| .. |
|
tests
|
applayer: pass parameter to StateAlloc
|
5 years ago |
|
Makefile.am
|
decode/geneve: Add Geneve decoding functionality
|
5 years ago |
|
action-globals.h
|
rules: add config action
|
5 years ago |
|
alert-debuglog.c
|
…
|
|
|
alert-debuglog.h
|
…
|
|
|
alert-fastlog.c
|
log: Use updated SCProtoNameValid signature
|
5 years ago |
|
alert-fastlog.h
|
…
|
|
|
alert-prelude.c
|
http2: initial support
|
5 years ago |
|
alert-prelude.h
|
…
|
|
|
alert-syslog.c
|
log/syslog: Improve protocol output handling
|
5 years ago |
|
alert-syslog.h
|
…
|
|
|
app-layer-dcerpc-common.h
|
dcerpc: Replace C function calls with Rust
|
5 years ago |
|
app-layer-dcerpc-udp.c
|
applayer: pass parameter to StateAlloc
|
5 years ago |
|
app-layer-dcerpc-udp.h
|
dcerpc: Replace C function calls with Rust
|
5 years ago |
|
app-layer-dcerpc.c
|
dcerpc/tcp: implement trunc logic
|
5 years ago |
|
app-layer-dcerpc.h
|
dcerpc: Replace C function calls with Rust
|
5 years ago |
|
app-layer-detect-proto.c
|
protodetect: rerun probing parser if pattern matched
|
5 years ago |
|
app-layer-detect-proto.h
|
const: constify decoder, app-layer, detect funcs
|
6 years ago |
|
app-layer-dnp3-objects.c
|
…
|
|
|
app-layer-dnp3-objects.h
|
…
|
|
|
app-layer-dnp3.c
|
dnp3: reword warning message
|
5 years ago |
|
app-layer-dnp3.h
|
dnp3: support AppLayerTxData
|
5 years ago |
|
app-layer-enip-common.c
|
enip: fix compile warnings in gcc-8
|
6 years ago |
|
app-layer-enip-common.h
|
enip: use status for probing parser
|
5 years ago |
|
app-layer-enip.c
|
enip: set unidirection transaction flag
|
5 years ago |
|
app-layer-enip.h
|
…
|
|
|
app-layer-events.c
|
app-layer: Initial app layer logging
|
6 years ago |
|
app-layer-events.h
|
app-layer: Extend event container with progress
|
6 years ago |
|
app-layer-expectation.c
|
app-layer-expectation: update copyright date
|
5 years ago |
|
app-layer-expectation.h
|
app-layer-expectation: clean expectation at flow end
|
5 years ago |
|
app-layer-ftp.c
|
applayer: pass parameter to StateAlloc
|
5 years ago |
|
app-layer-ftp.h
|
ftp: support AppLayerTxData
|
5 years ago |
|
app-layer-htp-body.c
|
…
|
|
|
app-layer-htp-body.h
|
…
|
|
|
app-layer-htp-file.c
|
http/file: modernize unittests
|
6 years ago |
|
app-layer-htp-file.h
|
…
|
|
|
app-layer-htp-libhtp.c
|
…
|
|
|
app-layer-htp-libhtp.h
|
…
|
|
|
app-layer-htp-mem.c
|
atomics: remove useless SC_ATOMIC_DESTROY
|
5 years ago |
|
app-layer-htp-mem.h
|
atomics: remove useless SC_ATOMIC_DESTROY
|
5 years ago |
|
app-layer-htp-xff.c
|
…
|
|
|
app-layer-htp-xff.h
|
…
|
|
|
app-layer-htp.c
|
http: error check htp_list_size
|
5 years ago |
|
app-layer-htp.h
|
http: disables lzma by default for HTTP
|
5 years ago |
|
app-layer-http2.c
|
http2: mimic HTTP1 request from upgrade
|
5 years ago |
|
app-layer-http2.h
|
http2: mimic HTTP1 request from upgrade
|
5 years ago |
|
app-layer-ikev2.c
|
build: cbindgen
|
6 years ago |
|
app-layer-ikev2.h
|
ikev2: clean up c glue code
|
6 years ago |
|
app-layer-krb5.c
|
build: cbindgen
|
6 years ago |
|
app-layer-krb5.h
|
…
|
|
|
app-layer-modbus.c
|
applayer: pass parameter to StateAlloc
|
5 years ago |
|
app-layer-modbus.h
|
modbus: support AppLayerTxData
|
5 years ago |
|
app-layer-mqtt.c
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
app-layer-mqtt.h
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
app-layer-nbss.h
|
…
|
|
|
app-layer-nfs-tcp.c
|
applayer: pass parameter to StateAlloc
|
5 years ago |
|
app-layer-nfs-tcp.h
|
…
|
|
|
app-layer-nfs-udp.c
|
applayer: pass parameter to StateAlloc
|
5 years ago |
|
app-layer-nfs-udp.h
|
…
|
|
|
app-layer-ntp.c
|
build: cbindgen
|
6 years ago |
|
app-layer-ntp.h
|
…
|
|
|
app-layer-parser.c
|
app-layer: handle unidirectional transactions
|
5 years ago |
|
app-layer-parser.h
|
applayer: on protocol change, use previous state
|
5 years ago |
|
app-layer-protos.c
|
http2: initial support
|
5 years ago |
|
app-layer-protos.h
|
http2: initial support
|
5 years ago |
|
app-layer-rdp.c
|
build: cbindgen
|
6 years ago |
|
app-layer-rdp.h
|
protocol parser: rdp
|
6 years ago |
|
app-layer-register.c
|
applayer/rust: expose truncate callback
|
5 years ago |
|
app-layer-register.h
|
applayer/rust: expose truncate callback
|
5 years ago |
|
app-layer-rfb.c
|
add RFB parser
|
5 years ago |
|
app-layer-rfb.h
|
add RFB parser
|
5 years ago |
|
app-layer-sip.c
|
sip: minor cleanup
|
5 years ago |
|
app-layer-sip.h
|
sip: minor cleanup
|
5 years ago |
|
app-layer-smb.c
|
smb: support AppLayerTxData
|
5 years ago |
|
app-layer-smb.h
|
…
|
|
|
app-layer-smtp.c
|
applayer: pass parameter to StateAlloc
|
5 years ago |
|
app-layer-smtp.h
|
applayer: pass parameter to StateAlloc
|
5 years ago |
|
app-layer-snmp.c
|
build: cbindgen
|
6 years ago |
|
app-layer-snmp.h
|
Add SNMP (v1/v2c/v3) application layer
|
6 years ago |
|
app-layer-ssh.c
|
eve: add Hassh fields to SSH JSON logger and add ssh log condition
|
5 years ago |
|
app-layer-ssh.h
|
eve: add Hassh fields to SSH JSON logger and add ssh log condition
|
5 years ago |
|
app-layer-ssl.c
|
ssl: do not reuse struct session_id_length
|
5 years ago |
|
app-layer-ssl.h
|
ssl/tls: support AppLayerTxData
|
5 years ago |
|
app-layer-template-rust.c
|
app-layer-template: fix log typo
|
5 years ago |
|
app-layer-template-rust.h
|
…
|
|
|
app-layer-template.c
|
applayer: pass parameter to StateAlloc
|
5 years ago |
|
app-layer-template.h
|
template: support AppLayerTxData
|
5 years ago |
|
app-layer-tftp.c
|
applayer: pass parameter to StateAlloc
|
5 years ago |
|
app-layer-tftp.h
|
tftp: c glue code cleanup
|
6 years ago |
|
app-layer.c
|
applayer: fix a leak in protocol change
|
5 years ago |
|
app-layer.h
|
stream: fix midstream reverse flow handling
|
6 years ago |
|
conf-yaml-loader.c
|
src: use FatalError whenever possible
|
5 years ago |
|
conf-yaml-loader.h
|
…
|
|
|
conf.c
|
src: use FatalError whenever possible
|
5 years ago |
|
conf.h
|
suricata: --data-dir option
|
6 years ago |
|
counters.c
|
src: use FatalError whenever possible
|
5 years ago |
|
counters.h
|
stats: add global way to check if API is enabled
|
6 years ago |
|
datasets-md5.c
|
datasets: match on lists of data
|
6 years ago |
|
datasets-md5.h
|
datasets: match on lists of data
|
6 years ago |
|
datasets-reputation.h
|
datasets: match on lists of data
|
6 years ago |
|
datasets-sha256.c
|
datasets: match on lists of data
|
6 years ago |
|
datasets-sha256.h
|
datasets: match on lists of data
|
6 years ago |
|
datasets-string.c
|
dataset: fix string length handling in hash
|
6 years ago |
|
datasets-string.h
|
datasets: match on lists of data
|
6 years ago |
|
datasets.c
|
datasets: use default memcap
|
5 years ago |
|
datasets.h
|
datasets: allow memcap, hashsize be set via yaml or rule
|
5 years ago |
|
debug.h
|
…
|
|
|
decode-chdlc.c
|
decode/hdlc: initial support
|
5 years ago |
|
decode-chdlc.h
|
decode/hdlc: initial support
|
5 years ago |
|
decode-erspan.c
|
decode/erspan: Warn on ERSPAN Type I config
|
5 years ago |
|
decode-erspan.h
|
decode/erspan: Warn on ERSPAN Type I config
|
5 years ago |
|
decode-ethernet.c
|
decode: single network layer entrypoint
|
5 years ago |
|
decode-ethernet.h
|
…
|
|
|
decode-events.c
|
decode/vxlan: Modified/refactored VXLAN logic
|
5 years ago |
|
decode-events.h
|
decode/vxlan: Modified/refactored VXLAN logic
|
5 years ago |
|
decode-geneve.c
|
decode/geneve: Add Geneve decoding functionality
|
5 years ago |
|
decode-geneve.h
|
decode/geneve: Add Geneve decoding functionality
|
5 years ago |
|
decode-gre.c
|
decode: Fix typos/spelling
|
5 years ago |
|
decode-gre.h
|
…
|
|
|
decode-icmpv4.c
|
threading: change local packet queue logic
|
5 years ago |
|
decode-icmpv4.h
|
…
|
|
|
decode-icmpv6.c
|
threading: change local packet queue logic
|
5 years ago |
|
decode-icmpv6.h
|
detect: adds icmpv6.mtu keyword
|
5 years ago |
|
decode-ipv4.c
|
decode: cleanup packet properly on bad packets
|
5 years ago |
|
decode-ipv4.h
|
const: constify decoder, app-layer, detect funcs
|
6 years ago |
|
decode-ipv6.c
|
decode: cleanup packet properly on bad packets
|
5 years ago |
|
decode-ipv6.h
|
general: Convert _Bool to bool
|
5 years ago |
|
decode-mpls.c
