| .. |
|
Makefile.am
|
Initial Napatech support by Randy Caldejon / nPulse.
|
14 years ago |
|
action-globals.h
|
…
|
|
|
alert-debuglog.c
|
Clean up default output. Use simpler output format for releases.
|
14 years ago |
|
alert-debuglog.h
|
…
|
|
|
alert-fastlog.c
|
Clean up default output. Use simpler output format for releases.
|
14 years ago |
|
alert-fastlog.h
|
…
|
|
|
alert-pcapinfo.c
|
pcap-info: fix compilation warning.
|
14 years ago |
|
alert-pcapinfo.h
|
…
|
|
|
alert-prelude.c
|
Win32 compile fixes.
|
14 years ago |
|
alert-prelude.h
|
…
|
|
|
alert-syslog.c
|
Set DROP flag for reject action so in addition to sending the rst, in IPS mode also drop the offending packet.
|
14 years ago |
|
alert-syslog.h
|
…
|
|
|
alert-unified2-alert.c
|
Fix unified2 records generated based on reassembled stream data.
|
14 years ago |
|
alert-unified2-alert.h
|
…
|
|
|
app-layer-dcerpc-common.h
|
…
|
|
|
app-layer-dcerpc-udp.c
|
modify all relevant app layer API calls to accomodate passing parser local storage argument
|
14 years ago |
|
app-layer-dcerpc-udp.h
|
…
|
|
|
app-layer-dcerpc.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
app-layer-dcerpc.h
|
…
|
|
|
app-layer-detect-proto.c
|
Fix compiler warnings in a couple of unittests.
|
14 years ago |
|
app-layer-detect-proto.h
|
probing parser updated to always accept u32 buflens. Update all probing parser functions to accomodate this change
|
14 years ago |
|
app-layer-ftp.c
|
modify all relevant app layer API calls to accomodate passing parser local storage argument
|
14 years ago |
|
app-layer-ftp.h
|
…
|
|
|
app-layer-htp-body.c
|
File carving -- enable reponse file extraction
|
14 years ago |
|
app-layer-htp-body.h
|
File carving -- enable reponse file extraction
|
14 years ago |
|
app-layer-htp-file.c
|
file-inspection: inspect new files in same tx but opposite direction as well.
|
14 years ago |
|
app-layer-htp-file.h
|
file extract: split toserver and toclient tracking
|
14 years ago |
|
app-layer-htp.c
|
Update app layer events for HTTP now that libhtp has fixes for some response errors.
|
14 years ago |
|
app-layer-htp.h
|
Update app layer events for HTTP now that libhtp has fixes for some response errors.
|
14 years ago |
|
app-layer-nbss.h
|
…
|
|
|
app-layer-parser.c
|
Fix HTTP state and raw stream not being inspected at the same time. Adds an exception to transaction id handling for HTTP.
|
14 years ago |
|
app-layer-parser.h
|
Trigger raw stream reassembly on receiving a full HTTP request or response.
|
14 years ago |
|
app-layer-protos.c
|
…
|
|
|
app-layer-protos.h
|
probing parser updated to always accept u32 buflens. Update all probing parser functions to accomodate this change
|
14 years ago |
|
app-layer-smb.c
|
modify all relevant app layer API calls to accomodate passing parser local storage argument
|
14 years ago |
|
app-layer-smb.h
|
…
|
|
|
app-layer-smb2.c
|
modify all relevant app layer API calls to accomodate passing parser local storage argument
|
14 years ago |
|
app-layer-smb2.h
|
…
|
|
|
app-layer-smtp.c
|
Rename app_layer_events to app-layer-events. Misc fixes/changes.
|
14 years ago |
|
app-layer-smtp.h
|
Support for smtp decoder events
|
14 years ago |
|
app-layer-ssh.c
|
modify all relevant app layer API calls to accomodate passing parser local storage argument
|
14 years ago |
|
app-layer-ssh.h
|
…
|
|
|
app-layer-ssl.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
app-layer-ssl.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
app-layer.c
|
modify all relevant app layer API calls to accomodate passing parser local storage argument
|
14 years ago |
|
app-layer.h
|
…
|
|
|
conf-yaml-loader.c
|
Fix compiler warning.
|
14 years ago |
|
conf-yaml-loader.h
|
…
|
|
|
conf.c
|
Win32 compile fixes.
|
14 years ago |
|
conf.h
|
Win32 compile fixes.
|
14 years ago |
|
counters.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
counters.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
cuda-packet-batcher.c
|
update cuda mpm to support per proto mpm contexts. Fix faulty stream mpm usage of cuda
|
14 years ago |
|
cuda-packet-batcher.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
cuda-ptxdump.h
|
Add missing cuda header file causing 'make distcheck' to fail.
|
14 years ago |
|
data-queue.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
data-queue.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
debug.h
|
…
|
|
|
decode-ethernet.c
|
doc: add decode group and related documentation.
|
14 years ago |
|
decode-ethernet.h
|
…
|
|
|
decode-events.c
|
Support for app layer decoder events added + app_layer_event keyword added
|
14 years ago |
|
decode-events.h
|
Rename app_layer_events to app-layer-events. Misc fixes/changes.
|
14 years ago |
|
decode-gre.c
|
Fix a number of potential issues found by CLANG and cppcheck.
|
14 years ago |
|
decode-gre.h
|
…
|
|
|
decode-icmpv4.c
|
doc: add decode group and related documentation.
|
14 years ago |
|
decode-icmpv4.h
|
…
|
|
|
decode-icmpv6.c
|
doc: add decode group and related documentation.
