| .. |
|
Makefile.am
|
outputs: vars log
|
8 years ago |
|
action-globals.h
|
…
|
|
|
alert-debuglog.c
|
pkt-var: use id instead of name pointer
|
8 years ago |
|
alert-debuglog.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
alert-fastlog.c
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
alert-fastlog.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
alert-prelude.c
|
alert: silence compiler type warning
|
9 years ago |
|
alert-prelude.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
alert-syslog.c
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
alert-syslog.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
alert-unified2-alert.c
|
unified2: nostamp and file rotation
|
8 years ago |
|
alert-unified2-alert.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
app-layer-dcerpc-common.h
|
dcerpc: cleanup list handling
|
9 years ago |
|
app-layer-dcerpc-udp.c
|
app-layer: add ThreadVars to AppLayerParserParse
|
9 years ago |
|
app-layer-dcerpc-udp.h
|
…
|
|
|
app-layer-dcerpc.c
|
smb/dcerpc: use tx api
|
8 years ago |
|
app-layer-dcerpc.h
|
smb/dcerpc: use tx api
|
8 years ago |
|
app-layer-detect-proto.c
|
afl: fix ENIP, switch DNS to UDP and add --afl-dnstcp*
|
9 years ago |
|
app-layer-detect-proto.h
|
app-layer: support to server and to client probing parsers
|
9 years ago |
|
app-layer-dnp3-objects.c
|
dnp3: rename "index" variables to "point_index"
|
9 years ago |
|
app-layer-dnp3-objects.h
|
DNP3: Application layer decoder.
|
9 years ago |
|
app-layer-dnp3.c
|
afl: fix ENIP, switch DNS to UDP and add --afl-dnstcp*
|
9 years ago |
|
app-layer-dnp3.h
|
DNP3: Application layer decoder.
|
9 years ago |
|
app-layer-dns-common.c
|
dns: fix out of bounds read
|
9 years ago |
|
app-layer-dns-common.h
|
dns: support back to back requests without a response
|
9 years ago |
|
app-layer-dns-tcp.c
|
dns (tcp) - fix coverity CIDs 1374306, 1374305
|
9 years ago |
|
app-layer-dns-tcp.h
|
…
|
|
|
app-layer-dns-udp.c
|
afl: fix ENIP, switch DNS to UDP and add --afl-dnstcp*
|
9 years ago |
|
app-layer-dns-udp.h
|
…
|
|
|
app-layer-enip-common.c
|
enip/cip: improve output & style
|
9 years ago |
|
app-layer-enip-common.h
|
enip/cip: improve output & style
|
9 years ago |
|
app-layer-enip.c
|
afl: fix ENIP, switch DNS to UDP and add --afl-dnstcp*
|
9 years ago |
|
app-layer-enip.h
|
Adding SCADA EtherNet/IP and CIP protocol support
|
9 years ago |
|
app-layer-events.c
|
…
|
|
|
app-layer-events.h
|
app-layer-events: remove unused API options
|
8 years ago |
|
app-layer-ftp.c
|
ftp: parser and ftpbounce update
|
8 years ago |
|
app-layer-ftp.h
|
ftp: parser and ftpbounce update
|
8 years ago |
|
app-layer-htp-body.c
|
http: fix memory leak in error path
|
9 years ago |
|
app-layer-htp-body.h
|
http: add per direction config for body parsing
|
9 years ago |
|
app-layer-htp-file.c
|
util-file: introduce new functions for file size
|
9 years ago |
|
app-layer-htp-file.h
|
htp file: constify name/data args
|
9 years ago |
|
app-layer-htp-libhtp.c
|
…
|
|
|
app-layer-htp-libhtp.h
|
…
|
|
|
app-layer-htp-mem.c
|
htp: add HTPCalloc wrapper
|
9 years ago |
|
app-layer-htp-mem.h
|
htp: add HTPCalloc wrapper
|
9 years ago |
|
app-layer-htp-xff.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
app-layer-htp-xff.h
|
…
|
|
|
app-layer-htp.c
|
http: allow lower/mixed case in proto detect
|
9 years ago |
|
app-layer-htp.h
|
http: track if request/response have trailers
|
9 years ago |
|
app-layer-modbus.c
|
afl: fix ENIP, switch DNS to UDP and add --afl-dnstcp*
|
9 years ago |
|
app-layer-modbus.h
|
modbus: register logger functions
|
9 years ago |
|
app-layer-nbss.h
|
…
|
|
|
app-layer-parser.c
|
afl: fix ENIP, switch DNS to UDP and add --afl-dnstcp*
|
9 years ago |
|
app-layer-parser.h
|
afl: fix ENIP, switch DNS to UDP and add --afl-dnstcp*
|
9 years ago |
|
app-layer-protos.c
|
DNP3: Application layer decoder.
