| .. |
|
tests
|
detect/ssl: properly handle negation in ssl_version keyword
|
11 months ago |
|
Makefile.am
|
output/null: Add the null output device
|
10 months ago |
|
action-globals.h
|
…
|
|
|
alert-debuglog.c
|
detect/iponly: use flow first flags
|
1 year ago |
|
alert-debuglog.h
|
…
|
|
|
alert-fastlog.c
|
output/alert: spelling
|
4 years ago |
|
alert-fastlog.h
|
all: remove unused literals
|
4 years ago |
|
alert-syslog.c
|
src: various comment spelling fixes
|
4 years ago |
|
alert-syslog.h
|
output/alert: spelling
|
4 years ago |
|
app-layer-detect-proto.c
|
protodetect: finish probing parser sooner
|
2 years ago |
|
app-layer-detect-proto.h
|
app-layer: spelling
|
4 years ago |
|
app-layer-dnp3-objects.c
|
dnp3: fix off-by-one in array sizes
|
5 months ago |
|
app-layer-dnp3-objects.h
|
dnp3: fix off-by-one in array sizes
|
5 months ago |
|
app-layer-dnp3.c
|
dnp3: bound response reassembly
|
5 months ago |
|
app-layer-dnp3.h
|
dnp3: bounds reassembly
|
5 months ago |
|
app-layer-enip-common.c
|
app-layer: spelling
|
4 years ago |
|
app-layer-enip-common.h
|
enip: rename struct to fix spelling
|
4 years ago |
|
app-layer-enip.c
|
app-layer: remove APP_LAYER_PARSER_OPT_UNIDIR_TXS
|
4 years ago |
|
app-layer-enip.h
|
…
|
|
|
app-layer-events.c
|
rust: define AppLayerEventType only in rust
|
3 years ago |
|
app-layer-events.h
|
rust: define AppLayerEventType only in rust
|
3 years ago |
|
app-layer-expectation.c
|
app-layer: spelling
|
4 years ago |
|
app-layer-expectation.h
|
…
|
|
|
app-layer-frames.c
|
license: fixup file headers
|
4 years ago |
|
app-layer-frames.h
|
frames: do not only rely on FRAME_STREAM_ID
|
2 years ago |
|
app-layer-ftp.c
|
ftp: mark tx as updated when creating it
|
2 years ago |
|
app-layer-ftp.h
|
ftp: mark LF found per line
|
3 years ago |
|
app-layer-htp-body.c
|
…
|
|
|
app-layer-htp-body.h
|
…
|
|
|
app-layer-htp-file.c
|
http1: remove transactions from their list
|
3 years ago |
|
app-layer-htp-file.h
|
…
|
|
|
app-layer-htp-libhtp.c
|
misc: improve code documentation
|
3 years ago |
|
app-layer-htp-libhtp.h
|
misc: improve code documentation
|
3 years ago |
|
app-layer-htp-mem.c
|
app-layer: Set sc_errno upon error return
|
2 years ago |
|
app-layer-htp-mem.h
|
misc: improve code documentation
|
3 years ago |
|
app-layer-htp-range.c
|
util/hash: use randomized hash algorithm
|
2 years ago |
|
app-layer-htp-range.h
|
…
|
|
|
app-layer-htp-xff.c
|
output: use tx iterator for finding alert http xff
|
10 months ago |
|
app-layer-htp-xff.h
|
…
|
|
|
app-layer-htp.c
|
http1: marks tx as updated when setting an event
|
9 months ago |
|
app-layer-htp.h
|
http: have a headers limit
|
2 years ago |
|
app-layer-http2.c
|
http: htp_table_get_index does not return NULL
|
3 years ago |
|
app-layer-http2.h
|
…
|
|
|
app-layer-ike.c
|
detect: delay tx cleanup in some edge case
|
2 years ago |
|
app-layer-ike.h
|
…
|
|
|
app-layer-krb5.c
|
…
|
|
|
app-layer-krb5.h
|
…
|
|
|
app-layer-modbus.c
|
…
|
|
|
app-layer-modbus.h
|
…
|
|
|
app-layer-mqtt.c
|
…
|
|
|
app-layer-mqtt.h
|
…
|
|
|
app-layer-nfs-tcp.c
|
…
|
|
|
app-layer-nfs-tcp.h
|
…
|
|
|
app-layer-nfs-udp.c
|
…
|
|
|
app-layer-nfs-udp.h
|
…
|
|
|
app-layer-ntp.c
|
…
|
|
|
app-layer-ntp.h
|
…
|
|
|
app-layer-parser.c
|
exceptions: s/DEBUG/QA_SIMULATION build flag
|
7 months ago |
|
app-layer-parser.h
|
output: optimize loop for finding alert http xff
|
10 months ago |
|
app-layer-protos.c
|
app-layer: shorter code for proto string helpers
|
4 years ago |
|
app-layer-protos.h
|
app-layer: spelling
|
4 years ago |
|
app-layer-quic.c
|
…
|
|
|
app-layer-quic.h
|
all: remove unused literals
|
4 years ago |
|
app-layer-rdp.c
|
…
|
|
|
app-layer-rdp.h
|
all: remove unused literals
|
4 years ago |
|
app-layer-register.c
|
…
|
|
|
app-layer-register.h
|
…
|
|
|
app-layer-rfb.c
|
detect: delay tx cleanup in some edge case
|
2 years ago |
|
app-layer-rfb.h
|
…
|
|
|
app-layer-sip.c
|
…
|
|
|
app-layer-sip.h
|
…
|
|
|
app-layer-smb.c
|
detect: delay tx cleanup in some edge case
|
2 years ago |
|
app-layer-smb.h
|
misc: improve code documentation
|
3 years ago |
|
app-layer-smtp.c
|
app-layer: track modified/processed txs
|
2 years ago |
|
app-layer-smtp.h
|
smtp: avoid creating empty transaction
|
3 years ago |
|
app-layer-snmp.c
|
…
|
|
|
app-layer-snmp.h
|
…
|
|
|
app-layer-ssh.c
|
…
|
|
|
app-layer-ssh.h
|
…
|
|
|
app-layer-ssl.c
|
app-layer: track modified/processed txs
|
2 years ago |
|
app-layer-ssl.h
|
ja4: implement for TLS and QUIC
|
2 years ago |
|
app-layer-tftp.c
|
…
|
|
|
app-layer-tftp.h
|
…
|
|
|
app-layer.c
|
exception-policy: add 'reject-both' option
|
11 months ago |
|
app-layer.h
|
misc: improve code documentation
|
3 years ago |
|
conf-yaml-loader.c
|
fuzz/conf: bail out on long sequence of scalars
|
12 months ago |
|
conf-yaml-loader.h
|
…
|
|
|
conf.c
|
conf: check if node value is Null
|
3 years ago |
|
conf.h
|
…
|
|
|
counters.c
|
decode/flow: add exception policy stats counters
|
1 year ago |
|
counters.h
|
output/stats: Handle stat names w/out scope
|
3 years ago |
|
datasets-ipv4.c
|
util/hash: use randomized hash algorithm
|
2 years ago |
|
datasets-ipv4.h
|
util/hash: use randomized hash algorithm
|
2 years ago |
|
datasets-ipv6.c
|
util/hash: use randomized hash algorithm
|
2 years ago |
|
datasets-ipv6.h
|
util/hash: use randomized hash algorithm
|
2 years ago |
|
datasets-md5.c
|
util/hash: use randomized hash algorithm
|
2 years ago |
|
datasets-md5.h
|
util/hash: use randomized hash algorithm
|
2 years ago |
|
datasets-reputation.h
|
…
|
|
|
datasets-sha256.c
|
util/hash: use randomized hash algorithm
|
2 years ago |
|
datasets-sha256.h
|
util/hash: use randomized hash algorithm
|
2 years ago |
|
datasets-string.c
|
datasets: fix compile warnings
|
10 months ago |
|
datasets-string.h
|
util/hash: use randomized hash algorithm
|
2 years ago |
|
datasets.c
|
datasets: fix set with ip sets
|
1 year ago |
|
datasets.h
|
detect/datasets: implement unset command
|
2 years ago |
|
decode-chdlc.c
|
…
|
|
|
decode-chdlc.h
|
…
|
|
|
decode-erspan.c
|
decode/vlan: Decode upto 3 layers of VLAN
|
3 years ago |
|
decode-erspan.h
|
…
|
|
|
decode-esp.c
|
…
|
|
|
decode-esp.h
|
…
|
|
|
decode-ethernet.c
|
…
|
|
|
decode-ethernet.h
|
decode: spelling
|
4 years ago |
|
decode-events.c
|
af-packet: add event for packets truncated by af-packet
|
2 years ago |
|
decode-events.h
|
af-packet: add event for packets truncated by af-packet
|
2 years ago |
|
decode-geneve.c
|
decode: spelling
|
4 years ago |
|
decode-geneve.h
|
…
|
|
|
decode-gre.c
|
…
|
|
|
decode-gre.h
|
…
|
|
|
decode-icmpv4.c
|
…
|
|
|
decode-icmpv4.h
|
…
|
|
|
decode-icmpv6.c
|
decode: spelling
|
4 years ago |
|
decode-icmpv6.h
|
…
|
|
|
decode-ipv4.c
|
decode: add stats counters for ipv4/ipv6 over ipv4
|
1 year ago |
|
decode-ipv4.h
|
decode/ipv4: add missing ip-in-ip case handling
|
1 year ago |
|
decode-ipv6.c
|
decode/ipv6: set packet flow in ip-in-ip
|
1 year ago |
|
decode-ipv6.h
|
decode/ipv6: set packet flow in ip-in-ip
|
1 year ago |
|
decode-mpls.c
|
…
|
|
|
decode-mpls.h
|
…
|
|
|
decode-nsh.c
|
…
|
|
|
decode-nsh.h
|
…
|
|
|
decode-null.c
|
decode: spelling
|
4 years ago |
|
decode-ppp.c
|
decode/pppoe: CDPCP as a known protocol
|
1 year ago |
|
decode-ppp.h
|
decode/pppoe: CDPCP as a known protocol
|
1 year ago |
|
decode-pppoe.c
|
decode/pppoe: CDPCP as a known protocol
|
1 year ago |
|
decode-pppoe.h
|
…
|
|
|
decode-raw.c
|
…
|
|
|
decode-raw.h
|
…
|
|
|
decode-sctp.c
|
…
|
|
|
decode-sctp.h
|
…
|
|
|
decode-sll.c
|
…
|
|
|
decode-sll.h
|
…
|
|
|
decode-tcp.c
|
decode/tcp: count urg flag
|
2 years ago |
|
decode-tcp.h
|
…
|
|
|
decode-template.c
|
…
|
|
|
decode-template.h
|
decode: spelling
|
4 years ago |
|
decode-teredo.c
|
…
|
|
|
decode-teredo.h
|
…
|
|
|
decode-udp.c
|
…
|
|
|
decode-udp.h
|
…
|
|
|
decode-vlan.c
|
decode/vlan: Remove unused macros/functions
|
3 years ago |
|
decode-vlan.h
|
decode/vlan: Remove unused macros/functions
|
3 years ago |
|
decode-vntag.c
|
…
|
|
|
decode-vntag.h
|
…
|
|
|
decode-vxlan.c
|
…
|
|
|
decode-vxlan.h
|
…
|
|
|
decode.c
|
exception-policy: add 'reject-both' option
|
11 months ago |
|
decode.h
|
defrag: add exception policy memcap stats counters
|
1 year ago |
|
defrag-config.c
|
radix: Detect duplicate netblocks
