| .. |
|
Makefile.am
|
Add support for detection_filter keyword
|
17 years ago |
|
action-globals.h
|
Fix weird compile error
|
17 years ago |
|
alert-debuglog.c
|
Have output plugs use an OutputCtx which is a little more generic than LogFileCtx. The OutputCtx provides a place for module private data to avoi overriding the LogFileCtx.
|
17 years ago |
|
alert-debuglog.h
|
Have output plugs use an OutputCtx which is a little more generic than LogFileCtx. The OutputCtx provides a place for module private data to avoi overriding the LogFileCtx.
|
17 years ago |
|
alert-fastlog.c
|
Have output plugs use an OutputCtx which is a little more generic than LogFileCtx. The OutputCtx provides a place for module private data to avoi overriding the LogFileCtx.
|
17 years ago |
|
alert-fastlog.h
|
Have output plugs use an OutputCtx which is a little more generic than LogFileCtx. The OutputCtx provides a place for module private data to avoi overriding the LogFileCtx.
|
17 years ago |
|
alert-prelude.c
|
Fix prelude init and cleanup sequence using OutputCtx
|
17 years ago |
|
alert-prelude.h
|
Add Prelude output plugin
|
17 years ago |
|
alert-unified-alert.c
|
bug 102 patch
|
17 years ago |
|
alert-unified-alert.h
|
Have output plugs use an OutputCtx which is a little more generic than LogFileCtx. The OutputCtx provides a place for module private data to avoi overriding the LogFileCtx.
|
17 years ago |
|
alert-unified-log.c
|
bug 102 patch
|
17 years ago |
|
alert-unified-log.h
|
Have output plugs use an OutputCtx which is a little more generic than LogFileCtx. The OutputCtx provides a place for module private data to avoi overriding the LogFileCtx.
|
17 years ago |
|
alert-unified2-alert.c
|
Have output plugs use an OutputCtx which is a little more generic than LogFileCtx. The OutputCtx provides a place for module private data to avoi overriding the LogFileCtx.
|
17 years ago |
|
alert-unified2-alert.h
|
Have output plugs use an OutputCtx which is a little more generic than LogFileCtx. The OutputCtx provides a place for module private data to avoi overriding the LogFileCtx.
|
17 years ago |
|
app-layer-dcerpc-common.h
|
Remove wrong copyright info, cleanup headers.
|
17 years ago |
|
app-layer-dcerpc.c
|
Remove wrong copyright info, cleanup headers.
|
17 years ago |
|
app-layer-dcerpc.h
|
Remove wrong copyright info, cleanup headers.
|
17 years ago |
|
app-layer-detect-proto.c
|
Make sure we only run the app layer proto detection (successfully) once per flow. Solves an issue found by the fuzzer where both flow directions were detected as different protos, messing up the app layer parser.
|
17 years ago |
|
app-layer-detect-proto.h
|
Remove unused conditional locking code from the app layer parsing code.
|
17 years ago |
|
app-layer-ftp.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
app-layer-ftp.h
|
Adding FTP app layer parser and ftpbounce detection at L7
|
17 years ago |
|
app-layer-htp.c
|
Cleanups.
|
17 years ago |
|
app-layer-htp.h
|
Cleanups.
|
17 years ago |
|
app-layer-nbss.h
|
Remove wrong copyright info, cleanup headers.
|
17 years ago |
|
app-layer-parser.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
app-layer-parser.h
|
Remove unused conditional locking code from the app layer parsing code.
|
17 years ago |
|
app-layer-protos.h
|
add smb2 proto and smb, smb2, dcerpc unit tests
|
17 years ago |
|
app-layer-smb.c
|
Small SMB cleanups.
|
17 years ago |
|
app-layer-smb.h
|
Small SMB cleanups.
|
17 years ago |
|
app-layer-smb2.c
|
Remove wrong copyright info, cleanup headers.
|
17 years ago |
|
app-layer-smb2.h
|
Remove wrong copyright info, cleanup headers.
|
17 years ago |
|
app-layer-tls.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
app-layer-tls.h
|
TLS: small updates to the tls parser
|
17 years ago |
|
app-layer.c
|
Application layer detection improvements
|
17 years ago |
|
app-layer.h
|
Application layer detection improvements
|
17 years ago |
|
conf-yaml-loader.c
|
Fix bug 125. - Always bail on parse errors. - Exit if loading the config file fails. - Display the line number where the parsing failed.