|
9 years ago |
|
app-layer-protos.h
|
DNP3: Application layer decoder.
|
9 years ago |
|
app-layer-smb.c
|
smb/dcerpc: use tx api
|
8 years ago |
|
app-layer-smb.h
|
dcerpc: simplify common detect code
|
8 years ago |
|
app-layer-smb2.c
|
app-layer: add ThreadVars to AppLayerParserParse
|
9 years ago |
|
app-layer-smb2.h
|
…
|
|
|
app-layer-smtp.c
|
mpm/spm: check for SSSE3 and enable/disable HS
|
9 years ago |
|
app-layer-smtp.h
|
smtp: improve thread data use
|
9 years ago |
|
app-layer-ssh.c
|
ssh: convert app-layer parser to be tx aware
|
8 years ago |
|
app-layer-ssh.h
|
lua: convert lua output to be tx aware
|
8 years ago |
|
app-layer-ssl.c
|
tls: introduce 'cert ready' state
|
9 years ago |
|
app-layer-ssl.h
|
tls: introduce 'cert ready' state
|
9 years ago |
|
app-layer-template.c
|
app-layer: support to server and to client probing parsers
|
9 years ago |
|
app-layer-template.h
|
app-layer templates: cleanups
|
9 years ago |
|
app-layer-tls-handshake.c
|
app-layer-ssl: add validity dates from certificate
|
9 years ago |
|
app-layer-tls-handshake.h
|
…
|
|
|
app-layer.c
|
app-layer counters: count failed protocol detect
|
9 years ago |
|
app-layer.h
|
app-layer: tx counter implementation
|
9 years ago |
|
conf-yaml-loader.c
|
stat: suppress CID 1293508 and 1312013
|
9 years ago |
|
conf-yaml-loader.h
|
…
|
|
|
conf.c
|
yaml: fix tests for -Wshadow
|
9 years ago |
|
conf.h
|
…
|
|
|
counters.c
|
unix-socket: add auto mode
|
9 years ago |
|
counters.h
|
jansson: include in suricata-common.h
|
9 years ago |
|
data-queue.c
|
…
|
|
|
data-queue.h
|
…
|
|
|
debug.h
|
…
|
|
|
decode-afl.c
|
afl: pass a packet queue to decoder calls
|
9 years ago |
|
decode-erspan.c
|
…
|
|
|
decode-erspan.h
|
…
|
|
|
decode-ethernet.c
|
decode: support Cisco Fabric Path / DCE
|
9 years ago |
|
decode-ethernet.h
|
decode: support Cisco Fabric Path / DCE
|
9 years ago |
|
decode-events.c
|
defrag: use frag_pkt_too_large instead of frag_too_large
|
9 years ago |
|
decode-events.h
|
defrag: use frag_pkt_too_large instead of frag_too_large
|
9 years ago |
|
decode-gre.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
decode-gre.h
|
…
|
|
|
decode-icmpv4.c
|
flow: move flow handling into worker threads
|
9 years ago |
|
decode-icmpv4.h
|
Add macro for TCP and UDP header access
|
9 years ago |
|
decode-icmpv6.c
|
decode-icmpv6: add missing types
|
9 years ago |
|
decode-icmpv6.h
|
decode-icmpv6: add missing types
|
9 years ago |
|
decode-ipv4.c
|
flow: move flow handling into worker threads
|
9 years ago |
|
decode-ipv4.h
|
ipv4: removed unused variables
|
9 years ago |
|
decode-ipv6.c
|
ipv6: simplify ext hdr parsing
|
9 years ago |
|
decode-ipv6.h
|
ipv6: simplify ext hdr parsing and storage
|
9 years ago |
|
decode-mpls.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
decode-mpls.h
|
…
|
|
|
decode-null.c
|
…
|
|
|
decode-null.h
|
…
|
|
|
decode-ppp.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
decode-ppp.h
|
…
|
|
|
decode-pppoe.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
decode-pppoe.h
|
…
|
|
|
decode-raw.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
decode-raw.h
|
…
|
|
|
decode-sctp.c
|
flow: move flow handling into worker threads
|
9 years ago |
|
decode-sctp.h
|
…
|
|
|
decode-sll.c
|
…
|
|
|
decode-sll.h
|
…
|
|
|
decode-tcp.c
|
flow: move flow handling into worker threads
|
9 years ago |
|
decode-tcp.h
|
Add macro for TCP and UDP header access
|
9 years ago |
|
decode-template.c
|
…
|
|
|
decode-template.h
|
…
|
|
|
decode-teredo.c
|
…
|
|
|
decode-teredo.h
|
…
|
|
|
decode-udp.c
|
flow: move flow handling into worker threads
|
9 years ago |
|
decode-udp.h
|
Add macro for TCP and UDP header access
|
9 years ago |
|
decode-vlan.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
decode-vlan.h
|
…
|
|
|
decode.c
|
afl: improve packet fuzz testing
|
9 years ago |
|
decode.h
|
pktvars: same name pktvars, key-value vars