|
14 years ago |
|
decode-icmpv6.h
|
…
|
|
|
decode-ipv4.c
|
Set the packet protocol only if it can parsed without error
|
14 years ago |
|
decode-ipv4.h
|
…
|
|
|
decode-ipv6.c
|
Set the packet protocol only if it can parsed without error
|
14 years ago |
|
decode-ipv6.h
|
fix ipv6 header setup in pseudo pkt creation
|
14 years ago |
|
decode-ppp.c
|
doc: add decode group and related documentation.
|
14 years ago |
|
decode-ppp.h
|
…
|
|
|
decode-pppoe.c
|
Minor code cleanups fixing all GCC 4.6 compiler warnings for default, debug and unittests mode.
|
14 years ago |
|
decode-pppoe.h
|
…
|
|
|
decode-raw.c
|
doc: add decode group and related documentation.
|
14 years ago |
|
decode-raw.h
|
…
|
|
|
decode-sctp.c
|
doc: add decode group and related documentation.
|
14 years ago |
|
decode-sctp.h
|
…
|
|
|
decode-sll.c
|
doc: add decode group and related documentation.
|
14 years ago |
|
decode-sll.h
|
…
|
|
|
decode-tcp.c
|
Small optimizations to IPV4 and TCP header parsing.
|
14 years ago |
|
decode-tcp.h
|
…
|
|
|
decode-udp.c
|
doc: add decode group and related documentation.
|
14 years ago |
|
decode-udp.h
|
…
|
|
|
decode-vlan.c
|
doc: add decode group and related documentation.
|
14 years ago |
|
decode-vlan.h
|
…
|
|
|
decode.c
|
Update size parsing API with new calls for returing u8, u16, u32 and u64 values. Make updates in the codebase to use these new calls
|
14 years ago |
|
decode.h
|
Add per-interface counter for invalid checksum.
|
14 years ago |
|
defrag.c
|
Win32 compile fixes.
|
14 years ago |
|
defrag.h
|
…
|
|
|
detect-ack.c
|
packet keywords only added for packet mpm. Rest in stream mpm. Update detection engine to handle the same
|
14 years ago |
|
detect-ack.h
|
…
|
|
|
detect-app-layer-event.c
|
Rename app_layer_events to app-layer-events. Misc fixes/changes.
|
14 years ago |
|
detect-app-layer-event.h
|
Support for app layer decoder events added + app_layer_event keyword added
|
14 years ago |
|
detect-asn1.c
|
undo this commit -
|
14 years ago |
|
detect-asn1.h
|
…
|
|
|
detect-byte-extract.c
|
file-data: make bytejump, bytetest, byteextract and isdataat work better with file_data.
|
14 years ago |
|
detect-byte-extract.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-bytejump.c
|
file-data: make bytejump, bytetest, byteextract and isdataat work better with file_data.
|
14 years ago |
|
detect-bytejump.h
|
…
|
|
|
detect-bytetest.c
|
file-data: make bytejump, bytetest, byteextract and isdataat work better with file_data.
|
14 years ago |
|
detect-bytetest.h
|
…
|
|
|
detect-classtype.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-classtype.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-content.c
|
file-data: initial file_data support
|
14 years ago |
|
detect-content.h
|
Introduce http_server_body keyword.
|
14 years ago |
|
detect-csum.c
|
Fix csum validation functions to not carry out csum calculation if respective headers are not present
|
14 years ago |
|
detect-csum.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-dce-iface.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-dce-iface.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-dce-opnum.c
|
Fix various minor clang/scan-build warnings.
|
14 years ago |
|
detect-dce-opnum.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-dce-stub-data.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-dce-stub-data.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-depth.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-depth.h
|
…
|
|
|
detect-detection-filter.c
|
Move threshold to it's own sig match list.
|
14 years ago |
|
detect-detection-filter.h
|
…
|
|
|
detect-distance.c
|
bug #411 - fix failing unittest
|
14 years ago |
|
detect-distance.h
|
…
|
|
|
detect-dsize.c
|
packet keywords only added for packet mpm. Rest in stream mpm. Update detection engine to handle the same
|
14 years ago |
|
detect-dsize.h
|
…
|
|
|
detect-engine-address-ipv4.c
|
Fix broken tests.
|
14 years ago |
|
detect-engine-address-ipv4.h
|
…
|
|
|
detect-engine-address-ipv6.c
|
…
|
|
|
detect-engine-address-ipv6.h
|
…
|
|
|
detect-engine-address.c
|
Fix various minor clang/scan-build warnings.
|
14 years ago |
|
detect-engine-address.h
|
…
|
|
|
detect-engine-alert.c
|
threshold: fix handling of multiple threshold.
|
14 years ago |
|
detect-engine-alert.h
|
…
|
|
|
detect-engine-dcepayload.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-engine-dcepayload.h
|
…
|
|
|
detect-engine-event.c
|
Add debug output to engine event.
|
14 years ago |
|
detect-engine-event.h
|
Stream engine: gap handling
|
14 years ago |
|
detect-engine-file.c
|
Rename signature init flags to indicate they are init flags.