|
17 years ago |
|
conf-yaml-loader.h
|
Require that the configuration file begins with a valid YAML version. At this time this means the configuration file must begin with
|
17 years ago |
|
conf.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
conf.h
|
Cleanup of configuration internals. Use an n-ary type tree for everything instead of a first level hash branching off into n-ary type trees.
|
17 years ago |
|
counters.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
counters.h
|
Fix for bug 50. Make timebased counters more accurate
|
17 years ago |
|
debug.h
|
More logging API usage changes.
|
17 years ago |
|
decode-ethernet.c
|
VLAN Support
|
17 years ago |
|
decode-ethernet.h
|
more unit tests for pppoe - part I
|
17 years ago |
|
decode-events.h
|
VLAN Support
|
17 years ago |
|
decode-gre.c
|
VLAN Support
|
17 years ago |
|
decode-gre.h
|
GRE struct naming fix, comment adds.
|
17 years ago |
|
decode-icmpv4.c
|
Add icmp flow handling.
|
17 years ago |
|
decode-icmpv4.h
|
ICMP Seq Rule Keyword
|
17 years ago |
|
decode-icmpv6.c
|
ICMP Seq Rule Keyword
|
17 years ago |
|
decode-icmpv6.h
|
ICMP Seq Rule Keyword
|
17 years ago |
|
decode-ipv4.c
|
Issue 82 - fragment counters. - number of fragments - number reassembled - number of timeouts
|
17 years ago |
|
decode-ipv4.h
|
looking inside ICMP packets
|
17 years ago |
|
decode-ipv6.c
|
Issue 82 - fragment counters. - number of fragments - number reassembled - number of timeouts
|
17 years ago |
|
decode-ipv6.h
|
Reorganize header inclusions.
|
17 years ago |
|
decode-ppp.c
|
Rename to Suricata.
|
17 years ago |
|
decode-ppp.h
|
Fix short IPv4 packets not getting detected in the decoder. Set decode event on short ipv6 packets.
|
17 years ago |
|
decode-pppoe.c
|
Bug 103, bound checks at pppoe, added macros for 4bit fields
|
17 years ago |
|
decode-pppoe.h
|
Bug 103, bound checks at pppoe, added macros for 4bit fields
|
17 years ago |
|
decode-raw.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
decode-raw.h
|
raw pcap support additionl ipv4/6 validation
|
17 years ago |
|
decode-sll.c
|
VLAN Support
|
17 years ago |
|
decode-sll.h
|
64 bit cleanup part2
|
17 years ago |
|
decode-tcp.c
|
Rename to Suricata.
|
17 years ago |
|
decode-tcp.h
|
target based paws handling
|
17 years ago |
|
decode-udp.c
|
Rename to Suricata.
|
17 years ago |
|
decode-udp.h
|
Added support for the csum-<protocol> rules keyword to the detection engine. Keywords added are ipv4-csum, tcpv4-csum, tcpv6-csum, udpv4-csum, udpv6-csum, icmpv4-csum and icmpv6-csum
|
17 years ago |
|
decode-vlan.c
|
VLAN Support
|
17 years ago |
|
decode-vlan.h
|
VLAN Support
|
17 years ago |
|
decode.c
|
VLAN Support
|
17 years ago |
|
decode.h
|
Remove all search code from the pattern matchers, cleanup mpm api, remove unused http code, more cleanups.
|
17 years ago |
|
defrag.c
|
Do policy lookup for defrag. Add unit test for a default host os policy. Update example config to use a default. Add 2 new policies to the stream to cover all the policies for stream and defrag.
|
17 years ago |
|
defrag.h
|
Issue 82 - fragment counters. - number of fragments - number reassembled - number of timeouts
|
17 years ago |
|
detect-ack.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-ack.h
|
Ack/Seq Keywords part 2
|
17 years ago |
|
detect-bytejump.c
|
Further simplify content api: merge flags that indicate a next relative match, remove chunks as they are unnecessary now, make negated a bitflag.
|
17 years ago |
|
detect-bytejump.h
|
Detection keyword cleanup
|
17 years ago |
|
detect-bytetest.c
|
Further simplify content api: merge flags that indicate a next relative match, remove chunks as they are unnecessary now, make negated a bitflag.