|
3 years ago |
|
defrag-config.h
|
…
|
|
|
defrag-hash.c
|
defrag: check tracker/packet family in compare
|
5 months ago |
|
defrag-hash.h
|
defrag: add exception policy memcap stats counters
|
1 year ago |
|
defrag-queue.c
|
…
|
|
|
defrag-queue.h
|
…
|
|
|
defrag-timeout.c
|
…
|
|
|
defrag-timeout.h
|
all: remove unused literals
|
4 years ago |
|
defrag.c
|
defrag: add exception policy memcap stats counters
|
1 year ago |
|
defrag.h
|
defrag: fix wrong datalink being logged
|
3 years ago |
|
detect-app-layer-event.c
|
…
|
|
|
detect-app-layer-event.h
|
…
|
|
|
detect-app-layer-protocol.c
|
detect/app-layer-proto: fix prefilter check
|
2 years ago |
|
detect-app-layer-protocol.h
|
…
|
|
|
detect-asn1.c
|
…
|
|
|
detect-asn1.h
|
…
|
|
|
detect-base64-data.c
|
detect/base64_data: reset buffer offset
|
9 months ago |
|
detect-base64-data.h
|
…
|
|
|
detect-base64-decode.c
|
detect: limit base64_decode `bytes` to 64KiB
|
2 years ago |
|
detect-base64-decode.h
|
…
|
|
|
detect-bsize.c
|
detect/integers: harmonize parser return handling
|
2 years ago |
|
detect-bsize.h
|
all: remove unused literals
|
4 years ago |
|
detect-bypass.c
|
…
|
|
|
detect-bypass.h
|
…
|
|
|
detect-byte-extract.c
|
util/byte: adjust checks for integer parser return
|
1 year ago |
|
detect-byte-extract.h
|
…
|
|
|
detect-byte.c
|
…
|
|
|
detect-byte.h
|
…
|
|
|
detect-bytejump.c
|
detect/bytejump: don't reuse content flag
|
3 years ago |
|
detect-bytejump.h
|
detect/bytejump: don't reuse content flag
|
3 years ago |
|
detect-bytemath.c
|
detect/byte_math: Permit var name for bytes value
|
3 years ago |
|
detect-bytemath.h
|
detect/byte_math: Permit var name for bytes value
|
3 years ago |
|
detect-bytetest.c
|
detect/bytetest: prevent lto uninitialized error
|
1 year ago |
|
detect-bytetest.h
|
detect/byte_test: Allow nbytes value to be a variable
|
3 years ago |
|
detect-cipservice.c
|
util/byte: adjust checks for integer parser return
|
1 year ago |
|
detect-cipservice.h
|
…
|
|
|
detect-classtype.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-classtype.h
|
…
|
|
|
detect-config.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-config.h
|
…
|
|
|
detect-content.c
|
detect/content: don't leak replace memory
|
1 year ago |
|
detect-content.h
|
detect/content: cleanup nocase conversion
|
3 years ago |
|
detect-csum.c
|
detect/csum: test cleanups
|
4 years ago |
|
detect-csum.h
|
…
|
|
|
detect-datarep.c
|
…
|
|
|
detect-datarep.h
|
…
|
|
|
detect-dataset.c
|
datasets: fix path setup when load and save used with different paths
|
5 months ago |
|
detect-dataset.h
|
datasets: restrict scope of macro/enum
|
2 years ago |
|
detect-dce-iface.c
|
…
|
|
|
detect-dce-iface.h
|
…
|
|
|
detect-dce-opnum.c
|
…
|
|
|
detect-dce-opnum.h
|
…
|
|
|
detect-dce-stub-data.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-dce-stub-data.h
|
…
|
|
|
detect-depth.c
|
detect: spelling
|
4 years ago |
|
detect-depth.h
|
…
|
|
|
detect-detection-filter.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-detection-filter.h
|
…
|
|
|
detect-dhcp-leasetime.c
|
…
|
|
|
detect-dhcp-leasetime.h
|
…
|
|
|
detect-dhcp-rebinding-time.c
|
…
|
|
|
detect-dhcp-rebinding-time.h
|
…
|
|
|
detect-dhcp-renewal-time.c
|
…
|
|
|
detect-dhcp-renewal-time.h
|
…
|
|
|
detect-distance.c
|
…
|
|
|
detect-distance.h
|
…
|
|
|
detect-dnp3.c
|
util-byte: fix usage of util-byte integer parsers
|
1 year ago |
|
detect-dnp3.h
|
…
|
|
|
detect-dns-opcode.c
|
…
|
|
|
detect-dns-opcode.h
|
…
|
|
|
detect-dns-query.c
|
detect: spelling: DetectBufferMpmRegistry
|
4 years ago |
|
detect-dns-query.h
|
…
|
|
|
detect-dsize.c
|
detect/integers: harmonize parser return handling
|
2 years ago |
|
detect-dsize.h
|
…
|
|
|
detect-engine-address-ipv4.c
|
…
|
|
|
detect-engine-address-ipv4.h
|
…
|
|
|
detect-engine-address-ipv6.c
|
…
|
|
|
detect-engine-address-ipv6.h
|
…
|
|
|
detect-engine-address.c
|
detect-engine-address: initialize pointer in unit tests
|
1 year ago |
|
detect-engine-address.h
|
…
|
|
|
detect-engine-alert.c
|
exceptions: s/DEBUG/QA_SIMULATION build flag
|
7 months ago |
|
detect-engine-alert.h
|
…
|
|
|
detect-engine-analyzer.c
|
detect: set ACTION_ALERT for rules that should alert
|
2 years ago |
|
detect-engine-analyzer.h
|
detect/analysis: Move globals to engine ctx
|
3 years ago |
|
detect-engine-build.c
|
detect: fix decoder only events
|
2 years ago |
|
detect-engine-build.h
|
…
|
|
|
detect-engine-content-inspection.c
|
detect/content: account for distance variables
|
1 year ago |
|
detect-engine-content-inspection.h
|
…
|
|
|
detect-engine-dcepayload.c
|
…
|
|
|
detect-engine-dcepayload.h
|
…
|
|
|
detect-engine-enip.c
|
detect: spelling
|
4 years ago |
|
detect-engine-enip.h
|
…
|
|
|
detect-engine-event.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-engine-event.h
|
…
|
|
|
detect-engine-file.c
|
detect/file: Remove centralized proto definition
|
3 years ago |
|
detect-engine-file.h
|
detect/file: Remove centralized proto definition
|
3 years ago |
|
detect-engine-frame.c
|
detect: spelling: DetectBufferMpmRegistry
|
4 years ago |
|
detect-engine-frame.h
|
detect: spelling: DetectBufferMpmRegistry
|
4 years ago |
|
detect-engine-iponly.c
|
detect/iponly: use flow first flags
|
1 year ago |
|
detect-engine-iponly.h
|
…
|
|
|
detect-engine-loader.c
|
multi-tenant: fix loader dead lock
|
3 years ago |
|
detect-engine-loader.h
|
multi-tenant: fix loader dead lock
|
3 years ago |
|
detect-engine-mpm.c
|
detect/mpm: don't test for impossible condition
|
3 years ago |
|
detect-engine-mpm.h
|
mpm: Use typedef for mpm registration
|
3 years ago |
|
detect-engine-payload.c
|
detect: spelling
|
4 years ago |
|
detect-engine-payload.h
|
…
|
|
|
detect-engine-port.c
|
detect/port: remove SigGroupHead* ops
|
2 years ago |
|
detect-engine-port.h
|
util/interval-tree: add utility fns
|
2 years ago |
|
detect-engine-prefilter-common.c
|
detect/integer: support missing modes for u8 prefilter
|
1 year ago |
|
detect-engine-prefilter-common.h
|
…
|
|
|
detect-engine-prefilter.c
|
detect: spelling: DetectBufferMpmRegistry
|
4 years ago |
|
detect-engine-prefilter.h
|
detect: spelling: DetectBufferMpmRegistry
|
4 years ago |
|
detect-engine-profile.c
|
…
|
|
|
detect-engine-profile.h
|
…
|
|
|
detect-engine-proto.c
|
detect: spelling
|
4 years ago |
|
detect-engine-proto.h
|
…
|
|
|
detect-engine-register.c
|
ja4: implement for TLS and QUIC
|
2 years ago |
|
detect-engine-register.h
|
detect: implement 'alert' keyword as a companion to 'noalert'
|
2 years ago |
|
detect-engine-siggroup.c
|
detect: optimize sig_cnt setting
|
2 years ago |
|
detect-engine-siggroup.h
|
detect/port: merge port ranges for same signatures
|
2 years ago |
|
detect-engine-sigorder.c
|
detect/flowing: apply clang format changes
|
2 years ago |
|
detect-engine-sigorder.h
|
detect/sigorder: remove unused struct fields
|
4 years ago |
|
detect-engine-state.c
|
detect: do not bug on tx data being NULL
|
2 years ago |
|
detect-engine-state.h
|
…
|
|
|
detect-engine-tag.c
|
detect: spelling
|
4 years ago |
|
detect-engine-tag.h
|
all: remove unused literals
|
4 years ago |
|
detect-engine-threshold.c
|
detect: spelling
|
4 years ago |
|
detect-engine-threshold.h
|
…
|
|
|
detect-engine-uint.c
|
…
|
|
|
detect-engine-uint.h
|
all: remove unused literals
|
4 years ago |
|
detect-engine.c
|
detect: non infinite default value for inspection-recursion-limit
|
2 years ago |
|
detect-engine.h
|
detect/transforms: write directly in inspect buffer
|
2 years ago |
|
detect-fast-pattern.c
|
util-byte: fix usage of util-byte integer parsers
|
1 year ago |
|
detect-fast-pattern.h
|
…
|
|
|
detect-file-data.c
|
doc: update file.data keyword documentation
|
3 years ago |
|
detect-file-data.h
|
detect: http_client_body for HTTP2
|
4 years ago |
|
detect-file-hash-common.c
|
…
|
|
|
detect-file-hash-common.h
|
…
|
|
|
detect-filemagic.c
|
detect/file: use util to turn keyword to nocase
|
3 years ago |
|
detect-filemagic.h
|
…
|
|
|
detect-filemd5.c
|
…
|
|
|
detect-filemd5.h
|
…
|
|
|
detect-filename.c
|
detect/file: use util to turn keyword to nocase
|
3 years ago |
|
detect-filename.h
|
…
|
|
|
detect-filesha1.c
|
…
|
|
|
detect-filesha1.h
|
…
|
|
|
detect-filesha256.c
|
…
|
|
|
detect-filesha256.h
|
…
|