|
14 years ago |
|
detect-engine-file.h
|
File carving -- enable reponse file extraction
|
14 years ago |
|
detect-engine-hcbd.c
|
support splitting mpm ctxs based on direction v2
|
14 years ago |
|
detect-engine-hcbd.h
|
support splitting mpm ctxs based on direction v2
|
14 years ago |
|
detect-engine-hcd.c
|
support splitting mpm ctxs based on direction v2
|
14 years ago |
|
detect-engine-hcd.h
|
support splitting mpm ctxs based on direction v2
|
14 years ago |
|
detect-engine-hhd.c
|
support splitting mpm ctxs based on direction v2
|
14 years ago |
|
detect-engine-hhd.h
|
bug 389 - support http response header inspection + fix bug with stateful inspection for sigs that would have both request/response inpection
|
14 years ago |
|
detect-engine-hmd.c
|
support splitting mpm ctxs based on direction v2
|
14 years ago |
|
detect-engine-hmd.h
|
support splitting mpm ctxs based on direction v2
|
14 years ago |
|
detect-engine-hrhd.c
|
fix compilation error for the new http response header mpm feature
|
14 years ago |
|
detect-engine-hrhd.h
|
support http response raw header inspection + carry out hrhd mpm on both request/response headers + add unittests for the same
|
14 years ago |
|
detect-engine-hrud.c
|
support splitting mpm ctxs based on direction v2
|
14 years ago |
|
detect-engine-hrud.h
|
support splitting mpm ctxs based on direction v2
|
14 years ago |
|
detect-engine-hsbd.c
|
support splitting mpm ctxs based on direction v2
|
14 years ago |
|
detect-engine-hsbd.h
|
support splitting mpm ctxs based on direction v2
|
14 years ago |
|
detect-engine-iponly.c
|
Fix various minor clang/scan-build warnings.
|
14 years ago |
|
detect-engine-iponly.h
|
IP Only cleanup: make most functions static. Add error message on address parsing issues.
|
14 years ago |
|
detect-engine-mpm.c
|
code cleanup over last 2 commits
|
14 years ago |
|
detect-engine-mpm.h
|
support splitting mpm ctxs based on direction v2
|
14 years ago |
|
detect-engine-payload.c
|
undo this commit -
|
14 years ago |
|
detect-engine-payload.h
|
…
|
|
|
detect-engine-port.c
|
Fix various minor clang/scan-build warnings.
|
14 years ago |
|
detect-engine-port.h
|
…
|
|
|
detect-engine-proto.c
|
Add tcp-pkt and tcp-stream 'protocols' to force a signature to inspect only packet or stream data.
|
14 years ago |
|
detect-engine-proto.h
|
Add tcp-pkt and tcp-stream 'protocols' to force a signature to inspect only packet or stream data.
|
14 years ago |
|
detect-engine-siggroup.c
|
Remove SIG_FLAG_MPM flag.
|
14 years ago |
|
detect-engine-siggroup.h
|
Make sure filemagic works properly regardless of filestore being in use for a flow.
|
14 years ago |
|
detect-engine-sigorder.c
|
Disable unittest that fails without libnet support.
|
14 years ago |
|
detect-engine-sigorder.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-engine-state.c
|
bug 389 - support http response header inspection + fix bug with stateful inspection for sigs that would have both request/response inpection
|
14 years ago |
|
detect-engine-state.h
|
Rework the way the http parser can tell the de_state to reset it's file section on arrival of new files in the same tx. Fixes a dead lock in the auto runmode.
|
14 years ago |
|
detect-engine-tag.c
|
…
|
|
|
detect-engine-tag.h
|
…
|
|
|
detect-engine-threshold.c
|
Move threshold to it's own sig match list.
|
14 years ago |
|
detect-engine-threshold.h
|
threshold: introduce SigGetThresholdTypeIter function
|
14 years ago |
|
detect-engine-uri.c
|
bug #341 - support for urilen check on both norm and raw buffers
|
14 years ago |
|
detect-engine-uri.h
|
…
|
|
|
detect-engine.c
|
treate ac-bs auto as single context
|
14 years ago |
|
detect-engine.h
|
…
|
|
|
detect-fast-pattern.c
|
Enforce flow direction for http_raw_header sigs. Fix unittests that missed the flow direction.
|
14 years ago |
|
detect-fast-pattern.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-file-data.c
|
file-data: initial file_data support
|
14 years ago |
|
detect-file-data.h
|
file-data: create initial keyword registration.
|
14 years ago |
|
detect-fileext.c
|
file-extraction: Disconnect file handling from flow and move into the app layer state.
|
14 years ago |
|
detect-fileext.h
|
Add negation to filename and fileext, use same syntax as with content.
|
14 years ago |
|
detect-filemagic.c
|
file handling: filemagic matching improvement
|
14 years ago |
|
detect-filemagic.h
|
File carving -- enable reponse file extraction
|
14 years ago |
|
detect-filename.c
|
file-extraction: Disconnect file handling from flow and move into the app layer state.
|
14 years ago |
|
detect-filename.h
|
Add negation to filename and fileext, use same syntax as with content.
|
14 years ago |
|
detect-filestore.c
|
Fix filestore match code not expecting NULL file ptr.
|
14 years ago |
|
detect-filestore.h
|
file store: respect flowbits and other keywords
|
14 years ago |
|
detect-flags.c
|
packet keywords only added for packet mpm. Rest in stream mpm. Update detection engine to handle the same
|
14 years ago |
|
detect-flags.h
|
…
|
|
|
detect-flow.c
|
Add signature direction (flow:toserver/flow:toclient) as a signature flag.
|
14 years ago |
|
detect-flow.h
|
…
|
|
|
detect-flowbits.c
|
Fix flowbits sigmatch structure added to the match and post-match list, causing corruption of the prev ptr. This lead to an endless loop condition in the thresholding code. Thanks to Chris Wakelin for reporting the issue.
|
14 years ago |
|
detect-flowbits.h
|
…
|
|
|
detect-flowint.c
|
Add post-match list, move flowbits set, etc functions to it. Move flowint set, etc functions to it as well.