|
threading: change local packet queue logic
|
5 years ago |
|
decode-mpls.h
|
…
|
|
|
decode-null.c
|
threading: change local packet queue logic
|
5 years ago |
|
decode-null.h
|
…
|
|
|
decode-ppp.c
|
threading: change local packet queue logic
|
5 years ago |
|
decode-ppp.h
|
…
|
|
|
decode-pppoe.c
|
threading: change local packet queue logic
|
5 years ago |
|
decode-pppoe.h
|
…
|
|
|
decode-raw.c
|
threading: change local packet queue logic
|
5 years ago |
|
decode-raw.h
|
…
|
|
|
decode-sctp.c
|
decode: cleanup packet properly on bad packets
|
5 years ago |
|
decode-sctp.h
|
…
|
|
|
decode-sll.c
|
decode: single network layer entrypoint
|
5 years ago |
|
decode-sll.h
|
…
|
|
|
decode-tcp.c
|
decode: cleanup packet properly on bad packets
|
5 years ago |
|
decode-tcp.h
|
general: Convert _Bool to bool
|
5 years ago |
|
decode-template.c
|
threading: change local packet queue logic
|
5 years ago |
|
decode-template.h
|
…
|
|
|
decode-teredo.c
|
decode/teredo: Modified/refactored Teredo logic
|
5 years ago |
|
decode-teredo.h
|
decode/teredo: implement port support
|
5 years ago |
|
decode-udp.c
|
decode/geneve: Add Geneve decoding functionality
|
5 years ago |
|
decode-udp.h
|
…
|
|
|
decode-vlan.c
|
decode: return bool network layer
|
5 years ago |
|
decode-vlan.h
|
…
|
|
|
decode-vxlan.c
|
decode/vxlan: Modified/refactored VXLAN logic
|
5 years ago |
|
decode-vxlan.h
|
decoder/vxlan: improvements and cleanups
|
6 years ago |
|
decode.c
|
flow/bypass: don't bypass on flow timeout pseudo packets
|
5 years ago |
|
decode.h
|
decode/geneve: Add Geneve decoding functionality
|
5 years ago |
|
defrag-config.c
|
src: use FatalError whenever possible
|
5 years ago |
|
defrag-config.h
|
…
|
|
|
defrag-hash.c
|
src: use FatalError whenever possible
|
5 years ago |
|
defrag-hash.h
|
defrag: fix use of globals
|
5 years ago |
|
defrag-queue.c
|
…
|
|
|
defrag-queue.h
|
…
|
|
|
defrag-timeout.c
|
…
|
|
|
defrag-timeout.h
|
…
|
|
|
defrag.c
|
defrag: fix pthread warning on OpenBSD
|
5 years ago |
|
defrag.h
|
threading: change local packet queue logic
|
5 years ago |
|
detect-app-layer-event.c
|
detect/app-layer-events: improve warnings/errors
|
5 years ago |
|
detect-app-layer-event.h
|
detect: Provide `de_ctx` to free functions
|
5 years ago |
|
detect-app-layer-protocol.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-app-layer-protocol.h
|
…
|
|
|
detect-asn1.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-asn1.h
|
detect/asn1: Update asn1 C files to use rust code
|
5 years ago |
|
detect-base64-data.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-base64-data.h
|
…
|
|
|
detect-base64-decode.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-base64-decode.h
|
const: constify decoder, app-layer, detect funcs
|
6 years ago |
|
detect-bsize.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-bsize.h
|
…
|
|
|
detect-bypass.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-bypass.h
|
…
|
|
|
detect-byte-extract.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-byte-extract.h
|
const: constify decoder, app-layer, detect funcs
|
6 years ago |
|
detect-byte.c
|
detect: Use byte-math to byte var handling func
|
5 years ago |
|
detect-byte.h
|
detect: Add utility module for byte var handling
|
5 years ago |
|
detect-bytejump.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-bytejump.h
|
detect/bsize: Use U16 bit macros
|
5 years ago |
|
detect-bytemath.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-bytemath.h
|
detect: Add byte_math detector
|
5 years ago |
|
detect-bytetest.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-bytetest.h
|
detect: byte_math support
|
5 years ago |
|
detect-cipservice.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-cipservice.h
|
…
|
|
|
detect-classtype.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-classtype.h
|
…
|
|
|
detect-config.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-config.h
|
detect/config: initial version
|
5 years ago |
|
detect-content.c
|
signature: checks for integer overflow in limits propagation
|
5 years ago |
|
detect-content.h
|
general: Correct typos
|
5 years ago |
|
detect-csum.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-csum.h
|
…
|
|
|
detect-datarep.c
|
detect: fix use of uninit memory in DetectDatarepParse
|
5 years ago |
|
detect-datarep.h
|
datasets: match on lists of data
|
6 years ago |
|
detect-dataset.c
|
datasets: allow memcap, hashsize be set via yaml or rule
|
5 years ago |
|
detect-dataset.h
|
datasets: match on lists of data
|
6 years ago |
|
detect-dce-iface.c
|
dcerpc: validate signature with dcerpc keywords
|
5 years ago |
|
detect-dce-iface.h
|
dcerpc: Replace C function calls with Rust
|
5 years ago |
|
detect-dce-opnum.c
|
dcerpc: validate signature with dcerpc keywords
|
5 years ago |
|
detect-dce-opnum.h
|
dcerpc: Replace C function calls with Rust
|
5 years ago |
|
detect-dce-stub-data.c
|
dcerpc: validate signature with dcerpc keywords
|
5 years ago |
|
detect-dce-stub-data.h
|
dcerpc: Replace C function calls with Rust
|
5 years ago |
|
detect-depth.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-depth.h
|
…
|
|
|
detect-detection-filter.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-detection-filter.h
|
…
|
|
|
detect-distance.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-distance.h
|
…
|
|
|
detect-dnp3.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-dnp3.h
|
…
|
|
|
detect-dns-opcode.c
|
detect: Provide `de_ctx` to free functions
|
5 years ago |
|
detect-dns-opcode.h
|
dns/detect: dns.opcode keyword
|
6 years ago |
|
detect-dns-query.c
|
detect/dns-query: Splice UT to rust
|
5 years ago |
|
detect-dns-query.h
|
dns: register parsers from Rust
|
5 years ago |
|
detect-dsize.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-dsize.h
|
…
|
|
|
detect-engine-address-ipv4.c
|
detect/address: dead code removal and style cleanups
|
5 years ago |
|
detect-engine-address-ipv4.h
|
detect/address: dead code removal and style cleanups
|
5 years ago |
|
detect-engine-address-ipv6.c
|
detect/address: dead code removal and style cleanups
|
5 years ago |
|
detect-engine-address-ipv6.h
|
detect/address: dead code removal and style cleanups
|
5 years ago |
|
detect-engine-address.c
|
general: Improve grammar in error messages
|
5 years ago |
|
detect-engine-address.h
|
detect/address: dead code removal and style cleanups
|
5 years ago |
|
detect-engine-alert.c
|
detect: remove Threadvars argument from API calls
|
6 years ago |
|
detect-engine-alert.h
|
…
|
|
|
detect-engine-analyzer.c
|
detect/analyzer: convert to jsonbuilder
|
5 years ago |
|
detect-engine-analyzer.h
|
detect/analyzer: remove HAVE_LIBJANSSON cpp guards
|
6 years ago |
|
detect-engine-build.c
|
detect/rules: Fix copy/paste error
|
5 years ago |
|
detect-engine-build.h
|
…
|
|
|
detect-engine-content-inspection.c
|
detect: byte_math support
|
5 years ago |
|
detect-engine-content-inspection.h
|
const: constify decoder, app-layer, detect funcs
|
6 years ago |
|
detect-engine-dcepayload.c
|
dcerpc: Replace C function calls with Rust
|
5 years ago |
|
detect-engine-dcepayload.h
|
…
|
|
|
detect-engine-dns.c
|
dns: register parsers from Rust
|
5 years ago |
|
detect-engine-dns.h
|
…
|
|
|
detect-engine-enip.c
|
…
|
|
|
detect-engine-enip.h
|
…
|
|
|
detect-engine-event.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-engine-event.h
|
…
|
|
|
detect-engine-file.c
|
app-layer/files: optimize GetFiles calls
|
5 years ago |
|
detect-engine-file.h
|
…
|
|
|
detect-engine-iponly.c
|
src: use FatalError whenever possible
|
5 years ago |
|
detect-engine-iponly.h
|
…
|
|
|
detect-engine-loader.c
|
atomics: change SC_ATOMIC_ADD to 'fetch_add'
|
5 years ago |
|
detect-engine-loader.h
|
…
|
|
|
detect-engine-modbus.c
|
modbus: make subfunction uint16_t
|
5 years ago |
|
detect-engine-modbus.h
|
…
|
|
|
detect-engine-mpm.c
|
detect/mpm: fix hs check
|
5 years ago |
|
detect-engine-mpm.h
|
detect: generic structures for mpm with lists
|
5 years ago |
|
detect-engine-payload.c
|
debug: make it easier to trace flush logic
|
6 years ago |
|
detect-engine-payload.h
|
…
|
|
|
detect-engine-port.c
|