|
|
detect-filesize.c
|
detect/integers: harmonize parser return handling
|
2 years ago |
|
detect-filesize.h
|
…
|
|
|
detect-filestore.c
|
detect: do not bug on tx data being NULL
|
2 years ago |
|
detect-filestore.h
|
…
|
|
|
detect-flow-age.c
|
…
|
|
|
detect-flow-age.h
|
…
|
|
|
detect-flow.c
|
detect/flow: fix DETECT_FLOW_FLAG_ESTABLISHED check
|
3 years ago |
|
detect-flow.h
|
…
|
|
|
detect-flowbits.c
|
detect/iponly: use flow first flags
|
1 year ago |
|
detect-flowbits.h
|
detect/flowbits: remove DETECT_FLOWBITS_CMD_NOALERT
|
2 years ago |
|
detect-flowint.c
|
detect/flowing: apply clang format changes
|
2 years ago |
|
detect-flowint.h
|
flowint: add isnotset support
|
2 years ago |
|
detect-flowvar.c
|
var-names: reimplement var name handling
|
3 years ago |
|
detect-flowvar.h
|
var-names: reimplement var name handling
|
3 years ago |
|
detect-fragbits.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-fragbits.h
|
…
|
|
|
detect-fragoffset.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-fragoffset.h
|
all: remove unused literals
|
4 years ago |
|
detect-frame.c
|
frames: make sure we use a lowercase buffer name
|
5 months ago |
|
detect-frame.h
|
…
|
|
|
detect-ftpbounce.c
|
detect: Fix FTP bounce detection IP address comparison
|
3 years ago |
|
detect-ftpbounce.h
|
…
|
|
|
detect-ftpdata.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-ftpdata.h
|
detect: spelling
|
4 years ago |
|
detect-geoip.c
|
detect: spelling
|
4 years ago |
|
detect-geoip.h
|
…
|
|
|
detect-gid.c
|
…
|
|
|
detect-gid.h
|
…
|
|
|
detect-hostbits.c
|
detect: set ACTION_ALERT for rules that should alert
|
2 years ago |
|
detect-hostbits.h
|
…
|
|
|
detect-http-accept-enc.c
|
…
|
|
|
detect-http-accept-enc.h
|
…
|
|
|
detect-http-accept-lang.c
|
…
|
|
|
detect-http-accept-lang.h
|
…
|
|
|
detect-http-accept.c
|
…
|
|
|
detect-http-accept.h
|
…
|
|
|
detect-http-client-body.c
|
detect: http_client_body for HTTP2
|
4 years ago |
|
detect-http-client-body.h
|
…
|
|
|
detect-http-connection.c
|
detect: use http.connection to client
|
4 years ago |
|
detect-http-connection.h
|
…
|
|
|
detect-http-content-len.c
|
…
|
|
|
detect-http-content-len.h
|
…
|
|
|
detect-http-content-type.c
|
…
|
|
|
detect-http-content-type.h
|
…
|
|
|
detect-http-cookie.c
|
detect/http2: fix progress for headers
|
6 months ago |
|
detect-http-cookie.h
|
all: remove unused literals
|
4 years ago |
|
detect-http-header-common.c
|
…
|
|
|
detect-http-header-common.h
|
…
|
|
|
detect-http-header-names.c
|
detect/http2: fix progress for headers
|
6 months ago |
|
detect-http-header-names.h
|
…
|
|
|
detect-http-header.c
|
detect/http2: fix progress for headers
|
6 months ago |
|
detect-http-header.h
|
http1: implement http.request_header
|
3 years ago |
|
detect-http-headers-stub.h
|
detect/http2: fix progress for headers
|
6 months ago |
|
detect-http-headers.c
|
…
|
|
|
detect-http-headers.h
|
…
|
|
|
detect-http-host.c
|
detect/http2: fix progress for headers
|
6 months ago |
|
detect-http-host.h
|
…
|
|
|
detect-http-location.c
|
…
|
|
|
detect-http-location.h
|
…
|
|
|
detect-http-method.c
|
detect/http2: fix progress for headers
|
6 months ago |
|
detect-http-method.h
|
…
|
|
|
detect-http-protocol.c
|
detect/http2: fix progress for headers
|
6 months ago |
|
detect-http-protocol.h
|
…
|
|
|
detect-http-raw-header.c
|
detect/http2: fix progress for headers
|
6 months ago |
|
detect-http-raw-header.h
|
…
|
|
|
detect-http-referer.c
|
…
|
|
|
detect-http-referer.h
|
…
|
|
|
detect-http-request-line.c
|
detect/http2: fix progress for headers
|
6 months ago |
|
detect-http-request-line.h
|
…
|
|
|
detect-http-response-line.c
|
detect: http_response_line for HTTP2
|
4 years ago |
|
detect-http-response-line.h
|
…
|
|
|
detect-http-server-body.c
|
detect/http-server-body: avoid FP on toserver direction
|
3 years ago |
|
detect-http-server-body.h
|
…
|
|
|
detect-http-server.c
|
…
|
|
|
detect-http-server.h
|
…
|
|
|
detect-http-start.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-http-start.h
|
…
|
|
|
detect-http-stat-code.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-http-stat-code.h
|
all: remove unused literals
|
4 years ago |
|
detect-http-stat-msg.c
|
detect: http_stat_msg supported for HTTP2
|
4 years ago |
|
detect-http-stat-msg.h
|
all: remove unused literals
|
4 years ago |
|
detect-http-ua.c
|
detect/http2: fix progress for headers
|
6 months ago |
|
detect-http-ua.h
|
…
|
|
|
detect-http-uri.c
|
detect/http2: fix progress for headers
|
6 months ago |
|
detect-http-uri.h
|
…
|
|
|
detect-http2.c
|
util-byte: fix usage of util-byte integer parsers
|
1 year ago |
|
detect-http2.h
|
…
|
|
|
detect-icmp-id.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-icmp-id.h
|
all: remove unused literals
|
4 years ago |
|
detect-icmp-seq.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-icmp-seq.h
|
all: remove unused literals
|
4 years ago |
|
detect-icmpv4hdr.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-icmpv4hdr.h
|
…
|
|
|
detect-icmpv6-mtu.c
|
…
|
|
|
detect-icmpv6-mtu.h
|
…
|
|
|
detect-icmpv6hdr.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-icmpv6hdr.h
|
…
|
|
|
detect-icode.c
|
detect/integers: harmonize parser return handling
|
2 years ago |
|
detect-icode.h
|
…
|
|
|
detect-id.c
|
util-byte: fix usage of util-byte integer parsers
|
1 year ago |
|
detect-id.h
|
…
|
|
|
detect-ike-chosen-sa.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-ike-chosen-sa.h
|
…
|
|
|
detect-ike-exch-type.c
|
…
|
|
|
detect-ike-exch-type.h
|
…
|
|
|
detect-ike-key-exchange-payload-length.c
|
…
|
|
|
detect-ike-key-exchange-payload-length.h
|
…
|
|
|
detect-ike-key-exchange-payload.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-ike-key-exchange-payload.h
|
…
|
|
|
detect-ike-nonce-payload-length.c
|
…
|
|
|
detect-ike-nonce-payload-length.h
|
…
|
|
|
detect-ike-nonce-payload.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-ike-nonce-payload.h
|
…
|
|
|
detect-ike-spi.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-ike-spi.h
|
…
|
|
|
detect-ike-vendor.c
|
detect: spelling: DetectBufferMpmRegistry
|
4 years ago |
|
detect-ike-vendor.h
|
…
|
|
|
detect-ipaddr.c
|
…
|
|
|
detect-ipaddr.h
|
…
|
|
|
detect-ipopts.c
|
detect/ipopts: Handle multiple ip options
|
3 years ago |
|
detect-ipopts.h
|
detect/analyzer: add more details for ipopts
|
3 years ago |
|
detect-ipproto.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-ipproto.h
|
…
|
|
|
detect-iprep.c
|
detect/iprep: implement isset and isnotset
|
2 years ago |
|
detect-iprep.h
|
…
|
|
|
detect-ipv4hdr.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-ipv4hdr.h
|
…
|
|
|
detect-ipv6hdr.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-ipv6hdr.h
|
…
|
|
|
detect-isdataat.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-isdataat.h
|
all: remove unused literals
|
4 years ago |
|
detect-itype.c
|
detect/integers: harmonize parser return handling
|
2 years ago |
|
detect-itype.h
|
…
|
|
|
detect-ja4-hash.c
|
output/ja4: Restrict ja4 hashes to alerts
|
2 years ago |
|
detect-ja4-hash.h
|
ja4: implement for TLS and QUIC
|
2 years ago |
|
detect-krb5-cname.c
|
detect: spelling: DetectBufferMpmRegistry
|
4 years ago |
|
detect-krb5-cname.h
|
…
|
|
|
detect-krb5-errcode.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-krb5-errcode.h
|
…
|
|
|
detect-krb5-msgtype.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-krb5-msgtype.h
|
…
|
|
|
detect-krb5-sname.c
|
detect: spelling: DetectBufferMpmRegistry
|
4 years ago |
|
detect-krb5-sname.h
|
…
|
|
|
detect-krb5-ticket-encryption.c
|
…
|
|
|
detect-krb5-ticket-encryption.h
|
…
|
|
|
detect-l3proto.c
|
detect: spelling
|
4 years ago |
|
detect-l3proto.h
|
…
|
|
|
detect-lua-extensions.c
|
…
|
|
|
detect-lua-extensions.h
|
…
|
|
|
detect-lua.c
|
var-names: reimplement var name handling
|
3 years ago |
|
detect-lua.h
|
…
|
|
|
detect-mark.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-mark.h
|
…
|
|
|
detect-metadata.c
|
detect: spelling
|
4 years ago |
|
detect-metadata.h
|
…
|
|
|
detect-modbus.c
|
…
|
|
|
detect-modbus.h
|
…
|
|
|
detect-mqtt-connack-sessionpresent.c
|
mqtt: double-check detection directions
|
2 years ago |
|
detect-mqtt-connack-sessionpresent.h
|
…
|
|
|