|
14 years ago |
|
detect-flowint.h
|
…
|
|
|
detect-flowvar.c
|
…
|
|
|
detect-flowvar.h
|
…
|
|
|
detect-fragbits.c
|
packet keywords only added for packet mpm. Rest in stream mpm. Update detection engine to handle the same
|
14 years ago |
|
detect-fragbits.h
|
…
|
|
|
detect-fragoffset.c
|
packet keywords only added for packet mpm. Rest in stream mpm. Update detection engine to handle the same
|
14 years ago |
|
detect-fragoffset.h
|
…
|
|
|
detect-ftpbounce.c
|
modify all relevant app layer API calls to accomodate passing parser local storage argument
|
14 years ago |
|
detect-ftpbounce.h
|
…
|
|
|
detect-gid.c
|
…
|
|
|
detect-gid.h
|
…
|
|
|
detect-http-client-body.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-http-client-body.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-http-cookie.c
|
fixed relative handling for pcre cookie and method
|
14 years ago |
|
detect-http-cookie.h
|
…
|
|
|
detect-http-header.c
|
modify all relevant app layer API calls to accomodate passing parser local storage argument
|
14 years ago |
|
detect-http-header.h
|
…
|
|
|
detect-http-method.c
|
fixed relative handling for pcre cookie and method
|
14 years ago |
|
detect-http-method.h
|
…
|
|
|
detect-http-raw-header.c
|
Enforce flow direction for http_raw_header sigs. Fix unittests that missed the flow direction.
|
14 years ago |
|
detect-http-raw-header.h
|
…
|
|
|
detect-http-raw-uri.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-http-raw-uri.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-http-server-body.c
|
Fix HTTP state and raw stream not being inspected at the same time. Adds an exception to transaction id handling for HTTP.
|
14 years ago |
|
detect-http-server-body.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-http-stat-code.c
|
HTTP transaction handling improvement
|
14 years ago |
|
detect-http-stat-code.h
|
…
|
|
|
detect-http-stat-msg.c
|
HTTP transaction handling improvement
|
14 years ago |
|
detect-http-stat-msg.h
|
…
|
|
|
detect-http-uri.c
|
doc: create http support group
|
14 years ago |
|
detect-http-uri.h
|
…
|
|
|
detect-icmp-id.c
|
packet keywords only added for packet mpm. Rest in stream mpm. Update detection engine to handle the same
|
14 years ago |
|
detect-icmp-id.h
|
…
|
|
|
detect-icmp-seq.c
|
…
|
|
|
detect-icmp-seq.h
|
…
|
|
|
detect-icode.c
|
packet keywords only added for packet mpm. Rest in stream mpm. Update detection engine to handle the same
|
14 years ago |
|
detect-icode.h
|
…
|
|
|
detect-id.c
|
packet keywords only added for packet mpm. Rest in stream mpm. Update detection engine to handle the same
|
14 years ago |
|
detect-id.h
|
…
|
|
|
detect-ipopts.c
|
packet keywords only added for packet mpm. Rest in stream mpm. Update detection engine to handle the same
|
14 years ago |
|
detect-ipopts.h
|
…
|
|
|
detect-ipproto.c
|
Make 'make check' happy in a ipproto unittest.
|
14 years ago |
|
detect-ipproto.h
|
support multiple ipprotos in the same sig + unittest
|
14 years ago |
|
detect-isdataat.c
|
Enforce flow direction for http_raw_header sigs. Fix unittests that missed the flow direction.
|
14 years ago |
|
detect-isdataat.h
|
…
|
|
|
detect-itype.c
|
packet keywords only added for packet mpm. Rest in stream mpm. Update detection engine to handle the same
|
14 years ago |
|
detect-itype.h
|
…
|
|
|
detect-mark.c
|
…
|
|
|
detect-mark.h
|
…
|
|
|
detect-metadata.c
|
…
|
|
|
detect-metadata.h
|
…
|
|
|
detect-msg.c
|
…
|
|
|
detect-msg.h
|
…
|
|
|
detect-noalert.c
|
…
|
|
|
detect-noalert.h
|
…
|
|
|
detect-nocase.c
|
Introduce http_server_body keyword.
|
14 years ago |
|
detect-nocase.h
|
…
|
|
|
detect-offset.c
|
Cleaned up some error messages for detect distance and offset.
|
14 years ago |
|
detect-offset.h
|
…
|
|
|
detect-parse.c
|
bug #412 - Remove the commented out SigInitReal()
|
14 years ago |
|
detect-parse.h
|
Add function declaration for SigInitReal
|
14 years ago |
|
detect-pcre.c
|
Remove unused definitions in pcre code.
|
14 years ago |
|
detect-pcre.h
|
Introduce http_server_body keyword.
|
14 years ago |
|
detect-pktvar.c
|
…
|
|
|
detect-pktvar.h
|
…
|
|
|
detect-priority.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-priority.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-rawbytes.c
|
file-data: initial file_data support
|
14 years ago |
|
detect-rawbytes.h
|
…
|
|
|
detect-recursive.c
|
…
|
|
|
detect-recursive.h
|
…
|
|
|
detect-reference.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-reference.h
|
…
|
|
|
detect-replace.c
|
Fix printing of sizeof.
|
14 years ago |
|
detect-replace.h
|
…
|
|
|
detect-rev.c
|
Use strtoul instead of strtol for sid parsing. Fixes parsing of really large sid numbers. Fixes #393.