|
17 years ago |
|
detect-bytetest.h
|
Detection keyword cleanup
|
17 years ago |
|
detect-classtype.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-classtype.h
|
Support for Classtype keyword and Classification Config file
|
17 years ago |
|
detect-content.c
|
fix for bug 113
|
17 years ago |
|
detect-content.h
|
Further simplify content api: merge flags that indicate a next relative match, remove chunks as they are unnecessary now, make negated a bitflag.
|
17 years ago |
|
detect-csum.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-csum.h
|
Added support for the csum-<protocol> rules keyword to the detection engine. Keywords added are ipv4-csum, tcpv4-csum, tcpv6-csum, udpv4-csum, udpv6-csum, icmpv4-csum and icmpv6-csum
|
17 years ago |
|
detect-dce-iface.c
|
Only process a app layer sig if it has the proper state. Make sure a sig can't have conflicting sigmatches, such as ftpbouce and uricontent.
|
17 years ago |
|
detect-dce-iface.h
|
fix padding calculation and stubdata parser for dcerpc
|
17 years ago |
|
detect-dce-opnum.c
|
Only process a app layer sig if it has the proper state. Make sure a sig can't have conflicting sigmatches, such as ftpbouce and uricontent.
|
17 years ago |
|
detect-dce-opnum.h
|
fix padding calculation and stubdata parser for dcerpc
|
17 years ago |
|
detect-dce-stub-data.c
|
Only process a app layer sig if it has the proper state. Make sure a sig can't have conflicting sigmatches, such as ftpbouce and uricontent.
|
17 years ago |
|
detect-dce-stub-data.h
|
dce_iface, dce_opnum, dce_stub_data keyword support
|
17 years ago |
|
detect-decode-event.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-decode-event.h
|
VLAN Support
|
17 years ago |
|
detect-depth.c
|
Cleanups.
|
17 years ago |
|
detect-depth.h
|
Initial add of the files.
|
18 years ago |
|
detect-detection-filter.c
|
Fix compilation of new detect-filter code, fix ip-only compatibility of detect-filter code.
|
17 years ago |
|
detect-detection-filter.h
|
Add support for detection_filter keyword
|
17 years ago |
|
detect-distance.c
|
Cleanups.
|
17 years ago |
|
detect-distance.h
|
Initial add of the files.
|
18 years ago |
|
detect-dsize.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-dsize.h
|
64 bit cleanup part2
|
17 years ago |
|
detect-engine-address-ipv4.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
detect-engine-address-ipv4.h
|
refactoring, tests for address engine ipv4
|
17 years ago |
|
detect-engine-address-ipv6.c
|
AddressCutNot fix for address engine ipv6
|
17 years ago |
|
detect-engine-address-ipv6.h
|
engine address ipv6 refactored
|
17 years ago |
|
detect-engine-address.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
detect-engine-address.h
|
detect-engine-address.[ch] refactoring
|
17 years ago |
|
detect-engine-iponly.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
detect-engine-iponly.h
|
More engine init memleaks fixed. HashListTable remove function fixed.
|
17 years ago |
|
detect-engine-mpm.c
|
Remove more scan references.
|
17 years ago |
|
detect-engine-mpm.h
|
Remove more scan references.
|
17 years ago |
|
detect-engine-payload.c
|
Fix broken unittest, improve within error messaging.
|
17 years ago |
|
detect-engine-payload.h
|
Further simplify content api: merge flags that indicate a next relative match, remove chunks as they are unnecessary now, make negated a bitflag.
|
17 years ago |
|
detect-engine-port.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
detect-engine-port.h
|
More engine init memleaks fixed. HashListTable remove function fixed.
|
17 years ago |
|
detect-engine-proto.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
detect-engine-proto.h
|
Fix app layer detect to actually work.
|
17 years ago |
|
detect-engine-siggroup.c
|
First stage of detect engine redesign: equal patterns share id's, search phase no longer used, new match verification phase.
|
17 years ago |
|
detect-engine-siggroup.h
|
Unittests and style fix for detect-engine-siggroup.[ch]
|
17 years ago |
|
detect-engine-sigorder.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
detect-engine-sigorder.h
|
Order the signatures based on certain rule parameters like actions, flowbits, flowvar, pktvar, priority etc
|
17 years ago |
|
detect-engine-threshold.c
|
Add support for detection_filter keyword
|
17 years ago |
|
detect-engine-threshold.h
|
Threshold Rule
|
17 years ago |
|
detect-engine.c
|
fix for bug 113
|
17 years ago |
|
detect-engine.h
|
Adding unittest helper functions for building generic packets, checking arrays of expected match results, perform generic tests, etc. Look at util-unittest-helper.c and detect-ipproto.c for references
|
17 years ago |
|
detect-fast-pattern.c
|
Remove more scan references.