general: Improve grammar in error messages
|
5 years ago |
|
detect-engine-port.h
|
detect/port: more cleanups
|
6 years ago |
|
detect-engine-prefilter-common.c
|
detect: extend PrefilterPacketHeaderValue to 16 bytes
|
5 years ago |
|
detect-engine-prefilter-common.h
|
detect: define generic PrefilterIsPrefilterableById
|
5 years ago |
|
detect-engine-prefilter.c
|
detect: introduce pkt mpm engines
|
6 years ago |
|
detect-engine-prefilter.h
|
detect: introduce pkt mpm engines
|
6 years ago |
|
detect-engine-profile.c
|
detect/profile: convert match dumps to jsonbuilder
|
5 years ago |
|
detect-engine-profile.h
|
…
|
|
|
detect-engine-proto.c
|
…
|
|
|
detect-engine-proto.h
|
…
|
|
|
detect-engine-register.c
|
http2: initial support
|
5 years ago |
|
detect-engine-register.h
|
http2: initial support
|
5 years ago |
|
detect-engine-siggroup.c
|
detect: introduce pkt mpm engines
|
6 years ago |
|
detect-engine-siggroup.h
|
…
|
|
|
detect-engine-sigorder.c
|
detect: checks for overflow when comparing signatures priorities
|
5 years ago |
|
detect-engine-sigorder.h
|
…
|
|
|
detect-engine-state.c
|
dns: register parsers from Rust
|
5 years ago |
|
detect-engine-state.h
|
detect: store detect flags in AppLayerTxData
|
5 years ago |
|
detect-engine-tag.c
|
unittests: check for flow memuse
|
5 years ago |
|
detect-engine-tag.h
|
…
|
|
|
detect-engine-threshold.c
|
src: use FatalError whenever possible
|
5 years ago |
|
detect-engine-threshold.h
|
detect/threshold: Add a common function to (re)allocate the by_rule threshold table.
|
5 years ago |
|
detect-engine-uint.c
|
detect-engine: initialize struct fields
|
5 years ago |
|
detect-engine-uint.h
|
detect: adds engine for u8 keywords
|
5 years ago |
|
detect-engine.c
|
datasets: reload static sets
|
5 years ago |
|
detect-engine.h
|
detect: Add transform validation api
|
5 years ago |
|
detect-fast-pattern.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-fast-pattern.h
|
…
|
|
|
detect-file-data.c
|
detect: Correct typo
|
5 years ago |
|
detect-file-data.h
|
…
|
|
|
detect-file-hash-common.c
|
file-hash-common: fix rule_file truncation
|
5 years ago |
|
detect-file-hash-common.h
|
detect: Provide `de_ctx` to free functions
|
5 years ago |
|
detect-fileext.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-fileext.h
|
…
|
|
|
detect-filemagic.c
|
http2: initial support
|
5 years ago |
|
detect-filemagic.h
|
magic: get rid of global lock
|
5 years ago |
|
detect-filemd5.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-filemd5.h
|
…
|
|
|
detect-filename.c
|
signature: checks protocol for file.name keyword
|
5 years ago |
|
detect-filename.h
|
…
|
|
|
detect-filesha1.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-filesha1.h
|
…
|
|
|
detect-filesha256.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-filesha256.h
|
…
|
|
|
detect-filesize.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-filesize.h
|
…
|
|
|
detect-filestore.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-filestore.h
|
…
|
|
|
detect-flow.c
|
detect/flow: test cleanup
|
5 years ago |
|
detect-flow.h
|
…
|
|
|
detect-flowbits.c
|
flowbits: convert flowbits dumping to json builder
|
5 years ago |
|
detect-flowbits.h
|
flowbits: Allow support for flowbit ORing
|
5 years ago |
|
detect-flowint.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-flowint.h
|
…
|
|
|
detect-flowvar.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-flowvar.h
|
detect: Provide `de_ctx` to free functions
|
5 years ago |
|
detect-fragbits.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-fragbits.h
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-fragoffset.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-fragoffset.h
|
…
|
|
|
detect-ftpbounce.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-ftpbounce.h
|
…
|
|
|
detect-ftpdata.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-ftpdata.h
|
…
|
|
|
detect-geoip.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-geoip.h
|
detect/geoip: migrate to GeoIP2 database format
|
6 years ago |
|
detect-gid.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-gid.h
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-hostbits.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-hostbits.h
|
…
|
|
|
detect-http-accept-enc.c
|
…
|
|
|
detect-http-accept-enc.h
|
…
|
|
|
detect-http-accept-lang.c
|
…
|
|
|
detect-http-accept-lang.h
|
…
|
|
|
detect-http-accept.c
|
…
|
|
|
detect-http-accept.h
|
…
|
|
|
detect-http-client-body.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-http-client-body.h
|
…
|
|
|
detect-http-connection.c
|
…
|
|
|
detect-http-connection.h
|
…
|
|
|
detect-http-content-len.c
|
…
|
|
|
detect-http-content-len.h
|
…
|
|
|
detect-http-content-type.c
|
…
|
|
|
detect-http-content-type.h
|
…
|
|
|
detect-http-cookie.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-http-cookie.h
|
…
|
|
|
detect-http-header-common.c
|
…
|
|
|
detect-http-header-common.h
|
…
|
|
|
detect-http-header-names.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-http-header-names.h
|
…
|
|
|
detect-http-header.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-http-header.h
|
…
|
|
|
detect-http-headers-stub.h
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-http-headers.c
|
…
|
|
|
detect-http-headers.h
|
…
|
|
|
detect-http-host.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-http-host.h
|
…
|
|
|
detect-http-location.c
|
…
|
|
|
detect-http-location.h
|
…
|
|
|
detect-http-method.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-http-method.h
|
…
|
|
|
detect-http-protocol.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-http-protocol.h
|
…
|
|
|
detect-http-raw-header.c
|
detect/http_raw_header: Correct type mismatch
|
5 years ago |
|
detect-http-raw-header.h
|
…
|
|
|
detect-http-referer.c
|
…
|
|
|
detect-http-referer.h
|
…
|
|
|
detect-http-request-line.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-http-request-line.h
|
…
|
|
|
detect-http-response-line.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-http-response-line.h
|
…
|
|
|
detect-http-server-body.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-http-server-body.h
|
…
|
|
|
detect-http-server.c
|
…
|
|
|
detect-http-server.h
|
…
|
|
|
detect-http-start.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-http-start.h
|
…
|
|
|
detect-http-stat-code.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-http-stat-code.h
|
…
|
|
|
detect-http-stat-msg.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-http-stat-msg.h
|
…
|
|
|
detect-http-ua.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-http-ua.h
|
…
|
|
|
detect-http-uri.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-http-uri.h
|
…
|
|
|
detect-http2.c
|
http2: initial support
|
5 years ago |
|
detect-http2.h
|
http2: initial support
|
5 years ago |
|
detect-icmp-id.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-icmp-id.h
|
…
|
|
|
detect-icmp-seq.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-icmp-seq.h
|
…
|
|
|
detect-icmpv6-mtu.c
|
detect: adds engine for u8 keywords
|
5 years ago |
|
detect-icmpv6-mtu.h
|
detect: adds icmpv6.mtu keyword
|
5 years ago |
|
detect-icmpv6hdr.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-icmpv6hdr.h
|
detect: adds icmpv6.hdr keyword
|
5 years ago |
|
detect-icode.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-icode.h
|
…
|
|
|
detect-id.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-id.h
|
…
|
|
|
detect-ipopts.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-ipopts.h
|
…
|
|
|
detect-ipproto.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-ipproto.h
|
detect: Provide `de_ctx` to free functions
|
5 years ago |
|
detect-iprep.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-iprep.h
|
…
|
|
|
detect-ipv4hdr.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-ipv4hdr.h
|
detect/ipv4: add ipv4.hdr sticky buffer
|
6 years ago |
|
detect-ipv6hdr.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-ipv6hdr.h
|
detect: add ipv6.hdr sticky buffer
|
6 years ago |
|
detect-isdataat.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-isdataat.h
|
detect: byte_math support
|
5 years ago |
|