|
14 years ago |
|
detect-rev.h
|
…
|
|
|
detect-rpc.c
|
packet keywords only added for packet mpm. Rest in stream mpm. Update detection engine to handle the same
|
14 years ago |
|
detect-rpc.h
|
…
|
|
|
detect-sameip.c
|
packet keywords only added for packet mpm. Rest in stream mpm. Update detection engine to handle the same
|
14 years ago |
|
detect-sameip.h
|
…
|
|
|
detect-seq.c
|
packet keywords only added for packet mpm. Rest in stream mpm. Update detection engine to handle the same
|
14 years ago |
|
detect-seq.h
|
…
|
|
|
detect-sid.c
|
Use strtoul instead of strtol for sid parsing. Fixes parsing of really large sid numbers. Fixes #393.
|
14 years ago |
|
detect-sid.h
|
…
|
|
|
detect-ssh-proto-version.c
|
modify all relevant app layer API calls to accomodate passing parser local storage argument
|
14 years ago |
|
detect-ssh-proto-version.h
|
…
|
|
|
detect-ssh-software-version.c
|
modify all relevant app layer API calls to accomodate passing parser local storage argument
|
14 years ago |
|
detect-ssh-software-version.h
|
…
|
|
|
detect-ssl-state.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-ssl-state.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-ssl-version.c
|
Rename signature init flags to indicate they are init flags.
|
14 years ago |
|
detect-ssl-version.h
|
…
|
|
|
detect-stream_size.c
|
…
|
|
|
detect-stream_size.h
|
…
|
|
|
detect-tag.c
|
flow: shrink Flow datatype
|
14 years ago |
|
detect-tag.h
|
…
|
|
|
detect-threshold.c
|
Move threshold to it's own sig match list.
|
14 years ago |
|
detect-threshold.h
|
…
|
|
|
detect-tls-version.c
|
Rename signature init flags to indicate they are init flags.
|
14 years ago |
|
detect-tls-version.h
|
…
|
|
|
detect-tos.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-tos.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
detect-ttl.c
|
packet keywords only added for packet mpm. Rest in stream mpm. Update detection engine to handle the same
|
14 years ago |
|
detect-ttl.h
|
…
|
|
|
detect-uricontent.c
|
support splitting mpm ctxs based on direction v2
|
14 years ago |
|
detect-uricontent.h
|
support splitting mpm ctxs based on direction v2
|
14 years ago |
|
detect-urilen.c
|
bug #341 - support for urilen check on both norm and raw buffers
|
14 years ago |
|
detect-urilen.h
|
bug #341 - support for urilen check on both norm and raw buffers
|
14 years ago |
|
detect-window.c
|
packet keywords only added for packet mpm. Rest in stream mpm. Update detection engine to handle the same
|
14 years ago |
|
detect-window.h
|
…
|
|
|
detect-within.c
|
bug #411 - don't modify within/distance at setup time
|
14 years ago |
|
detect-within.h
|
…
|
|
|
detect.c
|
fix debug messages that have references to the old mpm contexts
|
14 years ago |
|
detect.h
|
support splitting mpm ctxs based on direction v2
|
14 years ago |
|
flow-alert-sid.c
|
…
|
|
|
flow-alert-sid.h
|
…
|
|
|
flow-bit.c
|
…
|
|
|
flow-bit.h
|
…
|
|
|
flow-hash.c
|
flow engine: convert flow hash code FlowRequeue call to FlowEnqueue.
|
14 years ago |
|
flow-hash.h
|
…
|
|
|
flow-manager.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
flow-manager.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
flow-private.h
|
…
|
|
|
flow-queue.c
|
flow engine: no longer allow FlowRequeue to be called with the same src and dst queue.
|
14 years ago |
|
flow-queue.h
|
flow engine: remove unneeded 'need_srclock' argument for FlowRequeue
|
14 years ago |
|
flow-timeout.c
|
Only force a pseudo packet inspection cycle for TCP streams in a state >= established.
|
14 years ago |
|
flow-timeout.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
flow-util.c
|
Flow: use condition system instead of short sleep
|
14 years ago |
|
flow-util.h
|
file-extraction: Disconnect file handling from flow and move into the app layer state.
|
14 years ago |
|
flow-var.c
|
…
|
|
|
flow-var.h
|
…
|
|
|
flow.c
|
Clean up default output. Use simpler output format for releases.
|
14 years ago |
|
flow.h
|
Let flow:only_stream and flow:no_stream set the require packet and require stream flags. Toss out sigs with conflicting settings. Rename flow:stream_only to flow:only_stream. Fixes #261.
|
14 years ago |
|
host.c
|
…
|
|
|
host.h
|
…
|
|
|
log-droplog.c
|
Switch 'fast', 'http-log', 'drop' and 'alert-debug' to SCConfLogOpenGeneric.
|
14 years ago |
|
log-droplog.h
|
…
|
|
|
log-file.c
|
Fix various minor clang/scan-build warnings.
|
14 years ago |
|
log-file.h
|
file extraction: add waldo option to file log module. This will store the last used file_id so extracted files won't get overwritten is Suricata is restarted.
|
14 years ago |
|
log-httplog.c
|
Register HTTP logger at registration, not thread init.
|
14 years ago |
|
log-httplog.h
|
…
|
|
|
log-pcap.c
|
Allow log-pcap to use both absolute and relative sguil-base-dir settings when in 'sguil' mode.
|
14 years ago |
|
log-pcap.h
|
…
|
|
|
output.c
|
…
|
|
|
output.h
|
SCConfLogOpenGeneric() abstraction for regular and AF_UNIX logs.