|
17 years ago |
|
detect-fast-pattern.h
|
Support fast_pattern modifier keyword for content
|
17 years ago |
|
detect-flags.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-flags.h
|
Signature Flags Keyword
|
17 years ago |
|
detect-flow.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-flow.h
|
64 bit cleanup part2
|
17 years ago |
|
detect-flowbits.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-flowbits.h
|
FlowBits Unit Tests
|
17 years ago |
|
detect-flowint.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-flowint.h
|
Added support at Flowints for keywords isset and notset
|
17 years ago |
|
detect-flowvar.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-flowvar.h
|
http_cookie keywork support
|
17 years ago |
|
detect-fragbits.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-fragbits.h
|
FragBits Keyword
|
17 years ago |
|
detect-fragoffset.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-fragoffset.h
|
FragOffset Rule Keyword
|
17 years ago |
|
detect-ftpbounce.c
|
Fix compilation of new detect-filter code, fix ip-only compatibility of detect-filter code.
|
17 years ago |
|
detect-ftpbounce.h
|
Adding FTP app layer parser and ftpbounce detection at L7
|
17 years ago |
|
detect-gid.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-gid.h
|
Gid Keyword
|
17 years ago |
|
detect-http-cookie.c
|
Don't scan more cookie headers than necessary.
|
17 years ago |
|
detect-http-cookie.h
|
First stage of detect engine redesign: equal patterns share id's, search phase no longer used, new match verification phase.
|
17 years ago |
|
detect-http-method.c
|
Don't inspect more methods than necessary.
|
17 years ago |
|
detect-http-method.h
|
First stage of detect engine redesign: equal patterns share id's, search phase no longer used, new match verification phase.
|
17 years ago |
|
detect-icmp-id.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-icmp-id.h
|
Add icmp_id keyword support
|
17 years ago |
|
detect-icmp-seq.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-icmp-seq.h
|
ICMP Seq Rule Keyword
|
17 years ago |
|
detect-icode.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-icode.h
|
Changed printf's to logging API functions
|
17 years ago |
|
detect-id.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-id.h
|
Adding id keyword and unittests
|
17 years ago |
|
detect-ipopts.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-ipopts.h
|
IpOpts Rule Keyword
|
17 years ago |
|
detect-ipproto.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-ipproto.h
|
Add ip_proto support.
|
17 years ago |
|
detect-isdataat.c
|
Further simplify content api: merge flags that indicate a next relative match, remove chunks as they are unnecessary now, make negated a bitflag.
|
17 years ago |
|
detect-isdataat.h
|
Adding detect_content chunks handling for max_pattern_length and unittests. Updating modifiers to use it.
|
17 years ago |
|
detect-itype.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-itype.h
|
Changed printf's to logging API functions
|
17 years ago |
|
detect-metadata.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-metadata.h
|
Initial add of the files.
|
18 years ago |
|
detect-msg.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-msg.h
|
Initial add of the files.
|
18 years ago |
|
detect-noalert.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-noalert.h
|
Add noalert keyword for use with sigs that are used for capturing only.
|
18 years ago |
|
detect-nocase.c
|
Remove all search code from the pattern matchers, cleanup mpm api, remove unused http code, more cleanups.
|
17 years ago |
|
detect-nocase.h
|
Initial add of the files.
|
18 years ago |
|
detect-offset.c
|
Cleanups.
|
17 years ago |
|
detect-offset.h
|
Initial add of the files.
|
18 years ago |
|
detect-parse.c
|
Fix compilation of new detect-filter code, fix ip-only compatibility of detect-filter code.
|
17 years ago |
|
detect-parse.h
|
Make sure nocase applies to the last pattern, content or uricontent.
|
17 years ago |
|
detect-pcre.c
|
Cleanups.
|
17 years ago |
|
detect-pcre.h
|
Cleanups.
|
17 years ago |
|
detect-pktvar.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-pktvar.h
|
http_cookie keywork support
|
17 years ago |
|
detect-priority.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-priority.h
|
Support for Classtype keyword and Classification Config file
|
17 years ago |
|
detect-rawbytes.c
|
Remove all search code from the pattern matchers, cleanup mpm api, remove unused http code, more cleanups.
|
17 years ago |
|
detect-rawbytes.h
|
Initial add of the files.