detect-mqtt-connect-clientid.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-mqtt-connect-clientid.h
|
…
|
|
|
detect-mqtt-connect-flags.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-mqtt-connect-flags.h
|
…
|
|
|
detect-mqtt-connect-password.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-mqtt-connect-password.h
|
…
|
|
|
detect-mqtt-connect-username.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-mqtt-connect-username.h
|
…
|
|
|
detect-mqtt-connect-willmessage.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-mqtt-connect-willmessage.h
|
…
|
|
|
detect-mqtt-connect-willtopic.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-mqtt-connect-willtopic.h
|
…
|
|
|
detect-mqtt-flags.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-mqtt-flags.h
|
…
|
|
|
detect-mqtt-protocol-version.c
|
…
|
|
|
detect-mqtt-protocol-version.h
|
…
|
|
|
detect-mqtt-publish-message.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-mqtt-publish-message.h
|
…
|
|
|
detect-mqtt-publish-topic.c
|
mqtt: double-check detection directions
|
2 years ago |
|
detect-mqtt-publish-topic.h
|
…
|
|
|
detect-mqtt-qos.c
|
util/byte: adjust checks for integer parser return
|
1 year ago |
|
detect-mqtt-qos.h
|
…
|
|
|
detect-mqtt-reason-code.c
|
util/byte: adjust checks for integer parser return
|
1 year ago |
|
detect-mqtt-reason-code.h
|
…
|
|
|
detect-mqtt-subscribe-topic.c
|
mqtt: double-check detection directions
|
2 years ago |
|
detect-mqtt-subscribe-topic.h
|
…
|
|
|
detect-mqtt-type.c
|
mqtt: double-check detection directions
|
2 years ago |
|
detect-mqtt-type.h
|
…
|
|
|
detect-mqtt-unsubscribe-topic.c
|
detect: spelling: DetectBufferMpmRegistry
|
4 years ago |
|
detect-mqtt-unsubscribe-topic.h
|
…
|
|
|
detect-msg.c
|
classification: spelling
|
4 years ago |
|
detect-msg.h
|
…
|
|
|
detect-nfs-procedure.c
|
detect/nfs: do not free a null pointer
|
2 years ago |
|
detect-nfs-procedure.h
|
…
|
|
|
detect-nfs-version.c
|
…
|
|
|
detect-nfs-version.h
|
…
|
|
|
detect-noalert.c
|
detect/noalert: point noalert/alert to new doc
|
2 years ago |
|
detect-noalert.h
|
…
|
|
|
detect-nocase.c
|
detect/content: cleanup nocase conversion
|
3 years ago |
|
detect-nocase.h
|
…
|
|
|
detect-offset.c
|
detect: spelling
|
4 years ago |
|
detect-offset.h
|
…
|
|
|
detect-parse.c
|
detect: set ACTION_ALERT for rules that should alert
|
2 years ago |
|
detect-parse.h
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-pcre.c
|
var-names: reimplement var name handling
|
3 years ago |
|
detect-pcre.h
|
fuzz: use lower pcre limits
|
9 months ago |
|
detect-pkt-data.c
|
…
|
|
|
detect-pkt-data.h
|
…
|
|
|
detect-pktvar.c
|
var-names: reimplement var name handling
|
3 years ago |
|
detect-pktvar.h
|
…
|
|
|
detect-prefilter.c
|
…
|
|
|
detect-prefilter.h
|
…
|
|
|
detect-priority.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-priority.h
|
…
|
|
|
detect-quic-cyu-hash.c
|
detect: spelling: DetectBufferMpmRegistry
|
4 years ago |
|
detect-quic-cyu-hash.h
|
…
|
|
|
detect-quic-cyu-string.c
|
detect: spelling: DetectBufferMpmRegistry
|
4 years ago |
|
detect-quic-cyu-string.h
|
…
|
|
|
detect-quic-sni.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-quic-sni.h
|
…
|
|
|
detect-quic-ua.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-quic-ua.h
|
…
|
|
|
detect-quic-version.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-quic-version.h
|
…
|
|
|
detect-rawbytes.c
|
…
|
|
|
detect-rawbytes.h
|
…
|
|
|
detect-reference.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-reference.h
|
…
|
|
|
detect-replace.c
|
detect: spelling
|
4 years ago |
|
detect-replace.h
|
…
|
|
|
detect-requires.c
|
requires: add option to ignore unknown requirements
|
2 years ago |
|
detect-requires.h
|
requires: add requires keyword
|
3 years ago |
|
detect-rev.c
|
…
|
|
|
detect-rev.h
|
…
|
|
|
detect-rfb-name.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-rfb-name.h
|
…
|
|
|
detect-rfb-secresult.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-rfb-secresult.h
|
…
|
|
|
detect-rfb-sectype.c
|
detect/integers: harmonize parser return handling
|
2 years ago |
|
detect-rfb-sectype.h
|
…
|
|
|
detect-rpc.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-rpc.h
|
all: remove unused literals
|
4 years ago |
|
detect-sameip.c
|
…
|
|
|
detect-sameip.h
|
…
|
|
|
detect-sid.c
|
…
|
|
|
detect-sid.h
|
…
|
|
|
detect-sip-method.c
|
detect: support multi buffer matching
|
4 years ago |
|
detect-sip-method.h
|
…
|
|
|
detect-sip-protocol.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-sip-protocol.h
|
…
|
|
|
detect-sip-request-line.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-sip-request-line.h
|
…
|
|
|
detect-sip-response-line.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-sip-response-line.h
|
…
|
|
|
detect-sip-stat-code.c
|
detect/sip.stat_code: Correct sticky buffer name
|
2 years ago |
|
detect-sip-stat-code.h
|
…
|
|
|
detect-sip-stat-msg.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-sip-stat-msg.h
|
…
|
|
|
detect-sip-uri.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-sip-uri.h
|
…
|
|
|
detect-smb-ntlmssp.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-smb-ntlmssp.h
|
…
|
|
|
detect-smb-share.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-smb-share.h
|
…
|
|
|
detect-snmp-community.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-snmp-community.h
|
…
|
|
|
detect-snmp-pdu_type.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-snmp-pdu_type.h
|
…
|
|
|
detect-snmp-usm.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-snmp-usm.h
|
…
|
|
|
detect-snmp-version.c
|
detect/snmp: do not bother to free a null pointer
|
2 years ago |
|
detect-snmp-version.h
|
…
|
|
|
detect-ssh-hassh-server-string.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-ssh-hassh-server-string.h
|
…
|
|
|
detect-ssh-hassh-server.c
|
detect: spelling
|
4 years ago |
|
detect-ssh-hassh-server.h
|
…
|
|
|
detect-ssh-hassh-string.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-ssh-hassh-string.h
|
…
|
|
|
detect-ssh-hassh.c
|
detect: spelling
|
4 years ago |
|
detect-ssh-hassh.h
|
…
|
|
|
detect-ssh-proto-version.c
|
detect-ssh-proto-version: use FAIL macros in tests
|
3 years ago |
|
detect-ssh-proto-version.h
|
…
|
|
|
detect-ssh-proto.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-ssh-proto.h
|
…
|
|
|
detect-ssh-software-version.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-ssh-software-version.h
|
…
|
|
|
detect-ssh-software.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-ssh-software.h
|
…
|
|
|
detect-ssl-state.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-ssl-state.h
|
detect: spelling
|
4 years ago |
|
detect-ssl-version.c
|
detect/ssl: properly handle negation in ssl_version keyword
|
11 months ago |
|
detect-ssl-version.h
|
detect/ssl: properly handle negation in ssl_version keyword
|
11 months ago |
|
detect-stream_size.c
|
detect/stream_size: fix prefiltering registration
|
3 years ago |
|
detect-stream_size.h
|
…
|
|
|
detect-tag.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-tag.h
|
all: remove unused literals
|
4 years ago |
|
detect-target.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-target.h
|
…
|
|
|
detect-tcp-ack.c
|
…
|
|
|
detect-tcp-ack.h
|
…
|
|
|
detect-tcp-flags.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-tcp-flags.h
|
detect: spelling
|
4 years ago |
|
detect-tcp-seq.c
|
…
|
|
|
detect-tcp-seq.h
|
…
|
|
|
detect-tcp-window.c
|
detect-tcp-window: Convert unittests to new FAIL/PASS API
|
3 years ago |
|
detect-tcp-window.h
|
all: remove unused literals
|
4 years ago |
|
detect-tcphdr.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-tcphdr.h
|
…
|
|
|
detect-tcpmss.c
|
…
|
|
|
detect-tcpmss.h
|
…
|
|
|
detect-template-rust-buffer.c
|
template: remove -rust references
|
2 years ago |
|
detect-template-rust-buffer.h
|
…
|
|
|
detect-template.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-template.h
|
…
|
|
|
detect-template2.c
|
…
|
|
|
detect-template2.h
|
…
|
|
|
detect-threshold.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-threshold.h
|
…
|
|
|
detect-tls-cert-fingerprint.c
|
detect: spelling
|
4 years ago |
|
detect-tls-cert-fingerprint.h
|
…
|
|
|
