Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.

cybersecurityidsintrusion-detection-systemintrusion-prevention-systemipsnetwork-monitornetwork-monitoringnsmsecuritysuricatathreat-hunting

You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Eric Leblond a85dc9b0e2 Add support for replace keyword. ... This patch adds support for the replace keyword. It is used with content to change selected part of the payload. The major point with this patch is that having a replace keyword made necessary to avoid all stream level check because we need to access to the could-be-modified packet payload. One of the main difficulty is to handle complex signature. If there is other content check, we must do the substitution when we're sure all match are valid. The patch adds an attribute to the thread context variable to be able to deal with recursivity of the match function. Replace is only activated in IPS mode and apply only to raw match.		15 years ago
benches	Initial add of the files.	17 years ago
doc	Support for PF_RING versions where packet passed as a reference and version 4.7.1 where pfring_enable_ring now seems to be required.	15 years ago
libhtp	libhtp/m4 dir won't be created on CentOS 5.3 by autogen.sh, so work around that by having it in git	15 years ago
m4	Prelude plugin: add detection in configure script	17 years ago
qa	Profiling: add accounting for several detection phases.	15 years ago
rules	Add signature file for stream events.	15 years ago
src	Add support for replace keyword.	15 years ago
.gitignore	Import .gitignore file.	16 years ago
COPYING	Initial add of the files.	17 years ago
ChangeLog	Initial add of the files.	17 years ago
LICENSE	import of gplv2 LICENSE	17 years ago
Makefile.am	Add decoder-events to Makefile.am as well.	16 years ago
Makefile.cvs	Initial add of the files.	17 years ago
acsite.m4	Added C99 defs/macros to acsite.m4 for CentOS	17 years ago
autogen.sh	Add initial support for reading packets from a DAG card, we only support reading from a single stream at this time.	16 years ago
classification.config	Import of classification.config	17 years ago
configure.in	Update PCRE JIT code to support official JIT implementation in pcre-8.20-RC1.	15 years ago
depcomp	Update autojunk.sh + build update.	17 years ago
doxygen.cfg	more project name updates	17 years ago
install-sh	Update autojunk.sh + build update.	17 years ago
missing	Update autojunk.sh + build update.	17 years ago
mkinstalldirs	Update autojunk.sh + build update.	17 years ago
reference.config	Add the ET reference.config file as a default	16 years ago
suricata.yaml	Add reference to events sig files in suricata YAML config.	15 years ago