|
18 years ago |
|
detect-recursive.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-recursive.h
|
Initial add of the files.
|
18 years ago |
|
detect-reference.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-reference.h
|
Initial add of the files.
|
18 years ago |
|
detect-rev.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-rev.h
|
Initial add of the files.
|
18 years ago |
|
detect-rpc.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-rpc.h
|
Added rpc keyword support at packet level
|
17 years ago |
|
detect-sameip.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-sameip.h
|
Sameip Keyword
|
17 years ago |
|
detect-seq.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-seq.h
|
Ack/Seq Keywords part 2
|
17 years ago |
|
detect-sid.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-sid.h
|
Initial add of the files.
|
18 years ago |
|
detect-stream_size.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-stream_size.h
|
stream size match function and unittests
|
17 years ago |
|
detect-tag.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-tag.h
|
Add tag keyword stub
|
17 years ago |
|
detect-threshold.c
|
Fix compilation of new detect-filter code, fix ip-only compatibility of detect-filter code.
|
17 years ago |
|
detect-threshold.h
|
Add support for detection_filter keyword
|
17 years ago |
|
detect-tls-version.c
|
Only process a app layer sig if it has the proper state. Make sure a sig can't have conflicting sigmatches, such as ftpbouce and uricontent.
|
17 years ago |
|
detect-tls-version.h
|
Fix app layer detect to actually work.
|
17 years ago |
|
detect-ttl.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-ttl.h
|
TTL macros suppport
|
17 years ago |
|
detect-uricontent.c
|
Only process a app layer sig if it has the proper state. Make sure a sig can't have conflicting sigmatches, such as ftpbouce and uricontent.
|
17 years ago |
|
detect-uricontent.h
|
Remove all search code from the pattern matchers, cleanup mpm api, remove unused http code, more cleanups.
|
17 years ago |
|
detect-urilen.c
|
Remove more scan references.
|
17 years ago |
|
detect-urilen.h
|
urilen support for engine
|
17 years ago |
|
detect-window.c
|
Detection keyword cleanup
|
17 years ago |
|
detect-window.h
|
Adding unittest helper functions for building generic packets, checking arrays of expected match results, perform generic tests, etc. Look at util-unittest-helper.c and detect-ipproto.c for references
|
17 years ago |
|
detect-within.c
|
Fix broken unittest, improve within error messaging.
|
17 years ago |
|
detect-within.h
|
Initial add of the files.
|
18 years ago |
|
detect.c
|
fix for bug 113
|
17 years ago |
|
detect.h
|
Add support for detection_filter keyword
|
17 years ago |
|
flow-alert-sid.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
flow-alert-sid.h
|
Implement alert sid storage in the flow so we can check previous alerts in the flow.
|
17 years ago |
|
flow-bit.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
flow-bit.h
|
Implement alert sid storage in the flow so we can check previous alerts in the flow.
|
17 years ago |
|
flow-hash.c
|
Fix packet flags field not being cleared properly when the packet is being reused. Add some debug statements and cleanup some.
|
17 years ago |
|
flow-hash.h
|
Rename to Suricata.
|
17 years ago |
|
flow-private.h
|
Changing mutex/spinlocks/conditions naming types
|
17 years ago |
|
flow-queue.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
flow-queue.h
|
Rename to Suricata.
|
17 years ago |
|
flow-util.c
|
Clean up flow mutexes after use.
|
17 years ago |
|
flow-util.h
|
Fix not decreasing the flow use_cnt reference counter in some cases from the app layer detection code. This caused some streams to never fully time out and thus clutter up the flow table and session pool.
|
17 years ago |
|
flow-var.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
flow-var.h
|
Implement alert sid storage in the flow so we can check previous alerts in the flow.
|
17 years ago |
|
flow.c
|
Clean up flow mutexes after use.
|
17 years ago |
|
flow.h
|
bug87 Fix IPOnly veredicts on flows
|
17 years ago |
|
host.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
host.h
|
Changing mutex/spinlocks/conditions naming types
|
17 years ago |
|
log-httplog.c
|
Have output plugs use an OutputCtx which is a little more generic than LogFileCtx. The OutputCtx provides a place for module private data to avoi overriding the LogFileCtx.
|
17 years ago |
|
log-httplog.h
|
Have output plugs use an OutputCtx which is a little more generic than LogFileCtx. The OutputCtx provides a place for module private data to avoi overriding the LogFileCtx.