detect-itype.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-itype.h
|
…
|
|
|
detect-krb5-cname.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-krb5-cname.h
|
…
|
|
|
detect-krb5-errcode.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-krb5-errcode.h
|
…
|
|
|
detect-krb5-msgtype.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-krb5-msgtype.h
|
…
|
|
|
detect-krb5-sname.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-krb5-sname.h
|
…
|
|
|
detect-l3proto.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-l3proto.h
|
…
|
|
|
detect-lua-extensions.c
|
lua: add functions to get hassh parameters
|
5 years ago |
|
detect-lua-extensions.h
|
…
|
|
|
detect-lua.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-lua.h
|
const: constify decoder, app-layer, detect funcs
|
6 years ago |
|
detect-mark.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-mark.h
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-metadata.c
|
eve/metadata: create preformatted json string at start up
|
5 years ago |
|
detect-metadata.h
|
eve/metadata: create preformatted json string at start up
|
5 years ago |
|
detect-modbus.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-modbus.h
|
modbus: align comments properly
|
5 years ago |
|
detect-mqtt-connack-sessionpresent.c
|
detect-mqtt: unify error handling in rule parsing
|
5 years ago |
|
detect-mqtt-connack-sessionpresent.h
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-connect-clientid.c
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-connect-clientid.h
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-connect-flags.c
|
detect-mqtt: unify error handling in rule parsing
|
5 years ago |
|
detect-mqtt-connect-flags.h
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-connect-password.c
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-connect-password.h
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-connect-username.c
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-connect-username.h
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-connect-willmessage.c
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-connect-willmessage.h
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-connect-willtopic.c
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-connect-willtopic.h
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-flags.c
|
detect-mqtt: unify error handling in rule parsing
|
5 years ago |
|
detect-mqtt-flags.h
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-protocol-version.c
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-protocol-version.h
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-publish-message.c
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-publish-message.h
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-publish-topic.c
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-publish-topic.h
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-qos.c
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-qos.h
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-reason-code.c
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-reason-code.h
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-subscribe-topic.c
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-subscribe-topic.h
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-type.c
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-type.h
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-unsubscribe-topic.c
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-mqtt-unsubscribe-topic.h
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
detect-msg.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-msg.h
|
…
|
|
|
detect-nfs-procedure.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-nfs-procedure.h
|
…
|
|
|
detect-nfs-version.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-nfs-version.h
|
…
|
|
|
detect-noalert.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-noalert.h
|
…
|
|
|
detect-nocase.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-nocase.h
|
…
|
|
|
detect-offset.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-offset.h
|
…
|
|
|
detect-parse.c
|
signature: checks protocol for file.name keyword
|
5 years ago |
|
detect-parse.h
|
detect: fail properly on invalid transform pcrexform
|
5 years ago |
|
detect-pcre.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-pcre.h
|
detect/pcre: Use the keyword context for JIT stack
|
5 years ago |
|
detect-pkt-data.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-pkt-data.h
|
…
|
|
|
detect-pktvar.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-pktvar.h
|
…
|
|
|
detect-prefilter.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-prefilter.h
|
…
|
|
|
detect-priority.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-priority.h
|
…
|
|
|
detect-rawbytes.c
|
…
|
|
|
detect-rawbytes.h
|
…
|
|
|
detect-reference.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-reference.h
|
detect/reference: code cleanups
|
6 years ago |
|
detect-replace.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-replace.h
|
…
|
|
|
detect-rev.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-rev.h
|
…
|
|
|
detect-rfb-name.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-rfb-name.h
|
add RFB parser
|
5 years ago |
|
detect-rfb-secresult.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-rfb-secresult.h
|
add RFB parser
|
5 years ago |
|
detect-rfb-sectype.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-rfb-sectype.h
|
add RFB parser
|
5 years ago |
|
detect-rpc.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-rpc.h
|
…
|
|
|
detect-sameip.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-sameip.h
|
…
|
|
|
detect-sid.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-sid.h
|
…
|
|
|
detect-sip-method.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-sip-method.h
|
detect/sip.method: add sticky buffer
|
6 years ago |
|
detect-sip-protocol.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-sip-protocol.h
|
detect/sip.protocol: add sticky buffer
|
6 years ago |
|
detect-sip-request-line.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-sip-request-line.h
|
detect/sip.request_line: add sticky buffer
|
6 years ago |
|
detect-sip-response-line.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-sip-response-line.h
|
detect/sip.response_line: add sticky buffer
|
6 years ago |
|
detect-sip-stat-code.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-sip-stat-code.h
|
detect/sip.stat_code: add sticky buffer
|
6 years ago |
|
detect-sip-stat-msg.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-sip-stat-msg.h
|
detect/sip.stat_msg: add sticky buffer
|
6 years ago |
|
detect-sip-uri.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-sip-uri.h
|
detect/sip.uri: add sticky buffer
|
6 years ago |
|
detect-smb-share.c
|
build: cbindgen
|
6 years ago |
|
detect-smb-share.h
|
…
|
|
|
detect-snmp-community.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-snmp-community.h
|
SNMP: add the "snmp.community" detection keyword
|
6 years ago |
|
detect-snmp-pdu_type.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-snmp-pdu_type.h
|
SNMP: add the "snmp.pdu_type" detection keyword
|
6 years ago |
|
detect-snmp-version.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-snmp-version.h
|
SNMP: add the "snmp.version" detection keyword
|
6 years ago |
|
detect-ssh-hassh-server-string.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-ssh-hassh-server-string.h
|
detect: add (mpm) hassh keywords
|
5 years ago |
|
detect-ssh-hassh-server.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-ssh-hassh-server.h
|
detect: add (mpm) hassh keywords
|
5 years ago |
|
detect-ssh-hassh-string.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-ssh-hassh-string.h
|
detect: add (mpm) hassh keywords
|
5 years ago |
|
detect-ssh-hassh.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-ssh-hassh.h
|
detect: add (mpm) hassh keywords
|
5 years ago |
|
detect-ssh-proto-version.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-ssh-proto-version.h
|
…
|
|
|
detect-ssh-proto.c
|
parse: move SSH parser from C to Rust
|