|
8 years ago |
|
defrag-config.c
|
defrag: free defrag tree at exit
|
9 years ago |
|
defrag-config.h
|
defrag: free defrag tree at exit
|
9 years ago |
|
defrag-hash.c
|
defrag - take protocol into account during re-assembly
|
9 years ago |
|
defrag-hash.h
|
…
|
|
|
defrag-queue.c
|
…
|
|
|
defrag-queue.h
|
…
|
|
|
defrag-timeout.c
|
…
|
|
|
defrag-timeout.h
|
…
|
|
|
defrag.c
|
defrag - take protocol into account during re-assembly
|
9 years ago |
|
defrag.h
|
defrag - take protocol into account during re-assembly
|
9 years ago |
|
detect-ack.c
|
detect: get rid of Signature::sm_lists
|
8 years ago |
|
detect-ack.h
|
…
|
|
|
detect-app-layer-event.c
|
detect: add and use util func for alproto sets
|
8 years ago |
|
detect-app-layer-event.h
|
…
|
|
|
detect-app-layer-protocol.c
|
detect: remove the AMATCH list
|
8 years ago |
|
detect-app-layer-protocol.h
|
…
|
|
|
detect-asn1.c
|
detect: make setup/free/match funcs static where possible
|
8 years ago |
|
detect-asn1.h
|
…
|
|
|
detect-base64-data.c
|
file_data: dynamic buffer
|
8 years ago |
|
detect-base64-data.h
|
detect: constify Signature/SigMatch use at runtime
|
8 years ago |
|
detect-base64-decode.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-base64-decode.h
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-bypass.c
|
detect: remove AppLayerMatch API call
|
8 years ago |
|
detect-bypass.h
|
detect: add bypass keyword
|
9 years ago |
|
detect-byte-extract.c
|
detect: add and use util func for alproto sets
|
8 years ago |
|
detect-byte-extract.h
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-bytejump.c
|
detect: add and use util func for alproto sets
|
8 years ago |
|
detect-bytejump.h
|
detect: make setup/free/match funcs static where possible
|
8 years ago |
|
detect-bytetest.c
|
detect: add and use util func for alproto sets
|
8 years ago |
|
detect-bytetest.h
|
detect: make setup/free/match funcs static where possible
|
8 years ago |
|
detect-cipservice.c
|
detect: add and use util func for alproto sets
|
8 years ago |
|
detect-cipservice.h
|
detect: make setup/free/match funcs static where possible
|
8 years ago |
|
detect-classtype.c
|
detect: make setup/free/match funcs static where possible
|
8 years ago |
|
detect-classtype.h
|
…
|
|
|
detect-content.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-content.h
|
spm: add and use new SPM API
|
9 years ago |
|
detect-csum.c
|
detect: remove hardcoded sm_list logic from setup
|
8 years ago |
|
detect-csum.h
|
…
|
|
|
detect-dce-iface.c
|
detect: add and use util func for alproto sets
|
8 years ago |
|
detect-dce-iface.h
|
dcerpc: simplify common detect code
|
8 years ago |
|
detect-dce-opnum.c
|
detect: add and use util func for alproto sets
|
8 years ago |
|
detect-dce-opnum.h
|
detect: make setup/free/match funcs static where possible
|
8 years ago |
|
detect-dce-stub-data.c
|
detect: add and use util func for alproto sets
|
8 years ago |
|
detect-dce-stub-data.h
|
detect: make setup/free/match funcs static where possible
|
8 years ago |
|
detect-depth.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-depth.h
|
…
|
|
|
detect-detection-filter.c
|
detect: remove hardcoded sm_list logic from setup
|
8 years ago |
|
detect-detection-filter.h
|
detect: make setup/free/match funcs static where possible
|
8 years ago |
|
detect-distance.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-distance.h
|
…
|
|
|
detect-dnp3.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-dnp3.h
|
DNP3: dnp3_data, dnp3_func, dnp3_ind, dnp3_obj rule keywords
|
9 years ago |
|
detect-dns-query.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-dns-query.h
|
dns_query: mpm prefilter engine
|
9 years ago |
|
detect-dsize.c
|
detect: remove hardcoded sm_list logic from setup
|
8 years ago |
|
detect-dsize.h
|
…
|
|
|
detect-engine-address-ipv4.c
|
Removed duplicate include statements.