detect-tls-cert-issuer.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-tls-cert-issuer.h
|
…
|
|
|
detect-tls-cert-serial.c
|
detect: support multi buffer matching
|
4 years ago |
|
detect-tls-cert-serial.h
|
…
|
|
|
detect-tls-cert-subject.c
|
detect: register multi-buffer keywords
|
4 years ago |
|
detect-tls-cert-subject.h
|
…
|
|
|
detect-tls-cert-validity.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-tls-cert-validity.h
|
…
|
|
|
detect-tls-certs.c
|
detect/tls.certs: fix direction handling
|
3 years ago |
|
detect-tls-certs.h
|
…
|
|
|
detect-tls-ja3-hash.c
|
ja4: implement for TLS and QUIC
|
2 years ago |
|
detect-tls-ja3-hash.h
|
…
|
|
|
detect-tls-ja3-string.c
|
ja4: implement for TLS and QUIC
|
2 years ago |
|
detect-tls-ja3-string.h
|
…
|
|
|
detect-tls-ja3s-hash.c
|
ja4: implement for TLS and QUIC
|
2 years ago |
|
detect-tls-ja3s-hash.h
|
…
|
|
|
detect-tls-ja3s-string.c
|
ja4: implement for TLS and QUIC
|
2 years ago |
|
detect-tls-ja3s-string.h
|
…
|
|
|
detect-tls-random.c
|
tls/random: fix incorrect direction handling
|
3 years ago |
|
detect-tls-random.h
|
…
|
|
|
detect-tls-sni.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-tls-sni.h
|
…
|
|
|
detect-tls-version.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-tls-version.h
|
…
|
|
|
detect-tls.c
|
detect/tls.store: fix direction check
|
2 years ago |
|
detect-tls.h
|
detect/tls: minor fingerprint cleanup
|
3 years ago |
|
detect-tos.c
|
detect/pcre: Use local match variables
|
3 years ago |
|
detect-tos.h
|
…
|
|
|
detect-transform-casechange.c
|
detect/transforms: write directly in inspect buffer
|
2 years ago |
|
detect-transform-casechange.h
|
detect/transform: Add case changing transforms
|
3 years ago |
|
detect-transform-compress-whitespace.c
|
detect/transform/whitespace: init unittest variable
|
1 year ago |
|
detect-transform-compress-whitespace.h
|
…
|
|
|
detect-transform-dotprefix.c
|
detect/transform: handle overlapping dotprefix
|
2 years ago |
|
detect-transform-dotprefix.h
|
…
|
|
|
detect-transform-header-lowercase.c
|
detect/transforms: write directly in inspect buffer
|
2 years ago |
|
detect-transform-header-lowercase.h
|
detect: header_lowercase transform
|
3 years ago |
|
detect-transform-md5.c
|
…
|
|
|
detect-transform-md5.h
|
…
|
|
|
detect-transform-pcrexform.c
|
…
|
|
|
detect-transform-pcrexform.h
|
…
|
|
|
detect-transform-sha1.c
|
…
|
|
|
detect-transform-sha1.h
|
…
|
|
|
detect-transform-sha256.c
|
…
|
|
|
detect-transform-sha256.h
|
…
|
|
|
detect-transform-strip-pseudo-headers.c
|
detect/transforms: write directly in inspect buffer
|
2 years ago |
|
detect-transform-strip-pseudo-headers.h
|
detect: strip_pseudo_headers transform
|
3 years ago |
|
detect-transform-strip-whitespace.c
|
detect/transform/whitespace: init unittest variable
|
1 year ago |
|
detect-transform-strip-whitespace.h
|
…
|
|
|
detect-transform-urldecode.c
|
detect/transforms: write directly in inspect buffer
|
2 years ago |
|
detect-transform-urldecode.h
|
…
|
|
|
detect-transform-xor.c
|
detect/transforms: write directly in inspect buffer
|
2 years ago |
|
detect-transform-xor.h
|
…
|
|
|
detect-ttl.c
|
…
|
|
|
detect-ttl.h
|
…
|
|
|
detect-udphdr.c
|
detect: pass de_ctx to DetectBufferSetActiveList
|
4 years ago |
|
detect-udphdr.h
|
…
|
|
|
detect-uricontent.c
|
detect: spelling
|
4 years ago |
|
detect-uricontent.h
|
…
|
|
|
detect-urilen.c
|
detect: spelling
|
4 years ago |
|
detect-urilen.h
|
all: remove unused literals
|
4 years ago |
|
detect-within.c
|
…
|
|
|
detect-within.h
|
…
|
|
|
detect-xbits.c
|
detect: set ACTION_ALERT for rules that should alert
|
2 years ago |
|
detect-xbits.h
|
all: remove unused literals
|
4 years ago |
|
detect.c
|
detect/iponly: use flow first flags
|
1 year ago |
|
detect.h
|
detect: add padding to suppress scan-build warning
|
2 years ago |
|
device-storage.c
|
…
|
|
|
device-storage.h
|
all: remove unused literals
|
4 years ago |
|
feature.c
|
…
|
|
|
feature.h
|
ja4: implement for TLS and QUIC
|
2 years ago |
|
flow-bit.c
|
flow-bit: Convert unittests to new FAIL/PASS API
|
3 years ago |
|
flow-bit.h
|
…
|
|
|
flow-bypass.c
|
flow-bypass: Set bypass thread to running state
|
3 years ago |
|
flow-bypass.h
|
all: remove unused literals
|
4 years ago |
|
flow-hash.c
|
exceptions: s/DEBUG/QA_SIMULATION build flag
|
7 months ago |
|
flow-hash.h
|
flow: make FlowGetExistingFlowFromHash static
|
3 years ago |
|
flow-manager.c
|
flow-manager: move time check after RUNNNING state change
|
1 year ago |
|
flow-manager.h
|
…
|
|
|
flow-private.h
|
all: remove unused literals
|
4 years ago |
|
flow-queue.c
|
…
|
|
|
flow-queue.h
|
all: remove unused literals
|
4 years ago |
|
flow-spare-pool.c
|
flow: spare pool return optimization
|
3 years ago |
|
flow-spare-pool.h
|
…
|
|
|
flow-storage.c
|
…
|
|
|
flow-storage.h
|
…
|
|
|
flow-timeout.c
|
tcp: fix 'broken ack' on flow timeout
|
2 years ago |
|
flow-timeout.h
|
all: remove unused literals
|
4 years ago |
|
flow-util.c
|
flow: fix time handling for non-TCP
|
1 year ago |
|
flow-util.h
|
flow: fix time handling for non-TCP
|
1 year ago |
|
flow-var.c
|
flow/var: Release key storage
|
2 years ago |
|
flow-var.h
|
…
|
|
|
flow-worker.c
|
detect: flush when setting no_inspection
|
3 years ago |
|
flow-worker.h
|
…
|
|
|
flow.c
|
flow: swap MACs when flow direction is swapped
|
10 months ago |
|
flow.h
|
detect/iponly: use flow first flags
|
1 year ago |
|
host-bit.c
|
…
|
|
|
host-bit.h
|
…
|
|
|
host-queue.c
|
…
|
|
|
host-queue.h
|
…
|
|
|
host-storage.c
|
…
|
|
|
host-storage.h
|
…
|
|
|
host-timeout.c
|
host/iprep: run all timeout logic
|
3 years ago |
|
host-timeout.h
|
…
|
|
|
host.c
|
host: spelling
|
4 years ago |
|
host.h
|
…
|
|
|
interval-tree.h
|
interval-tree: add augmentation fns to the tree
|
2 years ago |
|
ippair-bit.c
|
…
|
|
|
ippair-bit.h
|
…
|
|
|
ippair-queue.c
|
…
|
|
|
ippair-queue.h
|
…
|
|
|
ippair-storage.c
|
…
|
|
|
ippair-storage.h
|
…
|
|
|
ippair-timeout.c
|
…
|
|
|
ippair-timeout.h
|
…
|
|
|
ippair.c
|
ippair: spelling
|
4 years ago |
|
ippair.h
|
all: remove unused literals
|
4 years ago |
|
log-cf-common.c
|
unittests: disable LogCustomFormatTest01 for MinGW
|
1 year ago |
|
log-cf-common.h
|
all: remove unused literals
|
4 years ago |
|
log-httplog.c
|
log: spelling
|
4 years ago |
|
log-httplog.h
|
all: remove unused literals
|
4 years ago |
|
log-pcap.c
|
pcap-log: use correct pkthdr size for limit enforcement
|
2 years ago |
|
log-pcap.h
|
…
|
|
|
log-stats.c
|
log/stats: allow longer counter names
|
1 year ago |
|
log-stats.h
|
…
|
|
|
log-tcp-data.c
|
log: spelling
|
4 years ago |
|
log-tcp-data.h
|
…
|
|
|
log-tlslog.c
|
…
|
|
|
log-tlslog.h
|
…
|
|
|
log-tlsstore.c
|
log: spelling
|
4 years ago |
|
log-tlsstore.h
|
…
|
|
|
main.c
|
…
|
|
|
output-eve-null.c
|
output/null: Add the null output device
|
10 months ago |
|
output-eve-null.h
|
output/null: Add the null output device
|
10 months ago |
|
output-eve-stream.c
|
src: various comment spelling fixes
|
4 years ago |
|
output-eve-stream.h
|
…
|
|
|
output-eve-syslog.c
|
…
|
|
|
output-eve-syslog.h
|
…
|
|
|
output-file.c
|
…
|
|
|
output-file.h
|
…
|
|
|
output-filedata.c
|
…
|
|
|
output-filedata.h
|
…
|
|
|
output-filestore.c
|
output/filestore: delay snprintf until needed
|
3 years ago |
|
output-filestore.h
|
all: remove unused literals
|
4 years ago |
|
output-flow.c
|
…
|
|
|
output-flow.h
|
…
|
|
|
output-json-alert.c
|
output/alert: fix alert index access for verdict
|
12 months ago |
|
output-json-alert.h
|
output/alert: add verdict field
|
3 years ago |
|
output-json-anomaly.c
|
…
|
|
|
output-json-anomaly.h
|
all: remove unused literals
|
4 years ago |
|
output-json-bittorrent-dht.c
|
…
|
|
|
output-json-bittorrent-dht.h
|
…
|
|
|
output-json-common.c
|
…
|
|
|
output-json-dcerpc.c
|
…
|
|
|
output-json-dcerpc.h
|
…
|
|
|
output-json-dhcp.c
|
…
|
|
|
output-json-dhcp.h
|
…
|
|
|
output-json-dnp3-objects.c
|
…
|
|
|
output-json-dnp3-objects.h
|
…
|
|
|
output-json-dnp3.c
|
eve/dnp3: remove noisy debug code
|
4 years ago |
|
output-json-dnp3.h
|
…
|
|
|
output-json-dns.c
|
eve/dns: make version required
|
2 years ago |
|
output-json-dns.h
|
output/dns: remove unused function parameters
|
3 years ago |
|
output-json-drop.c
|
output/drop: add verdict field
|
3 years ago |