5 years ago |
|
detect-ssh-proto.h
|
…
|
|
|
detect-ssh-software-version.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-ssh-software-version.h
|
…
|
|
|
detect-ssh-software.c
|
parse: move SSH parser from C to Rust
|
5 years ago |
|
detect-ssh-software.h
|
…
|
|
|
detect-ssl-state.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-ssl-state.h
|
…
|
|
|
detect-ssl-version.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-ssl-version.h
|
…
|
|
|
detect-stream_size.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-stream_size.h
|
…
|
|
|
detect-tag.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-tag.h
|
detect: Provide `de_ctx` to free functions
|
5 years ago |
|
detect-target.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-target.h
|
…
|
|
|
detect-tcp-ack.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-tcp-ack.h
|
detect/tcp: rename tcp keyword files
|
6 years ago |
|
detect-tcp-flags.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-tcp-flags.h
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-tcp-seq.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-tcp-seq.h
|
detect/tcp: rename tcp keyword files
|
6 years ago |
|
detect-tcp-window.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-tcp-window.h
|
detect/tcp: rename tcp keyword files
|
6 years ago |
|
detect-tcphdr.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-tcphdr.h
|
detect: introduce pkt mpm engines
|
6 years ago |
|
detect-tcpmss.c
|
src: remove multiple uses of atoi
|
5 years ago |
|
detect-tcpmss.h
|
detect: add tcp.mss keyword
|
6 years ago |
|
detect-template-buffer.c
|
…
|
|
|
detect-template-buffer.h
|
…
|
|
|
detect-template-rust-buffer.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-template-rust-buffer.h
|
…
|
|
|
detect-template.c
|
src: remove multiple uses of atoi
|
5 years ago |
|
detect-template.h
|
…
|
|
|
detect-template2.c
|
src: remove multiple uses of atoi
|
5 years ago |
|
detect-template2.h
|
…
|
|
|
detect-threshold.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-threshold.h
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-tls-cert-fingerprint.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-tls-cert-fingerprint.h
|
…
|
|
|
detect-tls-cert-issuer.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-tls-cert-issuer.h
|
…
|
|
|
detect-tls-cert-serial.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-tls-cert-serial.h
|
…
|
|
|
detect-tls-cert-subject.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-tls-cert-subject.h
|
…
|
|
|
detect-tls-cert-validity.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-tls-cert-validity.h
|
…
|
|
|
detect-tls-certs.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-tls-certs.h
|
detect: add tls.certs keyword
|
6 years ago |
|
detect-tls-ja3-hash.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-tls-ja3-hash.h
|
…
|
|
|
detect-tls-ja3-string.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-tls-ja3-string.h
|
…
|
|
|
detect-tls-ja3s-hash.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-tls-ja3s-hash.h
|
detect: add (mpm) keyword ja3s.hash
|
6 years ago |
|
detect-tls-ja3s-string.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-tls-ja3s-string.h
|
detect: add (mpm) keyword ja3s.string
|
6 years ago |
|
detect-tls-sni.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-tls-sni.h
|
…
|
|
|
detect-tls-version.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-tls-version.h
|
…
|
|
|
detect-tls.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-tls.h
|
…
|
|
|
detect-tos.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-tos.h
|
…
|
|
|
detect-transform-compress-whitespace.c
|
detect/transform: Validator for compress-ws
|
5 years ago |
|
detect-transform-compress-whitespace.h
|
…
|
|
|
detect-transform-dotprefix.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-transform-dotprefix.h
|
detect/transform: add dotprefix keyword
|
6 years ago |
|
detect-transform-md5.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-transform-md5.h
|
…
|
|
|
detect-transform-pcrexform.c
|
detect: fail properly on invalid transform pcrexform
|
5 years ago |
|
detect-transform-pcrexform.h
|
detect/pcrexform: New transform: applies RE
|
5 years ago |
|
detect-transform-sha1.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-transform-sha1.h
|
…
|
|
|
detect-transform-sha256.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-transform-sha256.h
|
…
|
|
|
detect-transform-strip-whitespace.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-transform-strip-whitespace.h
|
…
|
|
|
detect-transform-urldecode.c
|
transform: adds url_decode keyword
|
5 years ago |
|
detect-transform-urldecode.h
|
transform: adds url_decode keyword
|
5 years ago |
|
detect-ttl.c
|
ttl: Make IPV4 TTL uint_8t
|
5 years ago |
|
detect-ttl.h
|
…
|
|
|
detect-udphdr.c
|
detect/keywords: dynamic version part of doc URL
|
5 years ago |
|
detect-udphdr.h
|
detect: introduce pkt mpm engines
|
6 years ago |
|
detect-uricontent.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-uricontent.h
|
…
|
|
|
detect-urilen.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-urilen.h
|
…
|
|
|
detect-within.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-within.h
|
…
|
|
|
detect-xbits.c
|
detect: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
detect-xbits.h
|
…
|
|
|
detect.c
|
app-layer: handle AppLayerTxData being NULL
|
5 years ago |
|
detect.h
|
dcerpc: validate signature with dcerpc keywords
|
5 years ago |
|
device-storage.c
|
…
|
|
|
device-storage.h
|
…
|
|
|
feature.c
|
detect/feature: Support --dump-features
|
5 years ago |
|
feature.h
|
detect/feature: Support --dump-features
|
5 years ago |
|
flow-bit.c
|
…
|
|
|
flow-bit.h
|
…
|
|
|
flow-bypass.c
|
fuzz: remove obsolete AFL code
|
5 years ago |
|
flow-bypass.h
|
bypass: fix wait time at exit
|
6 years ago |
|
flow-hash.c
|
flow: work around harmless coverity warnings
|
5 years ago |
|
flow-hash.h
|
flow: redesign of flow timeout handling
|
5 years ago |
|
flow-manager.c
|
flow: suppress Coverity FP
|
5 years ago |
|
flow-manager.h
|
flow: redesign of flow timeout handling
|
5 years ago |
|
flow-private.h
|
flow: redesign of flow timeout handling
|
5 years ago |
|
flow-queue.c
|
flow: redesign of flow timeout handling
|
5 years ago |
|
flow-queue.h
|
flow: redesign of flow timeout handling
|
5 years ago |
|
flow-spare-pool.c
|
flow/spare: implement pool shrinking
|
5 years ago |
|
flow-spare-pool.h
|
flow: redesign of flow timeout handling
|
5 years ago |
|
flow-storage.c
|
…
|
|
|
flow-storage.h
|
…
|
|
|
flow-timeout.c
|
flow: minor code cleanup
|
5 years ago |
|
flow-timeout.h
|
flow: minor code cleanup
|
5 years ago |
|
flow-util.c
|
flow: redesign of flow timeout handling
|
5 years ago |
|
flow-util.h
|
flow: redesign of flow timeout handling
|
5 years ago |
|
flow-var.c
|
…
|
|
|
flow-var.h
|
…
|
|
|
flow-worker.c
|
flow: redesign of flow timeout handling
|
5 years ago |
|
flow-worker.h
|
flow: redesign of flow timeout handling
|
5 years ago |
|
flow.c
|
stream: remove GAP flag from stream
|
5 years ago |
|
flow.h
|
flow: redesign of flow timeout handling
|
5 years ago |
|
host-bit.c
|
src: use FatalError whenever possible
|
5 years ago |
|
host-bit.h
|
…
|
|
|
host-queue.c
|
…
|
|
|
host-queue.h
|
…
|
|
|
host-storage.c
|
…
|
|
|
host-storage.h
|
…
|
|
|
host-timeout.c
|
…
|
|
|
host-timeout.h
|
…
|
|
|
host.c
|
src: use FatalError whenever possible
|
5 years ago |
|
host.h
|
host: fix global declarations
|
5 years ago |
|
ippair-bit.c
|
src: use FatalError whenever possible
|
5 years ago |
|
ippair-bit.h
|
…
|
|
|
ippair-queue.c
|
…
|
|
|
ippair-queue.h
|
…
|
|
|
ippair-storage.c
|
…
|
|
|
ippair-storage.h
|
…
|
|
|
ippair-timeout.c
|
…
|
|
|
ippair-timeout.h
|
…
|
|
|
ippair.c
|
src: use FatalError whenever possible
|
5 years ago |
|
ippair.h
|
ippair: fix global declarations
|
5 years ago |
|
log-cf-common.c
|
…
|
|
|
log-cf-common.h
|
…
|
|
|
log-httplog.c
|
…
|
|
|
log-httplog.h
|
…
|
|
|
log-pcap.c
|
src: use FatalError whenever possible
|
5 years ago |
|
log-pcap.h
|
…
|
|
|
log-stats.c
|
…
|
|
|
log-stats.h
|
…
|
|
|
log-tcp-data.c
|
…
|
|
|
log-tcp-data.h
|
…
|
|
|