|
9 years ago |
|
detect-engine-address-ipv4.h
|
…
|
|
|
detect-engine-address-ipv6.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
detect-engine-address-ipv6.h
|
…
|
|
|
detect-engine-address.c
|
address parsing: fix memory leak in error path
|
9 years ago |
|
detect-engine-address.h
|
alert: fix rate_filter issues
|
9 years ago |
|
detect-engine-alert.c
|
detect alert/threshold/tag: sm_list -> sm_array
|
8 years ago |
|
detect-engine-alert.h
|
detect: constify Signature/SigMatch use at runtime
|
8 years ago |
|
detect-engine-analyzer.c
|
dnp3: dynamic buffers/lists
|
8 years ago |
|
detect-engine-analyzer.h
|
detect: constify mpm/detect funcs
|
9 years ago |
|
detect-engine-content-inspection.c
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-content-inspection.h
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-dcepayload.c
|
dce: remove commented out code
|
8 years ago |
|
detect-engine-dcepayload.h
|
detect: remove DMATCH list
|
8 years ago |
|
detect-engine-dns.c
|
detect: use detect list passed to generic funcs
|
8 years ago |
|
detect-engine-dns.h
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-enip.c
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-enip.h
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-event.c
|
detect: constify Signature/SigMatch use at runtime
|
8 years ago |
|
detect-engine-event.h
|
decode-events: counters for decode events errors
|
9 years ago |
|
detect-engine-file.c
|
detect: unify FileMatch API with other calls
|
8 years ago |
|
detect-engine-file.h
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-filedata-smtp.c
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-filedata-smtp.h
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-hcbd.c
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-hcbd.h
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-hcd.c
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-hcd.h
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-hhhd.c
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-hhhd.h
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-hmd.c
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-hmd.h
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-hrhd.c
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-hrhd.h
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-hrhhd.c
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-hrhhd.h
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-hrud.c
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-hrud.h
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-hsbd.c
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-hsbd.h
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-hscd.c
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-hscd.h
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-hsmd.c
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-hsmd.h
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-hua.c
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-hua.h
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-iponly.c
|
detect: get rid of Signature::sm_lists
|
8 years ago |
|
detect-engine-iponly.h
|
…
|
|
|
detect-engine-loader.c
|
multi-tenants: fix minor memleak
|
9 years ago |
|
detect-engine-loader.h
|
…
|
|
|
detect-engine-modbus.c
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-modbus.h
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-mpm.c
|
http_header: remove old files
|
8 years ago |
|
detect-engine-mpm.h
|
detect-engine-mpm: api cleanup
|
8 years ago |
|
detect-engine-payload.c
|
detect: get rid of Signature::sm_lists
|
8 years ago |
|
detect-engine-payload.h
|
detect: constify Signature/SigMatch use at runtime
|
8 years ago |
|
detect-engine-port.c
|
Fix port parsing in config file, added one more corresponding test.
|
9 years ago |
|
detect-engine-port.h
|
detect-port: remove debug mem counters
|
9 years ago |
|
detect-engine-prefilter-common.c
|
detect: move init only Signature members to init_data
|
8 years ago |
|
detect-engine-prefilter-common.h
|
prefilter: add 'extra match' logic to packet engines
|
9 years ago |
|
detect-engine-prefilter.c
|
prefilter: fix -Wshadow warnings
|
9 years ago |
|
detect-engine-prefilter.h
|
prefilter: use array of engines per sgh
|
9 years ago |
|
detect-engine-profile.c
|