|
14 years ago |
|
packet-queue.c
|
…
|
|
|
packet-queue.h
|
…
|
|
|
pkt-var.c
|
…
|
|
|
pkt-var.h
|
…
|
|
|
ptxdump.py
|
…
|
|
|
queue.h
|
…
|
|
|
reputation.c
|
…
|
|
|
reputation.h
|
…
|
|
|
respond-reject-libnet11.c
|
…
|
|
|
respond-reject-libnet11.h
|
…
|
|
|
respond-reject.c
|
…
|
|
|
respond-reject.h
|
…
|
|
|
runmode-af-packet.c
|
Clean up csum detection output, misc fixes.
|
14 years ago |
|
runmode-af-packet.h
|
…
|
|
|
runmode-erf-dag.c
|
Remove unified1 output module.
|
14 years ago |
|
runmode-erf-dag.h
|
…
|
|
|
runmode-erf-file.c
|
Remove unified1 output module.
|
14 years ago |
|
runmode-erf-file.h
|
…
|
|
|
runmode-ipfw.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
runmode-ipfw.h
|
ipfw: Add support for autofp and worker runmode
|
14 years ago |
|
runmode-napatech.c
|
Napatech code formatting fixes.
|
14 years ago |
|
runmode-napatech.h
|
Fix compilation without napatech tech support enabled.
|
14 years ago |
|
runmode-nfq.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
runmode-nfq.h
|
nfq: add worker runmode support.
|
14 years ago |
|
runmode-pcap-file.c
|
Remove unified1 output module.
|
14 years ago |
|
runmode-pcap-file.h
|
…
|
|
|
runmode-pcap.c
|
Clean up csum detection output, misc fixes.
|
14 years ago |
|
runmode-pcap.h
|
…
|
|
|
runmode-pfring.c
|
Clean up csum detection output, misc fixes.
|
14 years ago |
|
runmode-pfring.h
|
…
|
|
|
runmodes.c
|
Initial Napatech support by Randy Caldejon / nPulse.
|
14 years ago |
|
runmodes.h
|
Initial Napatech support by Randy Caldejon / nPulse.
|
14 years ago |
|
source-af-packet.c
|
af-packet: fallback if 'kernel' mode is not supported
|
14 years ago |
|
source-af-packet.h
|
af-packet: add support for checksum verif mode
|
14 years ago |
|
source-erf-dag.c
|
…
|
|
|
source-erf-dag.h
|
…
|
|
|
source-erf-file.c
|
…
|
|
|
source-erf-file.h
|
…
|
|
|
source-ipfw.c
|
ipfw: suppress poll before sendto
|
14 years ago |
|
source-ipfw.h
|
ipfw: don't use socket lock in 'worker' mode
|
14 years ago |
|
source-napatech.c
|
Napatech code formatting fixes.
|
14 years ago |
|
source-napatech.h
|
Initial Napatech support by Randy Caldejon / nPulse.
|
14 years ago |
|
source-nfq-prototypes.h
|
…
|
|
|
source-nfq.c
|
Fix compilation warning.
|
14 years ago |
|
source-nfq.h
|
nfq: do not use mutex in 'worker' mode
|
14 years ago |
|
source-pcap-file.c
|
Clean up default output. Use simpler output format for releases.
|
14 years ago |
|
source-pcap-file.h
|
…
|
|
|
source-pcap.c
|
Fix various minor clang/scan-build warnings.
|
14 years ago |
|
source-pcap.h
|
pcap: add support for checksum verif mode
|
14 years ago |
|
source-pfring.c
|
pf-ring: add support for checksum verif mode
|
14 years ago |
|
source-pfring.h
|
pf-ring: add support for checksum verif mode
|
14 years ago |
|
stream-tcp-inline.c
|
…
|
|
|
stream-tcp-inline.h
|
…
|
|
|
stream-tcp-private.h
|
Trigger raw stream reassembly on receiving a full HTTP request or response.
|
14 years ago |
|
stream-tcp-reassemble.c
|
Fix various minor clang/scan-build warnings.
|
14 years ago |
|
stream-tcp-reassemble.h
|
Trigger raw stream reassembly on receiving a full HTTP request or response.
|
14 years ago |
|
stream-tcp-sack.c
|
…
|
|
|
stream-tcp-sack.h
|
…
|
|
|
stream-tcp-util.c
|
…
|
|
|
stream-tcp-util.h
|
…
|
|
|
stream-tcp.c
|
Clean up default output. Use simpler output format for releases.
|
14 years ago |
|
stream-tcp.h
|
Add counters for SYN, SYN/ACK and RST TCP packets. Issue #251.
|
14 years ago |
|
stream.c
|
stream: Change return of StreamSegmentForEach
|
14 years ago |
|
stream.h
|
Introduce StreamSegmentForEach function
|
14 years ago |
|
suricata-common.h
|
Add functions to determine whether a path is absolute or relative.
|
14 years ago |
|
suricata.c
|
Initial Napatech support by Randy Caldejon / nPulse.
|
14 years ago |
|
suricata.h
|
1.3 branch has opened
|
14 years ago |
|
threads.c
|
…
|
|
|
threads.h
|
Register HTTP logger at registration, not thread init.
|
14 years ago |
|
threadvars.h
|
…
|
|
|
tm-modules.c
|
Initial Napatech support by Randy Caldejon / nPulse.
|
14 years ago |
|
tm-modules.h
|
Add Init and DeInit calls to the thread module API.
|
14 years ago |
|
tm-queuehandlers.c
|
…
|
|
|
tm-queuehandlers.h
|
…
|
|
|
tm-queues.c
|
…
|
|
|
tm-queues.h
|
…
|
|
|
tm-threads-common.h
|
Initial Napatech support by Randy Caldejon / nPulse.
|
14 years ago |
|
tm-threads.c
|
Threading: do not keep a slots post_pq locked while processing the packets.