|
17 years ago |
|
output.c
|
Have output plugs use an OutputCtx which is a little more generic than LogFileCtx. The OutputCtx provides a place for module private data to avoi overriding the LogFileCtx.
|
17 years ago |
|
output.h
|
Have output plugs use an OutputCtx which is a little more generic than LogFileCtx. The OutputCtx provides a place for module private data to avoi overriding the LogFileCtx.
|
17 years ago |
|
packet-queue.c
|
Rename to Suricata.
|
17 years ago |
|
packet-queue.h
|
Rename to Suricata.
|
17 years ago |
|
pkt-var.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
pkt-var.h
|
64 bit cleanup part2
|
17 years ago |
|
queue.h
|
Code is now compilable on the Win32 platform
|
17 years ago |
|
reputation.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
reputation.h
|
First version of the reputation API
|
17 years ago |
|
respond-reject-libnet11.c
|
Code is now compilable on the Win32 platform
|
17 years ago |
|
respond-reject-libnet11.h
|
udp decoding added icmp unreachables added to reject
|
18 years ago |
|
respond-reject.c
|
Fix reject code to not send resets for all alerts.
|
17 years ago |
|
respond-reject.h
|
support for thread exit constants
|
17 years ago |
|
runmodes.c
|
Have output plugs use an OutputCtx which is a little more generic than LogFileCtx. The OutputCtx provides a place for module private data to avoi overriding the LogFileCtx.
|
17 years ago |
|
runmodes.h
|
Adding auto runmodes based on available core/cpu's. Setting thread priorities
|
17 years ago |
|
source-ipfw.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
source-ipfw.h
|
Intial IPFW support FreeBSD and OSX
|
17 years ago |
|
source-nfq-prototypes.h
|
Source NFQ update... less hackish, but still needs work as soon as we know how to do configuration.
|
18 years ago |
|
source-nfq.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
source-nfq.h
|
Changing mutex/spinlocks/conditions naming types
|
17 years ago |
|
source-pcap-file.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
source-pcap-file.h
|
Large update: pcap support, threading fixes, initial stream tracking, time handling, pool support, runmodes, decoders added, autojunk update.
|
18 years ago |
|
source-pcap.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
source-pcap.h
|
Fix datalink retrieval for pcap file mode and nfq mode for use in unified2.
|
17 years ago |
|
source-pfring.c
|
small PF_RING update cmd line opts changed
|
17 years ago |
|
source-pfring.h
|
native PF_RING support with fixes
|
17 years ago |
|
stream-tcp-private.h
|
Fix up initialization and hopefully make the SEQ macro's fix up an 64bit issue we're seeing...
|
17 years ago |
|
stream-tcp-reassemble.c
|
stream memory leaks fixed and unit tests added
|
17 years ago |
|
stream-tcp-reassemble.h
|
Do policy lookup for defrag. Add unit test for a default host os policy. Update example config to use a default. Add 2 new policies to the stream to cover all the policies for stream and defrag.
|
17 years ago |
|
stream-tcp.c
|
Properly clear list tail ptr in segment list.
|
17 years ago |
|
stream-tcp.h
|
Stream engine memory handling update
|
17 years ago |
|
stream.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
stream.h
|
Changing mutex/spinlocks/conditions naming types
|
17 years ago |
|
suricata-common.h
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
suricata.c
|
small PF_RING update cmd line opts changed
|
17 years ago |
|
suricata.h
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
threads.c
|
Rename to Suricata.
|
17 years ago |
|
threads.h
|
Win32 build fixed.
|
17 years ago |
|
threadvars.h
|
Adding auto runmodes based on available core/cpu's. Setting thread priorities
|
17 years ago |
|
tm-modules.c
|
bug 102 patch
|
17 years ago |
|
tm-modules.h
|
Have output plugs use an OutputCtx which is a little more generic than LogFileCtx. The OutputCtx provides a place for module private data to avoi overriding the LogFileCtx.
|
17 years ago |
|
tm-queuehandlers.c
|
Rename to Suricata.
|
17 years ago |
|
tm-queuehandlers.h
|
Adding a "flow" queue handler. This queue handler passes packets of the same flow to the same queue. Changed the default IDS mode to use this.
|
17 years ago |
|
tm-queues.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
tm-queues.h
|
threading improvements. Replaced the use of slot(2/3) with varslot. Improve error handling in slot functions. Additional helper functions for thread creation
|
17 years ago |
|
tm-threads.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
tm-threads.h
|
Setting thread priorities with nice
|
17 years ago |
|
tmqh-flow.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
tmqh-flow.h
|
Actually add the new queue handler.