detect: move init only Signature members to init_data
|
8 years ago |
|
detect-engine-profile.h
|
profiling: output post-prefilter matches
|
9 years ago |
|
detect-engine-proto.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
detect-engine-proto.h
|
detect: constify mpm/detect funcs
|
9 years ago |
|
detect-engine-siggroup.c
|
detect: remove dead code
|
9 years ago |
|
detect-engine-siggroup.h
|
detect: rename non_mpm lists/vars to non_pf
|
9 years ago |
|
detect-engine-sigorder.c
|
pcre: support multiple captures
|
8 years ago |
|
detect-engine-sigorder.h
|
…
|
|
|
detect-engine-state.c
|
pkt-var: abuse flowvar postmatch logic for pktvars
|
8 years ago |
|
detect-engine-state.h
|
detect: remove unused state file flag
|
8 years ago |
|
detect-engine-tag.c
|
detect: simplify flow locking
|
9 years ago |
|
detect-engine-tag.h
|
…
|
|
|
detect-engine-template.c
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-template.h
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-threshold.c
|
detect alert/threshold/tag: sm_list -> sm_array
|
8 years ago |
|
detect-engine-threshold.h
|
detect alert/threshold/tag: sm_list -> sm_array
|
8 years ago |
|
detect-engine-tls.c
|
detect: use detect list passed to generic funcs
|
8 years ago |
|
detect-engine-tls.h
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine-uri.c
|
flow: remove unused Flow::de_state
|
8 years ago |
|
detect-engine-uri.h
|
detect: pass SigMatchData to inspect functions
|
8 years ago |
|
detect-engine.c
|
coverity: suppress CID 1400648
|
8 years ago |
|
detect-engine.h
|
detect: use engine version instead of id
|
8 years ago |
|
detect-fast-pattern.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-fast-pattern.h
|
fast_pattern: register app layer mpms automatically
|
9 years ago |
|
detect-file-data.c
|
detect: remove AppLayerMatch API call
|
8 years ago |
|
detect-file-data.h
|
…
|
|
|
detect-file-hash-common.c
|
detect: move file hash common code
|
8 years ago |
|
detect-file-hash-common.h
|
detect: move file hash common code
|
8 years ago |
|
detect-fileext.c
|
detect: unify FileMatch API with other calls
|
8 years ago |
|
detect-fileext.h
|
…
|
|
|
detect-filemagic.c
|
detect: unify FileMatch API with other calls
|
8 years ago |
|
detect-filemagic.h
|
magic: make optional
|
9 years ago |
|
detect-filemd5.c
|
detect: move file hash common code
|
8 years ago |
|
detect-filemd5.h
|
file-hashing: common code added
|
9 years ago |
|
detect-filename.c
|
detect: unify FileMatch API with other calls
|
8 years ago |
|
detect-filename.h
|
…
|
|
|
detect-filesha1.c
|
detect: move file hash common code
|
8 years ago |
|
detect-filesha1.h
|
file-hashing: added support for SHA-1 file hashing
|
9 years ago |
|
detect-filesha256.c
|
detect: move file hash common code
|
8 years ago |
|
detect-filesha256.h
|
file-hashing: added support for SHA-256 file hashing
|
9 years ago |
|
detect-filesize.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-filesize.h
|
…
|
|
|
detect-filestore.c
|
detect: unify FileMatch API with other calls
|
8 years ago |
|
detect-filestore.h
|
detect: constify Signature/SigMatch use at runtime
|
8 years ago |
|
detect-flags.c
|
detect: get rid of Signature::sm_lists
|
8 years ago |
|
detect-flags.h
|
detect: SYN flags
|
9 years ago |
|
detect-flow.c
|
detect: move init only Signature members to init_data
|
8 years ago |
|
detect-flow.h
|
detect-flow: no_frag and only_frag keyword support
|
9 years ago |
|
detect-flowbits.c
|
var-names: expose outside of detect engine
|
8 years ago |
|
detect-flowbits.h
|
var-names: expose outside of detect engine
|
8 years ago |
|
detect-flowint.c
|
var-names: expose outside of detect engine
|
8 years ago |
|
detect-flowint.h
|
var-names: expose outside of detect engine
|
8 years ago |
|
detect-flowvar.c
|
lua: support key/value flowvars in lua
|
8 years ago |
|
detect-flowvar.h
|
pktvars: same name pktvars, key-value vars
|
8 years ago |
|
detect-fragbits.c
|
detect: get rid of Signature::sm_lists
|
8 years ago |
|
detect-fragbits.h
|
prefilter: implement fragbits
|
9 years ago |
|
detect-fragoffset.c
|
detect: get rid of Signature::sm_lists
|
8 years ago |
|
detect-fragoffset.h
|
…
|
|
|
detect-ftpbounce.c
|
detect: add and use util func for alproto sets
|
8 years ago |
|
detect-ftpbounce.h
|
…
|
|
|
detect-geoip.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
