error
|
9 years ago |
|
util-hash.h
|
…
|
|
|
util-hashlist.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-hashlist.h
|
…
|
|
|
util-host-info.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-host-info.h
|
…
|
|
|
util-host-os-info.c
|
host/os/info: fix lookup memleak
|
8 years ago |
|
util-host-os-info.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-hyperscan.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-hyperscan.h
|
…
|
|
|
util-ioctl.c
|
offloading: on bsd, disable rxcsum and v6 variants
|
8 years ago |
|
util-ioctl.h
|
Adds WinDivert support to Windows builds
|
8 years ago |
|
util-ip.c
|
ipv6: add string validation function
|
9 years ago |
|
util-ip.h
|
ipv6: add string validation function
|
9 years ago |
|
util-ja3.c
|
util-ja3: fix AddressSanitizer heap-buffer-overflow
|
8 years ago |
|
util-ja3.h
|
app-layer-ssl: really fix CID 1433623
|
9 years ago |
|
util-log-redis.c
|
redis: suppress minor coverity warning
|
9 years ago |
|
util-log-redis.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-logopenfile.c
|
tile: remove files
|
8 years ago |
|
util-logopenfile.h
|
eve: log pcap filename
|
9 years ago |
|
util-lua-common.c
|
flow: track flow for ICMP
|
9 years ago |
|
util-lua-common.h
|
…
|
|
|
util-lua-dnp3-objects.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-lua-dnp3-objects.h
|
…
|
|
|
util-lua-dnp3.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-lua-dnp3.h
|
…
|
|
|
util-lua-dns.c
|
rust/dns: don't compile unused C code if Rust is enabled
|
8 years ago |
|
util-lua-dns.h
|
…
|
|
|
util-lua-http.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-lua-http.h
|
…
|
|
|
util-lua-ja3.c
|
lua: add Ja3GetString function
|
9 years ago |
|
util-lua-ja3.h
|
lua: add Ja3GetHash function
|
9 years ago |
|
util-lua-smtp.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-lua-smtp.h
|
…
|
|
|
util-lua-ssh.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-lua-ssh.h
|
…
|
|
|
util-lua-tls.c
|
lua: add function 'TlsGetVersion'
|
8 years ago |
|
util-lua-tls.h
|
…
|
|
|
util-lua.c
|
luajit: cleanup states before return to pool
|
10 years ago |
|
util-lua.h
|
…
|
|
|
util-luajit.c
|
detect: fix crash during startup with malformed yaml
|
8 years ago |
|
util-luajit.h
|
…
|
|
|
util-magic.c
|
magic: fix compile warnings
|
10 years ago |
|
util-magic.h
|
…
|
|
|
util-mem.h
|
tile: remove files
|
8 years ago |
|
util-memcmp.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-memcmp.h
|
tile: remove files
|
8 years ago |
|
util-memcpy.h
|
…
|
|
|
util-memrchr.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-memrchr.h
|
…
|
|
|
util-misc.c
|
conf: fix NULL-pointer dereference in ParseSizeString
|
9 years ago |
|
util-misc.h
|
…
|
|
|
util-mpm-ac-bs.c
|
detect: fix buffer length to uint32
|
9 years ago |
|
util-mpm-ac-bs.h
|
…
|
|
|
util-mpm-ac-ks-small.c
|
mpm/ac-ks: rename files from -tile to -ks
|
8 years ago |
|
util-mpm-ac-ks.c
|
mpm/ac-ks: rename files from -tile to -ks
|
8 years ago |
|
util-mpm-ac-ks.h
|
mpm/ac-ks: rename files from -tile to -ks
|
8 years ago |
|
util-mpm-ac.c
|
detect: fix buffer length to uint32
|
9 years ago |
|
util-mpm-ac.h
|
cuda: remove
|
9 years ago |
|
util-mpm-hs.c
|
detect: fix buffer length to uint32
|
9 years ago |
|
util-mpm-hs.h
|
…
|
|
|
util-mpm.c
|
mpm/ac-ks: rename files from -tile to -ks
|
8 years ago |
|
util-mpm.h
|
mpm: rename internal id for ac-tile to ac-ks
|
8 years ago |
|
util-napatech.c
|
napatech: Implementation of packet counters
|
9 years ago |
|
util-napatech.h
|
napatech: Implementation of packet counters
|
9 years ago |
|
util-optimize.h
|
…
|
|
|
util-pages.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-pages.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-path.c
|
SCPathExists - function to see if a path exists
|
9 years ago |
|
util-path.h
|
SCPathExists - function to see if a path exists
|
9 years ago |
|
util-pidfile.c
|
coverity: suppress warnings
|
8 years ago |
|
util-pidfile.h
|
…
|
|
|
util-pool-thread.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-pool-thread.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-pool.c
|
pool: avoid possible double free in error path
|
8 years ago |
|
util-pool.h
|
pool: small code cleanups
|
8 years ago |
|
util-prefilter.c
|
…
|
|
|
util-prefilter.h
|
…
|