|
14 years ago |
|
tm-threads.h
|
Threading: do not keep a slots post_pq locked while processing the packets.
|
14 years ago |
|
tmqh-flow.c
|
introduce SCPerfSyncCounters/SCPerfSyncCounters macro to synchronize counters
|
14 years ago |
|
tmqh-flow.h
|
…
|
|
|
tmqh-nfq.c
|
…
|
|
|
tmqh-nfq.h
|
…
|
|
|
tmqh-packetpool.c
|
…
|
|
|
tmqh-packetpool.h
|
…
|
|
|
tmqh-ringbuffer.c
|
introduce SCPerfSyncCounters/SCPerfSyncCounters macro to synchronize counters
|
14 years ago |
|
tmqh-ringbuffer.h
|
…
|
|
|
tmqh-simple.c
|
introduce SCPerfSyncCounters/SCPerfSyncCounters macro to synchronize counters
|
14 years ago |
|
tmqh-simple.h
|
…
|
|
|
util-action.c
|
undo this commit -
|
14 years ago |
|
util-action.h
|
…
|
|
|
util-affinity.c
|
Fixes for building in Cygwin.
|
14 years ago |
|
util-affinity.h
|
Fixes for building in Cygwin.
|
14 years ago |
|
util-atomic.h
|
Improve atomic operation support detection. Fixes #342.
|
14 years ago |
|
util-binsearch.c
|
…
|
|
|
util-binsearch.h
|
…
|
|
|
util-bloomfilter-counting.c
|
Clean up for unittests code: only compile unittest api code when unittests are enabled. Fix unittest code that wasn't wrapped in the proper UNITTESTS ifdefs.
|
14 years ago |
|
util-bloomfilter-counting.h
|
…
|
|
|
util-bloomfilter.c
|
…
|
|
|
util-bloomfilter.h
|
…
|
|
|
util-byte.c
|
…
|
|
|
util-byte.h
|
Win32 compile fixes.
|
14 years ago |
|
util-checksum.c
|
Fix checksum offloading auto detection typo: it should be 1/5th instead of 1/10th.
|
14 years ago |
|
util-checksum.h
|
Assume offloading in use if 1/10th of the packets has a bad checksum.
|
14 years ago |
|
util-cidr.c
|
…
|
|
|
util-cidr.h
|
…
|
|
|
util-classification-config.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
util-classification-config.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
util-clock.h
|
…
|
|
|
util-coredump-config.c
|
Convert missing coredump config to debug.
|
14 years ago |
|
util-coredump-config.h
|
Enable/disable core dump in config (feature 319)
|
14 years ago |
|
util-cpu.c
|
…
|
|
|
util-cpu.h
|
…
|
|
|
util-cuda-handlers.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
util-cuda-handlers.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
util-cuda.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
util-cuda.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
util-daemon.c
|
Rewrite SetupLogging to not leak the fd. Thanks to Steve Grubb for advice on this.
|
14 years ago |
|
util-daemon.h
|
…
|
|
|
util-debug-filters.c
|
Fix various minor clang/scan-build warnings.
|
14 years ago |
|
util-debug-filters.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
util-debug.c
|
logging: don't display debug message before setting params.
|
14 years ago |
|
util-debug.h
|
Clean up default output. Use simpler output format for releases.
|
14 years ago |
|
util-decode-asn1.c
|
…
|
|
|
util-decode-asn1.h
|
…
|
|
|
util-device.c
|
Clean up csum detection output, misc fixes.
|
14 years ago |
|
util-device.h
|
Clean up csum detection output, misc fixes.
|
14 years ago |
|
util-enum.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
util-enum.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
util-error.c
|
Initial Napatech support by Randy Caldejon / nPulse.
|
14 years ago |
|
util-error.h
|
Initial Napatech support by Randy Caldejon / nPulse.
|
14 years ago |
|
util-file.c
|
file store: respect flowbits and other keywords
|
14 years ago |
|
util-file.h
|
file store: respect flowbits and other keywords
|
14 years ago |
|
util-fix_checksum.c
|
…
|
|
|
util-fix_checksum.h
|
…
|
|
|
util-fmemopen.c
|
…
|
|
|
util-fmemopen.h
|
…
|
|
|
util-hash.c
|
Clean up for unittests code: only compile unittest api code when unittests are enabled. Fix unittest code that wasn't wrapped in the proper UNITTESTS ifdefs.
|
14 years ago |
|
util-hash.h
|
…
|
|
|
util-hashlist.c
|
…
|
|
|
util-hashlist.h
|
…
|
|
|
util-host-os-info.c
|
Fix various minor clang/scan-build warnings.
|
14 years ago |
|
util-host-os-info.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
util-ioctl.c
|
…
|
|
|
util-ioctl.h
|
…
|
|
|
util-logopenfile.c
|
Fix PathIsAbsolute function not dealing with CYGWIN. Handle absolute paths in logfile api.
|
14 years ago |
|
util-logopenfile.h
|
SCConfLogOpenGeneric() abstraction for regular and AF_UNIX logs.
|
14 years ago |
|
util-magic.c
|
File carving -- enable reponse file extraction
|
14 years ago |
|
util-magic.h
|
File carving -- enable reponse file extraction
|
14 years ago |
|
util-mem.h
|
Win32 compile fixes.