detect-geoip.h
|
…
|
|
|
detect-gid.c
|
documentation: fix list keywords URLs
|
9 years ago |
|
detect-gid.h
|
…
|
|
|
detect-hostbits.c
|
var-names: expose outside of detect engine
|
8 years ago |
|
detect-hostbits.h
|
…
|
|
|
detect-http-client-body.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-http-client-body.h
|
…
|
|
|
detect-http-cookie.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-http-cookie.h
|
…
|
|
|
detect-http-header-common.c
|
http_header: common detection code
|
8 years ago |
|
detect-http-header-common.h
|
http_header: common detection code
|
8 years ago |
|
detect-http-header-names.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-http-header-names.h
|
detect: http_header_names sticky buffer keyword
|
8 years ago |
|
detect-http-header.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-http-header.h
|
http_header: move all code into keyword files
|
8 years ago |
|
detect-http-hh.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-http-hh.h
|
…
|
|
|
detect-http-hrh.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-http-hrh.h
|
…
|
|
|
detect-http-method.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-http-method.h
|
http_method: make list dynamic
|
8 years ago |
|
detect-http-protocol.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-http-protocol.h
|
detect: add http_protocol sticky buffer
|
8 years ago |
|
detect-http-raw-header.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-http-raw-header.h
|
…
|
|
|
detect-http-raw-uri.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-http-raw-uri.h
|
…
|
|
|
detect-http-request-line.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-http-request-line.h
|
http_request_line: register inspect engine from keyword
|
9 years ago |
|
detect-http-response-line.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-http-response-line.h
|
http_response_line: register inspect engine from keyword
|
9 years ago |
|
detect-http-server-body.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-http-server-body.h
|
…
|
|
|
detect-http-start.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-http-start.h
|
detect: http_start sticky buffer
|
8 years ago |
|
detect-http-stat-code.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-http-stat-code.h
|
…
|
|
|
detect-http-stat-msg.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-http-stat-msg.h
|
…
|
|
|
detect-http-ua.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-http-ua.h
|
…
|
|
|
detect-http-uri.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-http-uri.h
|
http_uri: dynamic buffer
|
8 years ago |
|
detect-icmp-id.c
|
detect: get rid of Signature::sm_lists
|
8 years ago |
|
detect-icmp-id.h
|
…
|
|
|
detect-icmp-seq.c
|
detect: get rid of Signature::sm_lists
|
8 years ago |
|
detect-icmp-seq.h
|
…
|
|
|
detect-icode.c
|
detect: get rid of Signature::sm_lists
|
8 years ago |
|
detect-icode.h
|
detect-icode: implement as u8 hash prefilter
|
9 years ago |
|
detect-id.c
|
detect: get rid of Signature::sm_lists
|
8 years ago |
|
detect-id.h
|
…
|
|
|
detect-ipopts.c
|
detect: constify Signature/SigMatch use at runtime
|
8 years ago |
|
detect-ipopts.h
|
detect-ipopts: optimize matching
|
9 years ago |
|
detect-ipproto.c
|
detect: move init only Signature members to init_data
|
8 years ago |
|
detect-ipproto.h
|
…
|
|
|
detect-iprep.c
|
detect: constify Signature/SigMatch use at runtime
|
8 years ago |
|
detect-iprep.h
|
…
|
|
|
detect-isdataat.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-isdataat.h
|
…
|
|
|
detect-itype.c
|
detect: get rid of Signature::sm_lists
|
8 years ago |
|
detect-itype.h
|
detect-itype: implement as u8 hash prefilter
|
9 years ago |
|
detect-l3proto.c
|
Removed duplicate include statements.
|
9 years ago |
|
detect-l3proto.h
|
…
|
|
|
detect-lua-extensions.c
|
lua: support key/value flowvars in lua
|
8 years ago |
|
detect-lua-extensions.h
|
lua: remove flow locking from the lua layer
|
9 years ago |
|
detect-lua.c
|
detect-lua: setup cleanup, fixing a potential int issue
|
8 years ago |
|
detect-lua.h
|
var-names: expose outside of detect engine
|
8 years ago |
|
detect-mark.c
|
detect: constify Signature/SigMatch use at runtime
|
8 years ago |
|
detect-mark.h
|
…
|
|
|
detect-metadata.c
|
documentation: fix list keywords URLs