|
output-json-drop.h
|
all: remove unused literals
|
4 years ago |
|
output-json-email-common.c
|
smtp: respect quotes for to and cc logging
|
2 years ago |
|
output-json-email-common.h
|
…
|
|
|
output-json-file.c
|
output: add storing boolean for files
|
3 years ago |
|
output-json-file.h
|
…
|
|
|
output-json-flow.c
|
flow/output: make exception policy logging optional
|
1 year ago |
|
output-json-flow.h
|
…
|
|
|
output-json-frame.c
|
output/jsonbuilder: helper function SCJbSetPrintAsciiString
|
12 months ago |
|
output-json-frame.h
|
eve/frame: improve frame payload logging
|
2 years ago |
|
output-json-ftp.c
|
output/ftp: remove unused function parameters
|
3 years ago |
|
output-json-ftp.h
|
…
|
|
|
output-json-http.c
|
output/http: log content-type like other headers
|
12 months ago |
|
output-json-http.h
|
…
|
|
|
output-json-http2.c
|
…
|
|
|
output-json-http2.h
|
…
|
|
|
output-json-ike.c
|
…
|
|
|
output-json-ike.h
|
…
|
|
|
output-json-krb5.c
|
output/krb5: remove unused function parameters
|
3 years ago |
|
output-json-krb5.h
|
…
|
|
|
output-json-metadata.c
|
…
|
|
|
output-json-metadata.h
|
…
|
|
|
output-json-modbus.c
|
…
|
|
|
output-json-modbus.h
|
…
|
|
|
output-json-mqtt.c
|
output/mqtt: remove unused function parameters
|
3 years ago |
|
output-json-mqtt.h
|
…
|
|
|
output-json-netflow.c
|
eve: revert ethernet addresses when needed
|
2 years ago |
|
output-json-netflow.h
|
…
|
|
|
output-json-nfs.c
|
…
|
|
|
output-json-nfs.h
|
…
|
|
|
output-json-pgsql.c
|
pgsql: use new API style for extern C functions
|
2 years ago |
|
output-json-pgsql.h
|
output/json: add pgsql metadata logging to alerts
|
2 years ago |
|
output-json-quic.c
|
output/ja4: Log ja4 hashes iff configured
|
2 years ago |
|
output-json-quic.h
|
output/ja4: Restrict ja4 hashes to alerts
|
2 years ago |
|
output-json-rdp.c
|
…
|
|
|
output-json-rdp.h
|
…
|
|
|
output-json-rfb.c
|
output/rfb: remove unused function parameters
|
3 years ago |
|
output-json-rfb.h
|
…
|
|
|
output-json-sip.c
|
…
|
|
|
output-json-sip.h
|
…
|
|
|
output-json-smb.c
|
…
|
|
|
output-json-smb.h
|
…
|
|
|
output-json-smtp.c
|
output/email: use SCCalloc for OutputJsonEmailCtx
|
3 years ago |
|
output-json-smtp.h
|
…
|
|
|
output-json-snmp.c
|
output/snmp: log version from tx
|
3 years ago |
|
output-json-snmp.h
|
…
|
|
|
output-json-ssh.c
|
…
|
|
|
output-json-ssh.h
|
…
|
|
|
output-json-stats.c
|
decode/flow: add exception policy stats counters
|
1 year ago |
|
output-json-stats.h
|
stats: Add unittest for basic stats serialization
|
3 years ago |
|
output-json-template.c
|
scripts: fix setup app layer for output
|
4 years ago |
|
output-json-template.h
|
scripts: fix setup app layer for output
|
4 years ago |
|
output-json-tftp.c
|
…
|
|
|
output-json-tftp.h
|
…
|
|
|
output-json-tls.c
|
tls: do not break custom fields when enabling JA4
|
2 years ago |
|
output-json-tls.h
|
output/ja4: Log ja4 hashes iff configured
|
2 years ago |
|
output-json.c
|
output/null: Add the null output device
|
10 months ago |
|
output-json.h
|
output/json: check 5-tuple values prior to logging
|
2 years ago |
|
output-lua.c
|
output/lua: handle registration error
|
2 years ago |
|
output-lua.h
|
…
|
|
|
output-packet.c
|
…
|
|
|
output-packet.h
|
…
|
|
|
output-stats.c
|
…
|
|
|
output-stats.h
|
output/stats: Handle stat names w/out scope
|
3 years ago |
|
output-streaming.c
|
output/streaming: suppress noisy start up message
|
2 years ago |
|
output-streaming.h
|
…
|
|
|
output-tx.c
|
app-layer: track modified/processed txs
|
2 years ago |
|
output-tx.h
|
…
|
|
|
output.c
|
scripts: fix setup app layer for output
|
4 years ago |
|
output.h
|
…
|
|
|
packet-queue.c
|
packet/queue: debug validation for pkt src
|
4 years ago |
|
packet-queue.h
|
…
|
|
|
packet.c
|
detect: set ACTION_ALERT for rules that should alert
|
2 years ago |
|
packet.h
|
…
|
|
|
pkt-var.c
|
…
|
|
|
pkt-var.h
|
…
|
|
|
queue.h
|
queue: spelling
|
4 years ago |
|
reputation.c
|
util-byte: fix usage of util-byte integer parsers
|
1 year ago |
|
reputation.h
|
detect/iprep: allow 0 as a reputation value
|
3 years ago |
|
respond-reject-libnet11.c
|
respond/reject: fix IPv6 TCP resets
|
4 years ago |
|
respond-reject-libnet11.h
|
…
|
|
|
respond-reject.c
|
…
|
|
|
respond-reject.h
|
…
|
|
|
runmode-af-packet.c
|
af-packet: add disable-hwtimestamp option
|
10 months ago |
|
runmode-af-packet.h
|
…
|
|
|
runmode-af-xdp.c
|
threading: set min thread stack size; set it early
|
3 years ago |
|
runmode-af-xdp.h
|
…
|
|
|
runmode-dpdk.c
|
dpdk: use default iface-copy value if not specified
|
1 year ago |
|
runmode-dpdk.h
|
dpdk: add interrupt (power-saving) mode
|
3 years ago |
|
runmode-erf-dag.c
|
threading: set min thread stack size; set it early
|
3 years ago |
|
runmode-erf-dag.h
|
…
|
|
|
runmode-erf-file.c
|
threading: set min thread stack size; set it early
|
3 years ago |
|
runmode-erf-file.h
|
…
|
|
|
runmode-ipfw.c
|
threading: set min thread stack size; set it early
|
3 years ago |
|
runmode-ipfw.h
|
…
|
|
|
runmode-napatech.c
|
napatech: emit HBA deprecation only once
|
3 years ago |
|
runmode-napatech.h
|
…
|
|
|
runmode-netmap.c
|
capture: improve IDS + IPS check
|
3 years ago |
|
runmode-netmap.h
|
…
|
|
|
runmode-nflog.c
|
threading: set min thread stack size; set it early
|
3 years ago |
|
runmode-nflog.h
|
…
|
|
|
runmode-nfq.c
|
threading: set min thread stack size; set it early
|
3 years ago |
|
runmode-nfq.h
|
…
|
|
|
runmode-pcap-file.c
|
runmodes: remove obsolete references to pcap auto modes
|
3 years ago |
|
runmode-pcap-file.h
|
…
|
|
|
runmode-pcap.c
|
runmodes: remove obsolete references to pcap auto modes
|
3 years ago |
|
runmode-pcap.h
|
…
|
|
|
runmode-pfring.c
|
pfring: fix leak of configuration data and in single mode
|
3 years ago |
|
runmode-pfring.h
|
…
|
|
|
runmode-unittests.c
|
unittests: don't leak memory with --list-unittests
|
1 year ago |
|
runmode-unittests.h
|
…
|
|
|
runmode-unix-socket.c
|
unix-socket/hostbits: fix ipv6 address parsing
|
11 months ago |
|
runmode-unix-socket.h
|
multi-tenant: add reload-tenants command
|
3 years ago |
|
runmode-windivert.c
|
threading: set min thread stack size; set it early
|
3 years ago |
|
runmode-windivert.h
|
…
|
|
|
runmodes.c
|
ips: check for livedev.use-for-tracking
|
3 years ago |
|
runmodes.h
|
threading: set min thread stack size; set it early
|
3 years ago |
|
rust-context.c
|
…
|
|
|
rust-context.h
|
…
|
|
|
rust.h
|
rust: remove duplicate constants definitions in C
|
3 years ago |
|
source-af-packet.c
|
af-packet: add disable-hwtimestamp option
|
10 months ago |
|
source-af-packet.h
|
af-packet: add disable-hwtimestamp option
|
10 months ago |
|
source-af-xdp.c
|
src: various comment spelling fixes
|
4 years ago |
|
source-af-xdp.h
|
…
|
|
|
source-dpdk.c
|
dpdk: collect port stats before device stop
|
9 months ago |
|
source-dpdk.h
|
dpdk: replace TSC clock with GetTime (gettimeofday) function
|
2 years ago |
|
source-erf-dag.c
|
source/erf-dag: compiler warnings
|
3 years ago |
|
source-erf-dag.h
|
…
|
|
|
source-erf-file.c
|
endace: Fix source-dag timestamps
|
3 years ago |
|
source-erf-file.h
|
…
|
|
|
source-ipfw.c
|
threading: fix shutdown of IPS autofp modes
|
1 year ago |
|
source-ipfw.h
|
…
|
|
|
source-napatech.c
|
napatech: Fix packet timestamps
|
3 years ago |
|
source-napatech.h
|
…
|
|
|
source-netmap.c
|
netmap: Release lock to avoid deadlock
|
3 years ago |
|
source-netmap.h
|
…
|
|
|
source-nflog.c
|
capture: spelling
|
4 years ago |
|
source-nflog.h
|
…
|
|
|
source-nfq-prototypes.h
|
…
|
|
|
source-nfq.c
|
threading: fix shutdown of IPS autofp modes
|
1 year ago |
|
source-nfq.h
|
all: remove unused literals
|
4 years ago |
|
source-pcap-file-directory-helper.c
|
stat: add wrappers to isolate OS_WIN32 specifics
|
3 years ago |
|
source-pcap-file-directory-helper.h
|
…
|
|
|
source-pcap-file-helper.c
|
exceptions: s/DEBUG/QA_SIMULATION build flag
|
7 months ago |
|
source-pcap-file-helper.h
|
…
|
|
|
source-pcap-file.c
|
pcap/file: minor code cleanup
|
3 years ago |
|
source-pcap-file.h
|
…
|
|
|
source-pcap.c
|
util/ioctl: use LiveDevice to retrieve name
|
3 years ago |
|
source-pcap.h
|
…
|
|
|
source-pfring.c
|
pfring: fix leak of configuration data and in single mode
|
3 years ago |
|