|
17 years ago |
|
tmqh-nfq.c
|
Rename to Suricata.
|
17 years ago |
|
tmqh-nfq.h
|
Initial add of the files.
|
18 years ago |
|
tmqh-packetpool.c
|
quick way to make max_pending configurable.
|
17 years ago |
|
tmqh-packetpool.h
|
threading improvements. Replaced the use of slot(2/3) with varslot. Improve error handling in slot functions. Additional helper functions for thread creation
|
17 years ago |
|
tmqh-simple.c
|
Changed the way cuda dispatcher passes back results. Now each detection thread has it's own queue to which the dispatcher can pump packets back to the detect thread. Also, with cuda enabled and a non-cuda mpm being used, we won't create a dispatcher and instead call the b2g scan/search funtions directly instead of using the dispatcher.
|
17 years ago |
|
tmqh-simple.h
|
Changed the way cuda dispatcher passes back results. Now each detection thread has it's own queue to which the dispatcher can pump packets back to the detect thread. Also, with cuda enabled and a non-cuda mpm being used, we won't create a dispatcher and instead call the b2g scan/search funtions directly instead of using the dispatcher.
|
17 years ago |
|
util-binsearch.c
|
Rename to Suricata.
|
17 years ago |
|
util-binsearch.h
|
64 bit cleanup part2
|
17 years ago |
|
util-bloomfilter-counting.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
util-bloomfilter-counting.h
|
64 bit cleanup part2
|
17 years ago |
|
util-bloomfilter.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
util-bloomfilter.h
|
64 bit cleanup part2
|
17 years ago |
|
util-byte.c
|
Renaming errors (naming conventions)
|
17 years ago |
|
util-byte.h
|
Code is now compilable on the Win32 platform
|
17 years ago |
|
util-cidr.c
|
Rename to Suricata.
|
17 years ago |
|
util-cidr.h
|
64 bit cleanup part2
|
17 years ago |
|
util-classification-config.c
|
stream memory leaks fixed and unit tests added
|
17 years ago |
|
util-classification-config.h
|
Modify the classification config tests to use the buffer than a temp file and also fix an invalid free
|
17 years ago |
|
util-clock.h
|
Adding single pattern matcher algorithms. If you cannot store a context for the patterns, use SpmSearch() macro. Adding unittests and stats
|
17 years ago |
|
util-cpu.c
|
Code is now compilable on the Win32 platform
|
17 years ago |
|
util-cpu.h
|
Detect the number of CPUs configured and online. Printing a small summary at the startup
|
17 years ago |
|
util-cuda-handlers.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
util-cuda-handlers.h
|
pack all the packet pattern scan and search packet setup for cuda into a function inside util-cuda-handlers.[ch]
|
17 years ago |
|
util-cuda.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
util-cuda.h
|
Added cuda logs for the engine, which shows device info and memory usage
|
17 years ago |
|
util-daemon.c
|
Code is now compilable on the Win32 platform
|
17 years ago |
|
util-daemon.h
|
Code is now compilable on the Win32 platform
|
17 years ago |
|
util-debug-filters.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
util-debug-filters.h
|
Intial IPFW support FreeBSD and OSX
|
17 years ago |
|
util-debug.c
|
Fixup Linux compilation after applying win32 patches.
|
17 years ago |
|
util-debug.h
|
Code is now compilable on the Win32 platform
|
17 years ago |
|
util-enum.c
|
Host OS Table API. Modifications also make to the radix tree to handle netblocks
|
17 years ago |
|
util-enum.h
|
Implementation of the logging module
|
17 years ago |
|
util-error.c
|
bug 102 patch
|
17 years ago |
|
util-error.h
|
bug 102 patch
|
17 years ago |
|
util-fix_checksum.c
|
Break out checksum fixup code to make the license separation more clear.
|
17 years ago |
|
util-fix_checksum.h
|
Break out checksum fixup code to make the license separation more clear.
|
17 years ago |
|
util-fmemopen.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
util-fmemopen.h
|
Fixed Win32 compilation, unit tests now compile.