|
9 years ago |
|
detect-metadata.h
|
…
|
|
|
detect-modbus.c
|
detect: add and use util func for alproto sets
|
8 years ago |
|
detect-modbus.h
|
…
|
|
|
detect-msg.c
|
documentation: fix list keywords URLs
|
9 years ago |
|
detect-msg.h
|
…
|
|
|
detect-noalert.c
|
…
|
|
|
detect-noalert.h
|
…
|
|
|
detect-nocase.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-nocase.h
|
…
|
|
|
detect-offset.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-offset.h
|
…
|
|
|
detect-parse.c
|
detect: add and use util func for alproto sets
|
8 years ago |
|
detect-parse.h
|
detect: add and use util func for alproto sets
|
8 years ago |
|
detect-pcre.c
|
pktvars: same name pktvars, key-value vars
|
8 years ago |
|
detect-pcre.h
|
pcre: support multiple captures
|
8 years ago |
|
detect-pkt-data.c
|
detect: remove AppLayerMatch API call
|
8 years ago |
|
detect-pkt-data.h
|
…
|
|
|
detect-pktvar.c
|
pkt-var: use id instead of name pointer
|
8 years ago |
|
detect-pktvar.h
|
pkt-var: use id instead of name pointer
|
8 years ago |
|
detect-prefilter.c
|
detect: remove hardcoded sm_list logic from setup
|
8 years ago |
|
detect-prefilter.h
|
prefilter: implement prefilter keyword
|
9 years ago |
|
detect-priority.c
|
documentation: fix list keywords URLs
|
9 years ago |
|
detect-priority.h
|
…
|
|
|
detect-rawbytes.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-rawbytes.h
|
…
|
|
|
detect-reference.c
|
documentation: fix list keywords URLs
|
9 years ago |
|
detect-reference.h
|
…
|
|
|
detect-replace.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-replace.h
|
…
|
|
|
detect-rev.c
|
documentation: fix list keywords URLs
|
9 years ago |
|
detect-rev.h
|
…
|
|
|
detect-rpc.c
|
detect: constify Signature/SigMatch use at runtime
|
8 years ago |
|
detect-rpc.h
|
…
|
|
|
detect-sameip.c
|
detect: constify Signature/SigMatch use at runtime
|
8 years ago |
|
detect-sameip.h
|
…
|
|
|
detect-seq.c
|
detect: get rid of Signature::sm_lists
|
8 years ago |
|
detect-seq.h
|
…
|
|
|
detect-sid.c
|
documentation: fix list keywords URLs
|
9 years ago |
|
detect-sid.h
|
…
|
|
|
detect-ssh-proto-version.c
|
detect: add and use util func for alproto sets
|
8 years ago |
|
detect-ssh-proto-version.h
|
…
|
|
|
detect-ssh-proto.c
|
detect-ssh: cleanup duplicate code
|
8 years ago |
|
detect-ssh-proto.h
|
detect: ssh_proto stickybuffer
|
8 years ago |
|
detect-ssh-software-version.c
|
detect: add and use util func for alproto sets
|
8 years ago |
|
detect-ssh-software-version.h
|
detect: make ssh detection use dynamic list
|
8 years ago |
|
detect-ssh-software.c
|
detect-ssh: cleanup duplicate code
|
8 years ago |
|
detect-ssh-software.h
|
detect: ssh_software sticky buffer
|
8 years ago |
|
detect-ssl-state.c
|
detect: add and use util func for alproto sets
|
8 years ago |
|
detect-ssl-state.h
|
ssl: issue 1231 - support ssl state negation
|
9 years ago |
|
detect-ssl-version.c
|
detect: add and use util func for alproto sets
|
8 years ago |
|
detect-ssl-version.h
|
…
|
|
|
detect-stream_size.c
|
detect: constify Signature/SigMatch use at runtime
|
8 years ago |
|
detect-stream_size.h
|
…
|
|
|
detect-tag.c
|
detect: constify Signature/SigMatch use at runtime
|
8 years ago |
|
detect-tag.h
|
…
|
|
|
detect-template-buffer.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-template-buffer.h
|
app-layer templates: cleanups
|
9 years ago |
|
detect-template.c
|
detect: constify Signature/SigMatch use at runtime
|
8 years ago |
|
detect-template.h
|
detect-template: modernize
|
9 years ago |
|
detect-threshold.c
|
detect: remove hardcoded sm_list logic from setup
|
8 years ago |
|
detect-threshold.h
|
…
|
|
|
detect-tls-cert-issuer.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-tls-cert-issuer.h
|
tls: mpm prefilter engines
|
9 years ago |
|
detect-tls-cert-subject.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-tls-cert-subject.h
|
tls: mpm prefilter engines
|
9 years ago |
|
detect-tls-cert-validity.c
|
detect: add and use util func for alproto sets
|
8 years ago |
|
detect-tls-cert-validity.h
|
detect: add keyword tls_cert_valid
|
9 years ago |
|
detect-tls-sni.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-tls-sni.h
|
mpm tls: remove unused function args
|
9 years ago |
|
detect-tls-version.c
|
detect: add and use util func for alproto sets