|
|
util-print.c
|
Adds WinDivert support to Windows builds
|
8 years ago |
|
util-print.h
|
print: constify input
|
10 years ago |
|
util-privs.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-privs.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-profiling-keywords.c
|
detect: register dynamic buffers into de_ctx
|
9 years ago |
|
util-profiling-locks.c
|
profiling: fix const compiler warnings
|
10 years ago |
|
util-profiling-locks.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-profiling-prefilter.c
|
profiling: suppress debug statements
|
9 years ago |
|
util-profiling-rulegroups.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-profiling-rules.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-profiling.c
|
file-log: remove and add warning
|
8 years ago |
|
util-profiling.h
|
detect/prefilter: redo profiling
|
9 years ago |
|
util-proto-name.c
|
…
|
|
|
util-proto-name.h
|
…
|
|
|
util-radix-tree.c
|
radix: fix a memleak when removing the last node
|
8 years ago |
|
util-radix-tree.h
|
…
|
|
|
util-random.c
|
coverity: don't warn on fall back random
|
8 years ago |
|
util-random.h
|
random: improve random logic
|
10 years ago |
|
util-reference-config.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-reference-config.h
|
…
|
|
|
util-rohash.c
|
…
|
|
|
util-rohash.h
|
…
|
|
|
util-rule-vars.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-rule-vars.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-runmodes.c
|
nfqueue: more descriptive queue names (e.g. 'NFQ#1' instead of '1')
|
8 years ago |
|
util-runmodes.h
|
…
|
|
|
util-running-modes.c
|
cuda: remove
|
9 years ago |
|
util-running-modes.h
|
cuda: remove
|
9 years ago |
|
util-signal.c
|
signal: use centralized pthread_sigmask for signals
|
9 years ago |
|
util-signal.h
|
signal: use centralized pthread_sigmask for signals
|
9 years ago |
|
util-spm-bm.c
|
detect: fix buffer length to uint32
|
9 years ago |
|
util-spm-bm.h
|
detect: fix buffer length to uint32
|
9 years ago |
|
util-spm-bs.c
|
…
|
|
|
util-spm-bs.h
|
…
|
|
|
util-spm-bs2bm.c
|
…
|
|
|
util-spm-bs2bm.h
|
…
|
|
|
util-spm-hs.c
|
hyperscan: don't abort on payloads > 64k
|
9 years ago |
|
util-spm-hs.h
|
…
|
|
|
util-spm.c
|
detect: fix buffer length to uint32
|
9 years ago |
|
util-spm.h
|
detect: fix buffer length to uint32
|
9 years ago |
|
util-storage.c
|
storage: don't leak memory for unittests
|
8 years ago |
|
util-storage.h
|
device-storage: introduce feature
|
9 years ago |
|
util-streaming-buffer.c
|
stream-buffer: fix block search compare func
|
8 years ago |
|
util-streaming-buffer.h
|
stream/segments: change packing to reduce size
|
8 years ago |
|
util-strlcatu.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-strlcpyu.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-strptime.c
|
Adds WinDivert support to Windows builds
|
8 years ago |
|
util-syslog.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-syslog.h
|
…
|
|
|
util-threshold-config.c
|
thresholds: remove dead code in parsing
|
8 years ago |
|
util-threshold-config.h
|
threshold: don't touch globals after init
|
9 years ago |
|
util-time.c
|
time: Force init cached_minute_start array
|
9 years ago |
|
util-time.h
|
stats: more accurate interval handling
|
8 years ago |
|
util-unittest-helper.c
|
unittests: add signature parse test helper
|
8 years ago |
|
util-unittest-helper.h
|
unittests: add signature parse test helper
|
8 years ago |
|
util-unittest.c
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-unittest.h
|
compiler: more strict compiler warnings
|
10 years ago |
|
util-validate.h
|
detect: suppress scan-build warnings
|
8 years ago |
|
util-var-name.c
|
flowbits: analyze and dump to json
|
9 years ago |
|
util-var-name.h
|
flowbits: analyze and dump to json
|
9 years ago |
|
util-var.c
|
…
|
|
|
util-var.h
|
…
|
|
|
util-vector.h
|
…
|
|
|
win32-misc.c
|
Adds WinDivert support to Windows builds
|
8 years ago |
|
win32-misc.h
|
Adds WinDivert support to Windows builds
|
8 years ago |
|
win32-service.c
|
mingw: service init compile warning fix
|
9 years ago |
|
win32-service.h
|
…
|
|
|
win32-syscall.c
|
windows/syscall: fix unused function warning
|
8 years ago |
|
win32-syscall.h
|
windows/syscall: convert file to use unix newlines
|
8 years ago |
|
win32-syslog.h
|
…
|
|