|
17 years ago |
|
util-hash.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
util-hash.h
|
Modify the classification config tests to use the buffer than a temp file and also fix an invalid free
|
17 years ago |
|
util-hashlist.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
util-hashlist.h
|
64 bit cleanup part2
|
17 years ago |
|
util-host-os-info.c
|
Do policy lookup for defrag. Add unit test for a default host os policy. Update example config to use a default. Add 2 new policies to the stream to cover all the policies for stream and defrag.
|
17 years ago |
|
util-host-os-info.h
|
Load host OS info from the configuration.
|
17 years ago |
|
util-mem.h
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
util-mpm-b2g-cuda.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
util-mpm-b2g-cuda.h
|
CUDA build system support & compile fixes
|
17 years ago |
|
util-mpm-b2g.c
|
Remove more scan references.
|
17 years ago |
|
util-mpm-b2g.h
|
Remove more scan references.
|
17 years ago |
|
util-mpm-b3g.c
|
Remove more scan references.
|
17 years ago |
|
util-mpm-b3g.h
|
Remove more scan references.
|
17 years ago |
|
util-mpm-wumanber.c
|
Remove more scan references.
|
17 years ago |
|
util-mpm-wumanber.h
|
Remove more scan references.
|
17 years ago |
|
util-mpm.c
|
Remove all search code from the pattern matchers, cleanup mpm api, remove unused http code, more cleanups.
|
17 years ago |
|
util-mpm.h
|
Remove more scan references.
|
17 years ago |
|
util-pool.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
util-pool.h
|
Big update:
|
17 years ago |
|
util-print.c
|
Fix two separate segv's in the http logging code.
|
17 years ago |
|
util-print.h
|
64 bit cleanup part2
|
17 years ago |
|
util-radix-tree.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
util-radix-tree.h
|
First version of the reputation API
|
17 years ago |
|
util-random.c
|
Move rand seed code into util-random
|
17 years ago |
|
util-random.h
|
Move rand seed code into util-random
|
17 years ago |
|
util-rule-vars.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
util-rule-vars.h
|
Support vars lookup from conf file. Current patch support address and port group vars lookup
|
17 years ago |
|
util-spm-bm.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
util-spm-bm.h
|
Adding single pattern matcher algorithms. If you cannot store a context for the patterns, use SpmSearch() macro. Adding unittests and stats
|
17 years ago |
|
util-spm-bs.c
|
First stage of detect engine redesign: equal patterns share id's, search phase no longer used, new match verification phase.
|
17 years ago |
|
util-spm-bs.h
|
Adding single pattern matcher algorithms. If you cannot store a context for the patterns, use SpmSearch() macro. Adding unittests and stats
|
17 years ago |
|
util-spm-bs2bm.c
|
Adding single pattern matcher algorithms. If you cannot store a context for the patterns, use SpmSearch() macro. Adding unittests and stats
|
17 years ago |
|
util-spm-bs2bm.h
|
Adding single pattern matcher algorithms. If you cannot store a context for the patterns, use SpmSearch() macro. Adding unittests and stats
|
17 years ago |
|
util-spm.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
util-spm.h
|
Fix nocase searching in payload search phase.
|
17 years ago |
|
util-strlcatu.c
|
Add OpenBSD's strlcpy and strlcat and replace all strcat/strcpy/strncat/strncpy by those calls.
|
17 years ago |
|
util-strlcpyu.c
|
Add OpenBSD's strlcpy and strlcat and replace all strcat/strcpy/strncat/strncpy by those calls.
|
17 years ago |
|
util-time.c
|
Move rand seed code into util-random
|
17 years ago |
|
util-time.h
|
Move rand seed code into util-random
|
17 years ago |
|
util-unittest-helper.c
|
Further simplify content api: merge flags that indicate a next relative match, remove chunks as they are unnecessary now, make negated a bitflag.
|
17 years ago |
|
util-unittest-helper.h
|
More examples of unittest helper functions usage reference
|
17 years ago |
|
util-unittest.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
util-unittest.h
|
Bug 6
|
17 years ago |
|
util-var-name.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
util-var-name.h
|
Cleanups
|
17 years ago |
|
util-var.c
|
Implement alert sid storage in the flow so we can check previous alerts in the flow.
|
17 years ago |
|
util-var.h
|
Implement alert sid storage in the flow so we can check previous alerts in the flow.
|
17 years ago |
|
win32-misc.c
|
Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.
|
17 years ago |
|
win32-misc.h
|
Fixed Win32 compilation, unit tests now compile.
|
17 years ago |
|
win32-syslog.h
|
Added missing win32 files.
|
17 years ago |