|
14 years ago |
|
util-memcmp.c
|
…
|
|
|
util-memcmp.h
|
…
|
|
|
util-misc.c
|
fix bug in size parsing API. Pass the string returned by pcre_get_substring and not the passed arg. Also use strtod. Solves usage issues on windows
|
14 years ago |
|
util-misc.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
util-mpm-ac-bs.c
|
Fix bug in ac-bs search function
|
14 years ago |
|
util-mpm-ac-bs.h
|
Support for new MPM ac-bs added
|
14 years ago |
|
util-mpm-ac-gfbs.c
|
support splitting mpm ctxs based on direction v2
|
14 years ago |
|
util-mpm-ac-gfbs.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
util-mpm-ac.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
util-mpm-ac.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
util-mpm-b2g-cuda-kernel.cu
|
Changed my email address to anoopsaldanha@gmail.com from my current one - Should have been an amend over my previous commit, but that commit's pushed out
|
14 years ago |
|
util-mpm-b2g-cuda.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
util-mpm-b2g-cuda.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
util-mpm-b2g.c
|
…
|
|
|
util-mpm-b2g.h
|
…
|
|
|
util-mpm-b2gc.c
|
…
|
|
|
util-mpm-b2gc.h
|
…
|
|
|
util-mpm-b2gm.c
|
…
|
|
|
util-mpm-b2gm.h
|
…
|
|
|
util-mpm-b3g.c
|
…
|
|
|
util-mpm-b3g.h
|
…
|
|
|
util-mpm-wumanber.c
|
…
|
|
|
util-mpm-wumanber.h
|
…
|
|
|
util-mpm.c
|
support splitting mpm ctxs based on direction v2
|
14 years ago |
|
util-mpm.h
|
support splitting mpm ctxs based on direction v2
|
14 years ago |
|
util-optimize.h
|
…
|
|
|
util-path.c
|
Fix PathIsAbsolute function not dealing with CYGWIN. Handle absolute paths in logfile api.
|
14 years ago |
|
util-path.h
|
Add functions to determine whether a path is absolute or relative.
|
14 years ago |
|
util-pidfile.c
|
…
|
|
|
util-pidfile.h
|
…
|
|
|
util-pool.c
|
Fix a number of potential issues found by CLANG and cppcheck.
|
14 years ago |
|
util-pool.h
|
…
|
|
|
util-print.c
|
Fix various minor clang/scan-build warnings.
|
14 years ago |
|
util-print.h
|
…
|
|
|
util-privs.c
|
Remove duplicate sys/prctl.h configure check. Wrap another include in HAVE_SYS_PRCTL_H.
|
14 years ago |
|
util-privs.h
|
…
|
|
|
util-profiling.c
|
Introduce http_server_body keyword.
|
14 years ago |
|
util-profiling.h
|
…
|
|
|
util-proto-name.c
|
Win32 compile fixes.
|
14 years ago |
|
util-proto-name.h
|
Win32 compile fixes.
|
14 years ago |
|
util-radix-tree.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
util-radix-tree.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
util-random.c
|
…
|
|
|
util-random.h
|
…
|
|
|
util-reference-config.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
util-reference-config.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
util-ringbuffer.c
|
…
|
|
|
util-ringbuffer.h
|
…
|
|
|
util-rule-vars.c
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
util-rule-vars.h
|
Changed my email address to anoopsaldanha at gmail dot com from my current one
|
14 years ago |
|
util-runmodes.c
|
Make live worker runmode threads adhere to the 'detect' cpu affinity settings.
|
14 years ago |
|
util-runmodes.h
|
runmode: Add support for IPS running mode
|
14 years ago |
|
util-spm-bm.c
|
…
|
|
|
util-spm-bm.h
|
filename and fileext keywords
|
14 years ago |
|
util-spm-bs.c
|
Fix various minor clang/scan-build warnings.
|
14 years ago |
|
util-spm-bs.h
|
…
|
|
|
util-spm-bs2bm.c
|
…
|
|
|
util-spm-bs2bm.h
|
…
|
|
|
util-spm.c
|
…
|
|
|
util-spm.h
|
…
|
|
|
util-strlcatu.c
|
…
|
|
|
util-strlcpyu.c
|
…
|
|
|
util-syslog.c
|
…
|
|
|
util-syslog.h
|
…
|
|
|
util-threshold-config.c
|
Move threshold to it's own sig match list.
|
14 years ago |
|
util-threshold-config.h
|
…
|
|
|
util-time.c
|
…
|
|
|
util-time.h
|
…
|
|
|
util-unittest-helper.c
|
Clean up for unittests code: only compile unittest api code when unittests are enabled. Fix unittest code that wasn't wrapped in the proper UNITTESTS ifdefs.
|
14 years ago |
|
util-unittest-helper.h
|
Clean up for unittests code: only compile unittest api code when unittests are enabled. Fix unittest code that wasn't wrapped in the proper UNITTESTS ifdefs.
|
14 years ago |
|
util-unittest.c
|
Clean up for unittests code: only compile unittest api code when unittests are enabled. Fix unittest code that wasn't wrapped in the proper UNITTESTS ifdefs.
|
14 years ago |
|
util-unittest.h
|
Clean up for unittests code: only compile unittest api code when unittests are enabled. Fix unittest code that wasn't wrapped in the proper UNITTESTS ifdefs.
|
14 years ago |
|
util-validate.h
|
Improve debug validation code for packet, add new macro for flow.
|
14 years ago |
|
util-var-name.c
|
…
|
|
|
util-var-name.h
|
…
|
|
|
util-var.c
|
…
|
|
|
util-var.h
|
…
|
|
|
util-vector.h
|
…
|
|
|
win32-misc.c
|
Win32 compile fixes.
|
14 years ago |
|
win32-misc.h
|
Win32 compile fixes.
|
14 years ago |
|
win32-service.c
|
…
|
|
|
win32-service.h
|
…
|
|
|
win32-syslog.h
|
…
|
|