log-tlslog.c
|
tls-log: restructure code for writing to buffer
|
6 years ago |
|
log-tlslog.h
|
…
|
|
|
log-tlsstore.c
|
atomics: change SC_ATOMIC_ADD to 'fetch_add'
|
5 years ago |
|
log-tlsstore.h
|
…
|
|
|
main.c
|
init: move main to a separate file
|
5 years ago |
|
output-file.c
|
magic: get rid of global lock
|
5 years ago |
|
output-file.h
|
…
|
|
|
output-filedata.c
|
magic: get rid of global lock
|
5 years ago |
|
output-filedata.h
|
…
|
|
|
output-filestore.c
|
filestore: Use proper string in error case
|
5 years ago |
|
output-filestore.h
|
…
|
|
|
output-flow.c
|
output/flow: fix deinit after incomplete init
|
5 years ago |
|
output-flow.h
|
…
|
|
|
output-json-alert.c
|
log/eve: Rename fileinfo alert object to files
|
5 years ago |
|
output-json-alert.h
|
alert/eve: convert to jsonbuilder
|
5 years ago |
|
output-json-anomaly.c
|
log/anomaly: Move metadata out of anomaly section
|
5 years ago |
|
output-json-anomaly.h
|
jansson: remove HAVE_LIBJANSSON guards
|
6 years ago |
|
output-json-common.c
|
output/json: Multi-threaded EVE logging support
|
5 years ago |
|
output-json-dcerpc.c
|
output/json: Multi-threaded EVE logging support
|
5 years ago |
|
output-json-dcerpc.h
|
logging: Add DCERPC logger
|
5 years ago |
|
output-json-dhcp.c
|
output/json: Multi-threaded EVE logging support
|
5 years ago |
|
output-json-dhcp.h
|
…
|
|
|
output-json-dnp3-objects.c
|
dnp3/eve: regenerator object logging code
|
5 years ago |
|
output-json-dnp3-objects.h
|
dnp3/eve: regenerator object logging code
|
5 years ago |
|
output-json-dnp3.c
|
output/json: Multi-threaded EVE logging support
|
5 years ago |
|
output-json-dnp3.h
|
dnp3/eve: convert to jsonbuilder (non generated code)
|
5 years ago |
|
output-json-dns.c
|
output: Remove unused output functions
|
5 years ago |
|
output-json-dns.h
|
dns/eve: convert to jsonbuilder
|
5 years ago |
|
output-json-drop.c
|
output: Remove unused output functions
|
5 years ago |
|
output-json-drop.h
|
…
|
|
|
output-json-email-common.c
|
jsonbuilder: fix build error
|
5 years ago |
|
output-json-email-common.h
|
output/json: Multi-threaded EVE logging support
|
5 years ago |
|
output-json-file.c
|
http2: initial support
|
5 years ago |
|
output-json-file.h
|
fileinfo-filestore/eve: convert to jsonbuilder
|
5 years ago |
|
output-json-flow.c
|
stream: remove GAP flag from stream
|
5 years ago |
|
output-json-flow.h
|
flow/eve: convert to jsonbuilder
|
5 years ago |
|
output-json-ftp.c
|
output/json: Multi-threaded EVE logging support
|
5 years ago |
|
output-json-ftp.h
|
eve/ftp: Log FTP transactions
|
6 years ago |
|
output-json-http.c
|
http/eve: use set_string_from_bytes where appropriate
|
5 years ago |
|
output-json-http.h
|
http/eve: remove jansson version of metadata logger
|
5 years ago |
|
output-json-http2.c
|
http2: log as http to abstract http and http2 a little
|
5 years ago |
|
output-json-http2.h
|
http2: initial support
|
5 years ago |
|
output-json-ikev2.c
|
output/json: Multi-threaded EVE logging support
|
5 years ago |
|
output-json-ikev2.h
|
…
|
|
|
output-json-krb5.c
|
output/json: Multi-threaded EVE logging support
|
5 years ago |
|
output-json-krb5.h
|
…
|
|
|
output-json-metadata.c
|
output: Remove unused output functions
|
5 years ago |
|
output-json-metadata.h
|
…
|
|
|
output-json-mqtt.c
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
output-json-mqtt.h
|
rust/mqtt: add MQTT parser
|
5 years ago |
|
output-json-netflow.c
|
output: Remove unused output functions
|
5 years ago |
|
output-json-netflow.h
|
…
|
|
|
output-json-nfs.c
|
output/json: Multi-threaded EVE logging support
|
5 years ago |
|
output-json-nfs.h
|
eve/nfs: switch output to jsonbuilder
|
5 years ago |
|
output-json-rdp.c
|
output/json: Multi-threaded EVE logging support
|
5 years ago |
|
output-json-rdp.h
|
protocol parser: rdp
|
6 years ago |
|
output-json-rfb.c
|
output/json: Multi-threaded EVE logging support
|
5 years ago |
|
output-json-rfb.h
|
rfb/eve: convert to jsonbuilder
|
5 years ago |
|
output-json-sip.c
|
output/json: Multi-threaded EVE logging support
|
5 years ago |
|
output-json-sip.h
|
sip/eve: convert to jsonbuilder
|
5 years ago |
|
output-json-smb.c
|
output/json: Multi-threaded EVE logging support
|
5 years ago |
|
output-json-smb.h
|
smb/eve: convert to jsonbuilder
|
5 years ago |
|
output-json-smtp.c
|
output: Remove unused output functions
|
5 years ago |
|
output-json-smtp.h
|
smtp/eve: convert to jsonbuilder
|
5 years ago |
|
output-json-snmp.c
|
output/json: Multi-threaded EVE logging support
|
5 years ago |
|
output-json-snmp.h
|
SNMP: add logger
|
6 years ago |
|
output-json-ssh.c
|
output: Remove unused output functions
|
5 years ago |
|
output-json-ssh.h
|
parse: move SSH parser from C to Rust
|
5 years ago |
|
output-json-stats.c
|
output: Remove unused output functions
|
5 years ago |
|
output-json-stats.h
|
jansson: remove HAVE_LIBJANSSON guards
|
6 years ago |
|
output-json-template-rust.c
|
output/json: Multi-threaded EVE logging support
|
5 years ago |
|
output-json-template-rust.h
|
…
|
|
|
output-json-template.c
|
output/json: Multi-threaded EVE logging support
|
5 years ago |
|
output-json-template.h
|
…
|
|
|
output-json-tftp.c
|
output/json: Multi-threaded EVE logging support
|
5 years ago |
|
output-json-tftp.h
|
…
|
|
|
output-json-tls.c
|
output: Remove unused output functions
|
5 years ago |
|
output-json-tls.h
|
tls/eve: convert to jsonbuilder
|
5 years ago |
|
output-json.c
|
output-json: fix Coverity USE_AFTER_FREE
|
5 years ago |
|
output-json.h
|
plugins: initial support for a filetype plugin
|
5 years ago |
|
output-lua.c
|
src: use FatalError whenever possible
|
5 years ago |
|
output-lua.h
|
…
|
|
|
output-packet.c
|
output: optimize root logging loop
|
6 years ago |
|
output-packet.h
|
…
|
|
|
output-stats.c
|
output: get rid of BUG_ONs
|
6 years ago |
|
output-stats.h
|
…
|
|
|
output-streaming.c
|
output: optimize root logging loop
|
6 years ago |
|
output-streaming.h
|
…
|
|
|
output-tx.c
|
flow/timeout: flag last pseudo packet
|
5 years ago |
|
output-tx.h
|
…
|
|
|
output.c
|
output: Remove unused output functions
|
5 years ago |
|
output.h
|
output: Remove unused output functions
|
5 years ago |
|
packet-queue.c
|
packet-queue: create alloc and free functions
|
5 years ago |
|
packet-queue.h
|
packet-queue: create alloc and free functions
|
5 years ago |
|
pkt-var.c
|
…
|
|
|
pkt-var.h
|
…
|
|
|
queue.h
|
app-layer-expectation: limit number of expectations
|
5 years ago |
|
reputation.c
|
src: use FatalError whenever possible
|
5 years ago |
|
reputation.h
|
…
|
|
|
respond-reject-libnet11.c
|
reject: minor code cleanup
|
5 years ago |
|
respond-reject-libnet11.h
|
reject: minor code cleanup
|
5 years ago |
|
respond-reject.c
|
sources: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
respond-reject.h
|
reject: minor code cleanup
|
5 years ago |
|
runmode-af-packet.c
|
runmodes: memory leak on runmode single
|
5 years ago |
|
runmode-af-packet.h
|
…
|
|
|
runmode-erf-dag.c
|
src: use FatalError whenever possible
|
5 years ago |
|
runmode-erf-dag.h
|
…
|
|
|
runmode-erf-file.c
|
src: use FatalError whenever possible
|
5 years ago |
|
runmode-erf-file.h
|
…
|
|
|
runmode-ipfw.c
|
runmodes: simply default runmode logic
|
6 years ago |
|
runmode-ipfw.h
|
…
|
|
|
runmode-napatech.c
|
src: use FatalError whenever possible
|
5 years ago |
|
runmode-napatech.h
|
napatech: add hardware based bypass support
|
5 years ago |
|
runmode-netmap.c
|
plugins: config.h: move into src and rename to autoconf.h
|
5 years ago |
|
runmode-netmap.h
|
…
|
|
|
runmode-nflog.c
|
plugins: config.h: move into src and rename to autoconf.h
|
5 years ago |
|
runmode-nflog.h
|
…
|
|
|
runmode-nfq.c
|
runmodes: simply default runmode logic
|
6 years ago |
|
runmode-nfq.h
|
…
|
|
|
runmode-pcap-file.c
|
src: use FatalError whenever possible
|
5 years ago |
|
runmode-pcap-file.h
|
…
|
|
|
runmode-pcap.c
|
src: use FatalError whenever possible
|
5 years ago |
|
runmode-pcap.h
|
…
|
|
|
runmode-pfring.c
|
pfring: fix compile warning
|
5 years ago |
|
runmode-pfring.h
|
…
|
|
|
runmode-unittests.c
|
decode/geneve: Add Geneve decoding functionality
|
5 years ago |
|