source-pfring.h
|
bpf: refactor the BPF code and postpone querying of the engine mode
|
4 years ago |
|
source-windivert-prototypes.h
|
…
|
|
|
source-windivert.c
|
threading: fix shutdown of IPS autofp modes
|
1 year ago |
|
source-windivert.h
|
…
|
|
|
stream-tcp-cache.c
|
stream/cache: Return sessions to correct pool
|
3 years ago |
|
stream-tcp-cache.h
|
…
|
|
|
stream-tcp-inline.c
|
…
|
|
|
stream-tcp-inline.h
|
…
|
|
|
stream-tcp-list.c
|
stream: add TCP urgent handling options
|
2 years ago |
|
stream-tcp-list.h
|
…
|
|
|
stream-tcp-private.h
|
stream: improve SYN and SYN/ACK retransmission handling
|
1 year ago |
|
stream-tcp-reassemble.c
|
exceptions: s/DEBUG/QA_SIMULATION build flag
|
7 months ago |
|
stream-tcp-reassemble.h
|
stream/reassemble: add exception policy counters
|
1 year ago |
|
stream-tcp-sack.c
|
…
|
|
|
stream-tcp-sack.h
|
…
|
|
|
stream-tcp-util.c
|
stream: remove unused function argument
|
2 years ago |
|
stream-tcp-util.h
|
…
|
|
|
stream-tcp.c
|
exceptions: s/DEBUG/QA_SIMULATION build flag
|
7 months ago |
|
stream-tcp.h
|
flow/output: log triggered exception policies
|
1 year ago |
|
stream.c
|
…
|
|
|
stream.h
|
…
|
|
|
suricata-common.h
|
dpdk: add hugepage hint to lower the amount of reserved hugepages
|
3 years ago |
|
suricata-plugin.h
|
eve: remove some dead code
|
3 years ago |
|
suricata.c
|
build-scopes: add QA_SIMULATION mode
|
7 months ago |
|
suricata.h
|
flow: optionally use livedev for hash
|
3 years ago |
|
threads-debug.h
|
threading: spelling
|
4 years ago |
|
threads-profile.h
|
…
|
|
|
threads.c
|
threading: spelling
|
4 years ago |
|
threads.h
|
…
|
|
|
threadvars.h
|
threads: fix autofp shutdown race condition
|
1 year ago |
|
tm-modules.c
|
…
|
|
|
tm-modules.h
|
threading: fix shutdown of IPS autofp modes
|
1 year ago |
|
tm-queuehandlers.c
|
…
|
|
|
tm-queuehandlers.h
|
…
|
|
|
tm-queues.c
|
…
|
|
|
tm-queues.h
|
…
|
|
|
tm-threads-common.h
|
…
|
|
|
tm-threads.c
|
threading: fix shutdown of IPS autofp modes
|
1 year ago |
|
tm-threads.h
|
threading: fix shutdown of IPS autofp modes
|
1 year ago |
|
tmqh-flow.c
|
threading: spelling
|
4 years ago |
|
tmqh-flow.h
|
…
|
|
|
tmqh-packetpool.c
|
packetpool: signal waiter within lock
|
3 years ago |
|
tmqh-packetpool.h
|
packetpool: remove WaitForN logic as it is unused
|
3 years ago |
|
tmqh-simple.c
|
threads/mutex: Ensure mutex held before signaling
|
3 years ago |
|
tmqh-simple.h
|
…
|
|
|
tree.h
|
…
|
|
|
unix-manager.c
|
unix-socket: return after closing on too long
|
12 months ago |
|
unix-manager.h
|
…
|
|
|
util-action.c
|
detect: set ACTION_ALERT for rules that should alert
|
2 years ago |
|
util-action.h
|
…
|
|
|
util-affinity.c
|
affinity: harden config parsing
|
10 months ago |
|
util-affinity.h
|
dpdk: improve DPDK thread handling
|
3 years ago |
|
util-atomic.c
|
…
|
|
|
util-atomic.h
|
…
|
|
|
util-base64.c
|
util/base64: fix buffer overflow
|
3 years ago |
|
util-base64.h
|
util/mime: skip over any invalid char
|
3 years ago |
|
util-bloomfilter-counting.c
|
…
|
|
|
util-bloomfilter-counting.h
|
…
|
|
|
util-bloomfilter.c
|
…
|
|
|
util-bloomfilter.h
|
…
|
|
|
util-bpf.c
|
bpf: remove OpenBSD guards
|
3 years ago |
|
util-bpf.h
|
bpf: remove OpenBSD guards
|
3 years ago |
|
util-buffer.c
|
util-buffer: expand by multiples of 4k
|
2 years ago |
|
util-buffer.h
|
membuffer: annotate printf style function
|
2 years ago |
|
util-byte.c
|
util-byte: fix usage of util-byte integer parsers
|
1 year ago |
|
util-byte.h
|
…
|
|
|
util-checksum.c
|
util/misc: spelling
|
4 years ago |
|
util-checksum.h
|
…
|
|
|
util-cidr.c
|
src: various comment spelling fixes
|
4 years ago |
|
util-cidr.h
|
…
|
|
|
util-classification-config.c
|
classification: fix multi-tenant loading issues
|
3 years ago |
|
util-classification-config.h
|
classification: fix multi-tenant loading issues
|
3 years ago |
|
util-clock.h
|
all: remove unused literals
|
4 years ago |
|
util-conf.c
|
stat: add wrappers to isolate OS_WIN32 specifics
|
3 years ago |
|
util-conf.h
|
…
|
|
|
util-config.h
|
all: remove unused literals
|
4 years ago |
|
util-coredump-config.c
|
util/misc: spelling
|
4 years ago |
|
util-coredump-config.h
|
…
|
|
|
util-cpu.c
|
util/misc: spelling
|
4 years ago |
|
util-cpu.h
|
…
|
|
|
util-daemon.c
|
util/misc: spelling
|
4 years ago |
|
util-daemon.h
|
all: remove unused literals
|
4 years ago |
|
util-datalink.c
|
…
|
|
|
util-datalink.h
|
…
|
|
|
util-debug-filters.c
|
debug: spelling
|
4 years ago |
|
util-debug-filters.h
|
all: remove unused literals
|
4 years ago |
|
util-debug.c
|
output: fix long logline test
|
1 year ago |
|
util-debug.h
|
debug: spelling
|
4 years ago |
|
util-decode-mime.c
|
mime: retain some stateful data for quoted-printable
|
1 year ago |
|
util-decode-mime.h
|
mime: avoid quadratic complexity in MimeDecAddEntity
|
3 years ago |
|
util-detect.c
|
…
|
|
|
util-detect.h
|
…
|
|
|
util-device.c
|
device: don't crash on unix command 'iface-bypassed-stat'
|
2 years ago |
|
util-device.h
|
af-packet: fetch mtu info once
|
3 years ago |
|
util-dpdk-bonding.c
|
dpdk: supress a warning of the bond function
|
1 year ago |
|
util-dpdk-bonding.h
|
dpdk: add support for DPDK Bond PMD
|
3 years ago |
|
util-dpdk-i40e.c
|
dpdk: add support for DPDK Bond PMD
|
3 years ago |
|
util-dpdk-i40e.h
|
dpdk: refactor i40e RSS hash function
|
3 years ago |
|
util-dpdk-ice.c
|
dpdk: set ice PMD RSS key length to 52 bytes for all DPDK versions
|
2 years ago |
|
util-dpdk-ice.h
|
dpdk: support 52 byte long key on ice (E810) cards
|
3 years ago |
|
util-dpdk-ixgbe.c
|
…
|
|
|
util-dpdk-ixgbe.h
|
…
|
|
|
util-dpdk.c
|
dpdk: rework hugepage hints to use per-numa information
|
3 years ago |
|
util-dpdk.h
|
dpdk: rework hugepage hints to use per-numa information
|
3 years ago |
|
util-ebpf.c
|
flow: optionally use livedev for hash
|
3 years ago |
|
util-ebpf.h
|
decode/vlan: Decode upto 3 layers of VLAN
|
3 years ago |
|
util-enum.c
|
…
|
|
|
util-enum.h
|
…
|
|
|
util-error.c
|
errors: add SC_ENOENT error
|
3 years ago |
|
util-error.h
|
errors: add SC_ENOENT error
|
3 years ago |
|
util-exception-policy-types.h
|
exception-policy: add 'reject-both' option
|
11 months ago |
|
util-exception-policy.c
|
exceptions: s/DEBUG/QA_SIMULATION build flag
|
7 months ago |
|
util-exception-policy.h
|
exceptions: s/DEBUG/QA_SIMULATION build flag
|
7 months ago |
|
util-file-decompression.c
|
util/swf: move allocation from stack to heap
|
12 months ago |
|
util-file-decompression.h
|
…
|
|
|
util-file-swf-decompression.c
|
…
|
|
|
util-file-swf-decompression.h
|
file: spelling
|
4 years ago |
|
util-file.c
|
file: fix hash computation for small multipart files
|
11 months ago |
|
util-file.h
|
all: remove unused literals
|
4 years ago |
|
util-fix_checksum.c
|
…
|
|
|
util-fix_checksum.h
|
…
|
|
|
util-fmemopen.c
|
util/misc: spelling
|
4 years ago |
|
util-fmemopen.h
|
…
|
|
|
util-hash-lookup3.c
|
hash/lookup3: spelling
|
4 years ago |
|
util-hash-lookup3.h
|
…
|
|
|
util-hash-string.c
|
…
|
|
|
util-hash-string.h
|
…
|
|
|
util-hash.c
|
hash: spelling
|
4 years ago |
|
util-hash.h
|
…
|
|
|
util-hashlist.c
|
hash: spelling
|
4 years ago |
|
util-hashlist.h
|
all: remove unused literals
|
4 years ago |
|
util-host-info.c
|
host-info: remove pcre2_substring_list_free use
|
3 years ago |
|
util-host-info.h
|
…
|
|
|
util-host-os-info.c
|
…
|
|
|
util-host-os-info.h
|
…
|
|
|
util-hugepages.c
|
hugepages: run hugepage check only on DPDK runmode and on Linux
|
3 years ago |
|
util-hugepages.h
|
dpdk: rework hugepage hints to use per-numa information
|
3 years ago |
|
util-hyperscan.c
|
…
|
|
|
util-hyperscan.h
|
…
|
|
|
util-ioctl.c
|
af-packet: fetch mtu info once
|
3 years ago |
|
util-ioctl.h
|
util/ioctl: use LiveDevice to retrieve name
|
3 years ago |
|
util-ip.c
|
util/misc: spelling
|
4 years ago |
|
util-ip.h
|
…
|
|
|
util-ja3.c
|
ja3: make feature compile time configurable
|
2 years ago |
|
util-ja3.h
|
ja3: make feature compile time configurable
|
2 years ago |
|
util-ja4.h
|
ja4: implement for TLS and QUIC
|
2 years ago |
|
util-landlock.c
|
…
|
|
|
util-landlock.h
|
…
|
|
|
util-log-redis.c
|
redis: spelling
|
4 years ago |
|
util-log-redis.h
|
…
|
|
|
util-logopenfile.c
|
log/file: Ensure file ctx pointer is returned .