runmode-unittests.h
|
…
|
|
|
runmode-unix-socket.c
|
plugins: support for capture plugins
|
5 years ago |
|
runmode-unix-socket.h
|
datasets: add 'dataset-remove' unix command
|
5 years ago |
|
runmode-windivert.c
|
runmodes: simply default runmode logic
|
6 years ago |
|
runmode-windivert.h
|
…
|
|
|
runmodes.c
|
plugins: add missing guards
|
5 years ago |
|
runmodes.h
|
plugins: support for capture plugins
|
5 years ago |
|
rust-context.c
|
suricata: expose the SuricataContext with a function
|
5 years ago |
|
rust-context.h
|
suricata: expose the SuricataContext with a function
|
5 years ago |
|
rust.h
|
json: macro for setting formatted false value
|
5 years ago |
|
source-af-packet.c
|
plugins: config.h: move into src and rename to autoconf.h
|
5 years ago |
|
source-af-packet.h
|
af-packet: change type of cluster_id to uint16_t
|
5 years ago |
|
source-erf-dag.c
|
sources: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
source-erf-dag.h
|
…
|
|
|
source-erf-file.c
|
sources: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
source-erf-file.h
|
…
|
|
|
source-ipfw.c
|
sources: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
source-ipfw.h
|
…
|
|
|
source-napatech.c
|
napatech: Fix compiler issues w/out bypass
|
5 years ago |
|
source-napatech.h
|
napatech: add hardware based bypass support
|
5 years ago |
|
source-netmap.c
|
decode: remove pseudo packet checks
|
5 years ago |
|
source-netmap.h
|
src: remove multiple uses of atoi
|
5 years ago |
|
source-nflog.c
|
sources: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
source-nflog.h
|
…
|
|
|
source-nfq-prototypes.h
|
…
|
|
|
source-nfq.c
|
nfq: suppress debug message using info level
|
5 years ago |
|
source-nfq.h
|
…
|
|
|
source-pcap-file-directory-helper.c
|
…
|
|
|
source-pcap-file-directory-helper.h
|
pcap: read directories recursively
|
5 years ago |
|
source-pcap-file-helper.c
|
decode/hdlc: initial support
|
5 years ago |
|
source-pcap-file-helper.h
|
pcap/file: minor code cleanups
|
5 years ago |
|
source-pcap-file.c
|
pcap: fix minor scan-build warnings
|
5 years ago |
|
source-pcap-file.h
|
…
|
|
|
source-pcap.c
|
pcap: fix minor scan-build warnings
|
5 years ago |
|
source-pcap.h
|
pcap: code reformatting and minor cleanups
|
6 years ago |
|
source-pfring.c
|
sources: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
source-pfring.h
|
plugins: config.h: move into src and rename to autoconf.h
|
5 years ago |
|
source-windivert-prototypes.h
|
…
|
|
|
source-windivert.c
|
decode: remove pseudo packet checks
|
5 years ago |
|
source-windivert.h
|
…
|
|
|
stream-tcp-inline.c
|
…
|
|
|
stream-tcp-inline.h
|
…
|
|
|
stream-tcp-list.c
|
stream: remove GAP flag from stream
|
5 years ago |
|
stream-tcp-list.h
|
…
|
|
|
stream-tcp-private.h
|
stream: remove GAP flag from stream
|
5 years ago |
|
stream-tcp-reassemble.c
|
stream: make sure to call app-layer in case of depth reached
|
5 years ago |
|
stream-tcp-reassemble.h
|
stream: fix function style
|
5 years ago |
|
stream-tcp-sack.c
|
…
|
|
|
stream-tcp-sack.h
|
…
|
|
|
stream-tcp-util.c
|
…
|
|
|
stream-tcp-util.h
|
…
|
|
|
stream-tcp.c
|
stream: remove GAP flag from stream
|
5 years ago |
|
stream-tcp.h
|
stream: add state to string funcs
|
5 years ago |
|
stream.c
|
…
|
|
|
stream.h
|
…
|
|
|
suricata-common.h
|
log: Add more stdio_unlocked macros
|
5 years ago |
|
suricata-plugin.h
|
plugins: support for capture plugins
|
5 years ago |
|
suricata.c
|
commandline: add static analyzer hint for -r parsing
|
5 years ago |
|
suricata.h
|
plugins: support for capture plugins
|
5 years ago |
|
threads-debug.h
|
…
|
|
|
threads-profile.h
|
threads: make thread local storage manadatory
|
5 years ago |
|
threads.c
|
…
|
|
|
threads.h
|
plugins: config.h: move into src and rename to autoconf.h
|
5 years ago |
|
threadvars.h
|
flow: redesign of flow timeout handling
|
5 years ago |
|
tm-modules.c
|
plugins: support for capture plugins
|
5 years ago |
|
tm-modules.h
|
sources: hide RegisterTests behind ifdef UNITTESTS
|
5 years ago |
|
tm-queuehandlers.c
|
threading: fix queue handlers globals use
|
5 years ago |
|
tm-queuehandlers.h
|
threading: fix queue handlers globals use
|
5 years ago |
|
tm-queues.c
|
threading/queues: simplify error handling
|
5 years ago |
|
tm-queues.h
|
threading/queues: remove 256 queue limit
|
5 years ago |
|
tm-threads-common.h
|
plugins: support for capture plugins
|
5 years ago |
|
tm-threads.c
|
flow: redesign of flow timeout handling
|
5 years ago |
|
tm-threads.h
|
flow: redesign of flow timeout handling
|
5 years ago |
|
tmqh-flow.c
|
flow: fix unlikely issue with int handling
|
5 years ago |
|
tmqh-flow.h
|
…
|
|
|
tmqh-packetpool.c
|
src: use FatalError whenever possible
|
5 years ago |
|
tmqh-packetpool.h
|
…
|
|
|
tmqh-simple.c
|
threading: hide 'trans_q' from queue handlers
|
5 years ago |
|
tmqh-simple.h
|
…
|
|
|
tree.h
|
…
|
|
|
unix-manager.c
|
src: use FatalError whenever possible
|
5 years ago |
|
unix-manager.h
|
unix-socket: avoid using global variable w/o extern
|
5 years ago |
|
util-action.c
|
…
|
|
|
util-action.h
|
…
|
|
|
util-affinity.c
|
src: use FatalError whenever possible
|
5 years ago |
|
util-affinity.h
|
affinity: Convert nb_threads to uint32_t
|
5 years ago |
|
util-atomic.c
|
atomics: add SC_ATOMIC_INITPTR macro
|
5 years ago |
|
util-atomic.h
|
atomics: Add "decl and init with value" function
|
5 years ago |
|
util-base64.c
|
…
|
|
|
util-base64.h
|
…
|
|
|
util-bloomfilter-counting.c
|
…
|
|
|
util-bloomfilter-counting.h
|
…
|
|
|
util-bloomfilter.c
|
…
|
|
|
util-bloomfilter.h
|
…
|
|
|
util-bpf.c
|
plugins: config.h: move into src and rename to autoconf.h
|
5 years ago |
|
util-bpf.h
|
…
|
|
|
util-buffer.c
|
…
|
|
|
util-buffer.h
|
…
|
|
|
util-byte.c
|
util: fix trailing char check with ByteExtractString
|
5 years ago |
|
util-byte.h
|
Add wrappers for validating range checks
|
5 years ago |
|
util-checksum.c
|
…
|
|
|
util-checksum.h
|
…
|
|
|
util-cidr.c
|
…
|
|
|
util-cidr.h
|
…
|
|
|
util-classification-config.c
|
src: remove multiple uses of atoi
|
5 years ago |
|
util-classification-config.h
|
classtype: use global defines for size limits
|
6 years ago |
|
util-clock.h
|
…
|
|
|
util-conf.c
|
plugins: config.h: move into src and rename to autoconf.h
|
5 years ago |
|
util-conf.h
|
check: Using const keyword for some arguments
|
5 years ago |
|
util-config.h
|
config: common definitions
|
5 years ago |
|
util-coredump-config.c
|
main: enable coredumps after privileges are dropped
|
6 years ago |
|
util-coredump-config.h
|
main: enable coredumps after privileges are dropped
|
6 years ago |
|
util-cpu.c
|
src: remove multiple uses of atoi
|
5 years ago |
|
util-cpu.h
|
…
|
|
|
util-crypt.c
|
…
|
|
|
util-crypt.h
|
…
|
|
|
util-daemon.c
|
src: use FatalError whenever possible
|
5 years ago |
|
util-daemon.h
|
…
|
|
|
util-debug-filters.c
|
src: use FatalError whenever possible
|
5 years ago |
|
util-debug-filters.h
|
…
|
|
|
util-debug.c
|
logging: expose the log level with a function
|
5 years ago |
|
util-debug.h
|
logging: expose the log level with a function
|
5 years ago |
|
util-decode-mime.c
|
fuzz: remove obsolete AFL code
|
5 years ago |
|
util-decode-mime.h
|
fuzz: remove obsolete AFL code
|
5 years ago |
|
util-detect.c
|
…
|
|
|
util-detect.h
|
…
|
|
|
util-device.c
|
capture: optimize checksum handling
|
5 years ago |
|
util-device.h
|
capture: optimize checksum handling
|
5 years ago |
|
util-ebpf.c
|
ebpf: fix invalid description in doc string
|
5 years ago |
|
util-ebpf.h
|
util-ebpf: reindex
|
6 years ago |
|
util-enum.c
|
common: use suricata-common.h in more places
|
5 years ago |
|
util-enum.h
|
…
|
|
|
util-error.c
|
rule parsing: valid that input rule string is UTF8
|
5 years ago |
|
util-error.h
|
rule parsing: valid that input rule string is UTF8
|
5 years ago |
|
util-file-decompression.c
|
lzma: make mandatory
|
6 years ago |
|
util-file-decompression.h
|
…
|
|
|
util-file-swf-decompression.c
|
lzma: replaces liblzma with own sdk for swf decompression
|
6 years ago |
|
util-file-swf-decompression.h
|
lzma: make mandatory
|
6 years ago |
|
util-file.c
|
file: handles gaps natively
|
5 years ago |
|
util-file.h
|
files: tracking flag update
|
5 years ago |
|
util-fix_checksum.c
|
…
|
|
|
util-fix_checksum.h
|
…
|
|
|
util-fmemopen.c
|
…
|
|
|
util-fmemopen.h
|
…
|
|
|
util-hash-lookup3.c
|
…
|
|
|
util-hash-lookup3.h
|
…
|
|
|
util-hash-string.c
|
…
|
|
|
util-hash-string.h
|
…
|
|
|
util-hash.c
|
…
|
|
|
util-hash.h
|
…
|
|
|
util-hashlist.c
|
…
|
|
|
util-hashlist.h
|
…
|
|
|
util-host-info.c
|
plugins: config.h: move into src and rename to autoconf.h
|
5 years ago |
|
util-host-info.h
|
…
|
|
|
util-host-os-info.c
|
src: use FatalError whenever possible
|
5 years ago |
|
util-host-os-info.h
|
…
|
|
|
util-hyperscan.c
|
…
|
|
|
util-hyperscan.h
|
…
|
|
|
util-ioctl.c
|
…
|
|
|
util-ioctl.h
|
…
|
|
|
util-ip.c
|
src: use FatalError whenever possible
|
5 years ago |
|
util-ip.h
|
…
|
|
|
util-ja3.c
|
detect/ja3: print error for one rule only
|
6 years ago |
|
util-ja3.h
|
…
|
|
|
util-log-redis.c
|
src: use FatalError whenever possible
|
5 years ago |
|
util-log-redis.h
|
redis: Change port type to uint16_t
|
5 years ago |
|
util-logopenfile.c
|
log/eve: Threaded filename change: eve.N.json
|
5 years ago |
|
util-logopenfile.h
|
log: Log errors while writing log info
|
5 years ago |
|
util-lua-common.c
|
threads: remove u_long usage
|
5 years ago |
|
util-lua-common.h
|
…
|
|
|
util-lua-dnp3-objects.c
|
…
|
|
|
util-lua-dnp3-objects.h
|
…
|
|
|
util-lua-dnp3.c
|
…
|
|
|
util-lua-dnp3.h
|
…
|
|
|
util-lua-dns.c
|
dns: register parsers from Rust
|
5 years ago |
|
util-lua-dns.h
|
…
|
|
|
util-lua-hassh.c
|
lua: add functions to get hassh parameters
|
5 years ago |
|
util-lua-hassh.h
|
lua: add functions to get hassh parameters
|
5 years ago |
|
util-lua-http.c
|
…
|
|
|
util-lua-http.h
|
…
|
|
|
util-lua-ja3.c
|
lua: add Ja3SGetString function
|
6 years ago |
|
util-lua-ja3.h
|
…
|
|
|
util-lua-smtp.c
|
…
|
|
|
util-lua-smtp.h
|
…
|
|
|
util-lua-ssh.c
|
parse: move SSH parser from C to Rust
|
5 years ago |
|
util-lua-ssh.h
|
…
|
|
|
util-lua-tls.c
|
…
|
|
|
util-lua-tls.h
|
…
|
|
|
util-lua.c
|
…
|
|
|
util-lua.h
|
…
|
|
|
util-luajit.c
|
…
|
|
|
util-luajit.h
|
…
|
|
|
util-macset.c
|
output-json: add MAC address output
|
5 years ago |
|
util-macset.h
|
output-json: add MAC address output
|
5 years ago |
|
util-magic.c
|
magic: get rid of global lock
|
5 years ago |
|
util-magic.h
|
magic: get rid of global lock
|
5 years ago |
|
util-mem.c
|
util/mem: reduce scope of win32 specific include
|
5 years ago |
|
util-mem.h
|
util/mem: reduce scope of win32 specific include
|
5 years ago |
|
util-memcmp.c
|
…
|
|
|
util-memcmp.h
|
…
|
|
|
util-memcpy.h
|
…
|
|
|
util-memrchr.c
|
…
|
|
|
util-memrchr.h
|
…
|
|
|
util-misc.c
|
plugins: config.h: move into src and rename to autoconf.h
|
5 years ago |
|
util-misc.h
|
string: making shortening function global
|
6 years ago |
|
util-mpm-ac-bs.c
|
src: use FatalError whenever possible
|
5 years ago |
|
util-mpm-ac-bs.h
|
…
|
|
|
util-mpm-ac-ks-small.c
|
…
|
|
|
util-mpm-ac-ks.c
|
src: use FatalError whenever possible
|
5 years ago |
|
util-mpm-ac-ks.h
|
…
|
|
|
util-mpm-ac.c
|
src: use FatalError whenever possible
|
5 years ago |
|
util-mpm-ac.h
|
…
|
|
|
util-mpm-hs.c
|
src: use FatalError whenever possible
|
5 years ago |
|
util-mpm-hs.h
|
…
|
|
|
util-mpm.c
|
src: use FatalError whenever possible
|
5 years ago |
|
util-mpm.h
|
mpm: fix global declarations
|
5 years ago |
|
util-napatech.c
|
napatech: Style -- remove extra space
|
5 years ago |
|
util-napatech.h
|
napatech: make stream_id uint8_t
|
5 years ago |
|
util-optimize.h
|
…
|
|
|
util-pages.c
|
…
|
|
|
util-pages.h
|
…
|
|
|
util-path.c
|
path: SCBasename - function to return basename
|
5 years ago |
|
util-path.h
|
path: SCBasename - function to return basename
|
5 years ago |
|
util-pidfile.c
|
…
|
|
|
util-pidfile.h
|
…
|
|
|
util-plugin.c
|
plugins: require registration function SCPluginRegister
|
5 years ago |
|
util-plugin.h
|
plugins: support for capture plugins
|
5 years ago |
|
util-pool-thread.c
|
pool/thread: clean up tests
|
6 years ago |
|
util-pool-thread.h
|
pool/thread: remove old grow function
|
6 years ago |
|
util-pool.c
|
pool: don't call Cleanup after failed Init
|
6 years ago |
|
util-pool.h
|
…
|
|
|
util-prefilter.c
|
…
|
|
|
util-prefilter.h
|
…
|
|
|
util-print.c
|
util: PrintRawDataFp handles null
|
5 years ago |
|
util-print.h
|
check: Using const keyword for some arguments
|
5 years ago |
|
util-privs.c
|
src: use FatalError whenever possible
|
5 years ago |
|
util-privs.h
|
…
|
|
|
util-profiling-keywords.c
|
src: use FatalError whenever possible
|
5 years ago |
|
util-profiling-locks.c
|
threads: make thread local storage manadatory
|
5 years ago |
|
util-profiling-locks.h
|
…
|
|
|
util-profiling-prefilter.c
|
src: use FatalError whenever possible
|
5 years ago |
|
util-profiling-rulegroups.c
|
src: use FatalError whenever possible
|
5 years ago |
|
util-profiling-rules.c
|
src: use FatalError whenever possible
|
5 years ago |
|
util-profiling.c
|
http2: initial support
|
5 years ago |
|
util-profiling.h
|
threads: make thread local storage manadatory
|
5 years ago |
|
util-proto-name.c
|
util/proto: Convert validation routine to bool
|
5 years ago |
|
util-proto-name.h
|
util/proto: Convert validation routine to bool
|
5 years ago |
|
util-radix-tree.c
|
src: use FatalError whenever possible
|
5 years ago |
|
util-radix-tree.h
|
…
|
|
|
util-random.c
|
…
|
|
|
util-random.h
|
…
|
|
|
util-reference-config.c
|
detect/reference: allow undefined references
|
6 years ago |
|
util-reference-config.h
|
reference: change scope of add func to global
|
6 years ago |
|
util-rohash.c
|
…
|
|
|
util-rohash.h
|
…
|
|
|
util-rule-vars.c
|
detect: Provide `de_ctx` to free functions
|
5 years ago |
|
util-rule-vars.h
|
…
|
|
|
util-runmodes.c
|
plugins: config.h: move into src and rename to autoconf.h
|
5 years ago |
|
util-runmodes.h
|
runmodes: remove unused prototypes
|
6 years ago |
|
util-running-modes.c
|
plugins: config.h: move into src and rename to autoconf.h
|
5 years ago |
|
util-running-modes.h
|
cmdline: --list-app-layer-protos respects -c arg
|
5 years ago |
|
util-signal.c
|
…
|
|
|
util-signal.h
|
…
|
|
|
util-spm-bm.c
|
src: use FatalError whenever possible
|
5 years ago |
|
util-spm-bm.h
|
boyermoore: optimization with one alloc less
|
6 years ago |
|
util-spm-bs.c
|
…
|
|
|
util-spm-bs.h
|
…
|
|
|
util-spm-bs2bm.c
|
…
|
|
|
util-spm-bs2bm.h
|
…
|
|
|
util-spm-hs.c
|
…
|
|
|
util-spm-hs.h
|
…
|
|
|
util-spm.c
|
hyperscan: better error message if not compiled
|
5 years ago |
|
util-spm.h
|
spm: fix global declaration of spm_table
|
5 years ago |
|
util-storage.c
|
…
|
|
|
util-storage.h
|
…
|
|
|
util-streaming-buffer.c
|
common: use WARN_UNUSED macro
|
5 years ago |
|
util-streaming-buffer.h
|
common: use WARN_UNUSED macro
|
5 years ago |
|
util-strlcatu.c
|
…
|
|
|
util-strlcpyu.c
|
…
|
|
|
util-strptime.c
|
…
|
|
|
util-syslog.c
|
…
|
|
|
util-syslog.h
|
…
|
|
|
util-thash.c
|
util: fix warning about format string for integer
|
5 years ago |
|
util-thash.h
|
datasets: allow memcap, hashsize be set via yaml or rule
|
5 years ago |
|
util-threshold-config.c
|
threshold: fix potential memory leak
|
5 years ago |
|
util-threshold-config.h
|
…
|
|
|
util-time.c
|
windows: fix timestring timezone display
|
5 years ago |
|
util-time.h
|
time: Add TIMEVAL_EARLIER and TIMEVAL_DIFF_SEC macros.
|
5 years ago |
|
util-unittest-helper.c
|
flow: redesign of flow timeout handling
|
5 years ago |
|
util-unittest-helper.h
|
fuzz: remove UNITTEST dependency
|
5 years ago |
|
util-unittest.c
|
unittests: check for flow memuse
|
5 years ago |
|
util-unittest.h
|
general: Correct typos
|
5 years ago |
|
util-validate.h
|
…
|
|
|
util-var-name.c
|
atomics: add SC_ATOMIC_INITPTR macro
|
5 years ago |
|
util-var-name.h
|
…
|
|
|
util-var.c
|
…
|
|
|
util-var.h
|
…
|
|
|
util-vector.h
|
…
|
|
|
win32-misc.c
|
…
|
|
|
win32-misc.h
|
posix: replace bzero with memset
|
6 years ago |
|
win32-service.c
|
util/mem: reduce scope of win32 specific include
|
5 years ago |
|
win32-service.h
|
…
|
|
|
win32-syscall.c
|
util/mem: reduce scope of win32 specific include
|
5 years ago |
|
win32-syscall.h
|
…
|
|
|
win32-syslog.h
|
…
|
|