|
2 years ago |
|
util-logopenfile.h
|
eve: remove some dead code
|
3 years ago |
|
util-lua-common.c
|
…
|
|
|
util-lua-common.h
|
…
|
|
|
util-lua-dnp3-objects.c
|
…
|
|
|
util-lua-dnp3-objects.h
|
…
|
|
|
util-lua-dnp3.c
|
…
|
|
|
util-lua-dnp3.h
|
…
|
|
|
util-lua-dns.c
|
…
|
|
|
util-lua-dns.h
|
…
|
|
|
util-lua-hassh.c
|
…
|
|
|
util-lua-hassh.h
|
…
|
|
|
util-lua-http.c
|
…
|
|
|
util-lua-http.h
|
…
|
|
|
util-lua-ja3.c
|
…
|
|
|
util-lua-ja3.h
|
…
|
|
|
util-lua-smtp.c
|
src: various comment spelling fixes
|
4 years ago |
|
util-lua-smtp.h
|
…
|
|
|
util-lua-ssh.c
|
…
|
|
|
util-lua-ssh.h
|
…
|
|
|
util-lua-tls.c
|
tls/lua: add null checks
|
5 months ago |
|
util-lua-tls.h
|
…
|
|
|
util-lua.c
|
lua: remove luajit pushlstring workaround
|
12 months ago |
|
util-lua.h
|
util/lua: spelling
|
4 years ago |
|
util-luajit.c
|
util/lua: spelling
|
4 years ago |
|
util-luajit.h
|
…
|
|
|
util-macset.c
|
flow: swap MACs when flow direction is swapped
|
10 months ago |
|
util-macset.h
|
flow: swap MACs when flow direction is swapped
|
10 months ago |
|
util-magic.c
|
…
|
|
|
util-magic.h
|
…
|
|
|
util-mem.c
|
…
|
|
|
util-mem.h
|
util/misc: spelling
|
4 years ago |
|
util-memcmp.c
|
…
|
|
|
util-memcmp.h
|
…
|
|
|
util-memcpy.h
|
…
|
|
|
util-memrchr.c
|
…
|
|
|
util-memrchr.h
|
…
|
|
|
util-misc.c
|
parse/size: support IEEE 1541 size units
|
10 months ago |
|
util-misc.h
|
…
|
|
|
util-mpm-ac-bs.c
|
mpm/spm: spelling
|
4 years ago |
|
util-mpm-ac-bs.h
|
…
|
|
|
util-mpm-ac-ks-small.c
|
…
|
|
|
util-mpm-ac-ks.c
|
util/mpm: factorize code
|
1 year ago |
|
util-mpm-ac-ks.h
|
…
|
|
|
util-mpm-ac-queue.c
|
util/mpm: grow state queue on demand
|
1 year ago |
|
util-mpm-ac-queue.h
|
util/mpm: grow state queue on demand
|
1 year ago |
|
util-mpm-ac.c
|
util/mpm: factorize code
|
1 year ago |
|
util-mpm-ac.h
|
…
|
|
|
util-mpm-hs.c
|
mpm/hs: fix scan-build warning
|
4 years ago |
|
util-mpm-hs.h
|
…
|
|
|
util-mpm.c
|
…
|
|
|
util-mpm.h
|
all: remove unused literals
|
4 years ago |
|
util-napatech.c
|
napatech: remove superfluous log messages
|
3 years ago |
|
util-napatech.h
|
…
|
|
|
util-optimize.h
|
…
|
|
|
util-pages.c
|
…
|
|
|
util-pages.h
|
…
|
|
|
util-path.c
|
path: new funcs to merge paths
|
3 years ago |
|
util-path.h
|
path: new funcs to merge paths
|
3 years ago |
|
util-pidfile.c
|
…
|
|
|
util-pidfile.h
|
…
|
|
|
util-plugin.c
|
…
|
|
|
util-plugin.h
|
…
|
|
|
util-pool-thread.c
|
…
|
|
|
util-pool-thread.h
|
…
|
|
|
util-pool.c
|
src: checks to avoid divisions by zero
|
3 years ago |
|
util-pool.h
|
…
|
|
|
util-port-interval-tree.c
|
util/interval-tree: fix coverity warning
|
2 years ago |
|
util-port-interval-tree.h
|
util/interval-tree: add utility fns
|
2 years ago |
|
util-prefilter.c
|
…
|
|
|
util-prefilter.h
|
…
|
|
|
util-print.c
|
src: various comment spelling fixes
|
4 years ago |
|
util-print.h
|
…
|
|
|
util-privs.c
|
privs: refactor SCGetUser/GroupID to void functions
|
3 years ago |
|
util-privs.h
|
privs: refactor SCGetUser/GroupID to void functions
|
3 years ago |
|
util-profiling-keywords.c
|
profiling: allow absolute paths
|
2 years ago |
|
util-profiling-locks.c
|
…
|
|
|
util-profiling-locks.h
|
…
|
|
|
util-profiling-prefilter.c
|
profiling: allow absolute paths
|
2 years ago |
|
util-profiling-rulegroups.c
|
profiling: allow absolute paths
|
2 years ago |
|
util-profiling-rules.c
|
profiling: allow absolute paths
|
2 years ago |
|
util-profiling.c
|
profiling: Correct profiling data array size
|
2 years ago |
|
util-profiling.h
|
profiling/rules: Improve dynamic rule handling
|
2 years ago |
|
util-proto-name.c
|
…
|
|
|
util-proto-name.h
|
…
|
|
|
util-radix-tree.c
|
util/byte: adjust checks for integer parser return
|
1 year ago |
|
util-radix-tree.h
|
radix: Detect duplicate netblocks
|
3 years ago |
|
util-random.c
|
…
|
|
|
util-random.h
|
…
|
|
|
util-reference-config.c
|
reference: fix multi-tenant loading issues
|
3 years ago |
|
util-reference-config.h
|
reference: fix multi-tenant loading issues
|
3 years ago |
|
util-rohash.c
|
…
|
|
|
util-rohash.h
|
…
|
|
|
util-rule-vars.c
|
util/rule-vars: spelling
|
4 years ago |
|
util-rule-vars.h
|
…
|
|
|
util-runmodes.c
|
…
|
|
|
util-runmodes.h
|
…
|
|
|
util-running-modes.c
|
debug: fix list-x command line options with debug
|
3 years ago |
|
util-running-modes.h
|
…
|
|
|
util-signal.c
|
…
|
|
|
util-signal.h
|
…
|
|
|
util-spm-bm.c
|
mpm/spm: spelling
|
4 years ago |
|
util-spm-bm.h
|
mpm/spm: spelling
|
4 years ago |
|
util-spm-bs.c
|
mpm/spm: spelling
|
4 years ago |
|
util-spm-bs.h
|
…
|
|
|
util-spm-bs2bm.c
|
mpm/spm: spelling
|
4 years ago |
|
util-spm-bs2bm.h
|
…
|
|
|
util-spm-hs.c
|
util-spm-hs: add missing deallocator
|
9 months ago |
|
util-spm-hs.h
|
…
|
|
|
util-spm.c
|
spm: reduce spm_matcher size to uint8_t
|
3 years ago |
|
util-spm.h
|
spm: reduce spm_matcher size to uint8_t
|
3 years ago |
|
util-storage.c
|
…
|
|
|
util-storage.h
|
…
|
|
|
util-streaming-buffer.c
|
util/streaming-buffer: add extra safety check
|
2 years ago |
|
util-streaming-buffer.h
|
…
|
|
|
util-strlcatu.c
|
…
|
|
|
util-strlcpyu.c
|
…
|
|
|
util-strptime.c
|
…
|
|
|
util-sysfs.c
|
sysfs: fix minor compile warning
|
3 years ago |
|
util-sysfs.h
|
…
|
|
|
util-syslog.c
|
…
|
|
|
util-syslog.h
|
…
|
|
|
util-thash.c
|
datasets: allocates on the heap if string base64 is long
|
10 months ago |
|
util-thash.h
|
util/thash: fix formatting
|
2 years ago |
|
util-threshold-config.c
|
thresholds: fix unittest compile warning
|
11 months ago |
|
util-threshold-config.h
|
threshold: fix multi-tenant file parsing
|
3 years ago |
|
util-time.c
|
util/misc: spelling
|
4 years ago |
|
util-time.h
|
util/time: Improve usecs handling in time macros
|
3 years ago |
|
util-unittest-helper.c
|
flow: fix unittests for ThreadVars requirement
|
1 year ago |
|
util-unittest-helper.h
|
…
|
|
|
util-unittest.c
|
…
|
|
|
util-unittest.h
|
unittests: spelling
|
4 years ago |
|
util-validate.h
|
scan-build: treat as debug validate
|
4 years ago |
|
util-var-name.c
|
var-names: reimplement var name handling
|
3 years ago |
|
util-var-name.h
|
var-names: reimplement var name handling
|
3 years ago |
|
util-var.c
|
…
|
|
|
util-var.h
|
…
|
|
|
win32-misc.c
|
…
|
|
|
win32-misc.h
|
…
|
|
|
win32-service.c
|
…
|
|
|
win32-service.h
|
…
|
|
|
win32-syscall.c
|
…
|
|
|
win32-syscall.h
|
…
|
|
|
win32-syslog.h
|
…
|
|