|
8 years ago |
|
detect-tls-version.h
|
…
|
|
|
detect-tls.c
|
detect: add and use util func for alproto sets
|
8 years ago |
|
detect-tls.h
|
…
|
|
|
detect-tos.c
|
detect: constify Signature/SigMatch use at runtime
|
8 years ago |
|
detect-tos.h
|
…
|
|
|
detect-ttl.c
|
detect: get rid of Signature::sm_lists
|
8 years ago |
|
detect-ttl.h
|
…
|
|
|
detect-uricontent.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-uricontent.h
|
uricontent: remove left over func decl
|
9 years ago |
|
detect-urilen.c
|
detect: add and use util func for alproto sets
|
8 years ago |
|
detect-urilen.h
|
…
|
|
|
detect-window.c
|
detect: constify Signature/SigMatch use at runtime
|
8 years ago |
|
detect-window.h
|
…
|
|
|
detect-within.c
|
detect: remove unused SIGMATCH_PAYLOAD flag
|
8 years ago |
|
detect-within.h
|
…
|
|
|
detect-xbits.c
|
var-names: expose outside of detect engine
|
8 years ago |
|
detect-xbits.h
|
var-names: expose outside of detect engine
|
8 years ago |
|
detect.c
|
pkt-var: abuse flowvar postmatch logic for pktvars
|
8 years ago |
|
detect.h
|
flowvar: remove unused DETECT_VAR_TYPE_ALWAYS
|
8 years ago |
|
flow-bit.c
|
var-names: expose outside of detect engine
|
8 years ago |
|
flow-bit.h
|
flowvar: shrink flowvar type by using padded space
|
8 years ago |
|
flow-hash.c
|
flow: update lastts in FlowHandlePacketUpdate
|
9 years ago |
|
flow-hash.h
|
flow-manager: optimize hash walking
|
9 years ago |
|
flow-manager.c
|
threads: don't sleep under lock
|
8 years ago |
|
flow-manager.h
|
flow: simplify timeout logic
|
9 years ago |
|
flow-private.h
|
app-layer: clean up counters registration
|
9 years ago |
|
flow-queue.c
|
…
|
|
|
flow-queue.h
|
…
|
|
|
flow-storage.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
flow-storage.h
|
…
|
|
|
flow-timeout.c
|
flow-timeout: don't leak flow reference in error path
|
9 years ago |
|
flow-timeout.h
|
…
|
|
|
flow-util.c
|
flow: suppress coverity CID 400600
|
9 years ago |
|
flow-util.h
|
detect: use engine version instead of id
|
8 years ago |
|
flow-var.c
|
lua: support key/value flowvars in lua
|
8 years ago |
|
flow-var.h
|
flowvar: shrink flowvar type by using padded space
|
8 years ago |
|
flow-worker.c
|
flow-worker: clean up thread init
|
8 years ago |
|
flow-worker.h
|
flow worker: move UDP app-layer into main function
|
9 years ago |
|
flow.c
|
flow: set flag to indicate that a flow has alerts
|
9 years ago |
|
flow.h
|
detect: use engine version instead of id
|
8 years ago |
|
host-bit.c
|
hostbits: add list API
|
8 years ago |
|
host-bit.h
|
hostbits: add list API
|
8 years ago |
|
host-queue.c
|
…
|
|
|
host-queue.h
|
…
|
|
|
host-storage.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
host-storage.h
|
…
|
|
|
host-timeout.c
|
…
|
|
|
host-timeout.h
|
…
|
|
|
host.c
|
host: fix -Wshadow warning
|
9 years ago |
|
host.h
|
…
|
|
|
ippair-bit.c
|
var-names: expose outside of detect engine
|
8 years ago |
|
ippair-bit.h
|
var-names: expose outside of detect engine
|
8 years ago |
|
ippair-queue.c
|
…
|
|
|
ippair-queue.h
|
…
|
|
|
ippair-storage.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
ippair-storage.h
|
…
|
|
|
ippair-timeout.c
|
…
|
|
|
ippair-timeout.h
|
…
|
|
|
ippair.c
|
ippair: fix -Wshadow warning
|
9 years ago |
|
ippair.h
|
…
|
|
|
log-dnslog.c
|
dns: fix outputs with 0-len A/AAAA records
|
9 years ago |
|
log-dnslog.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
log-droplog.c
|
logging: hook into flow worker thread
|
9 years ago |
|
log-droplog.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
log-file.c
|
util-file: introduce new functions for file size
|
9 years ago |
|
log-file.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
log-filestore.c
|
util-file: introduce new functions for file size
|
9 years ago |
|
log-filestore.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
log-httplog.c
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
log-httplog.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
log-pcap.c
|
pcap-log: fix pcre_study error check
|
9 years ago |
|
log-pcap.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
log-stats.c
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
log-stats.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
log-tcp-data.c
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
log-tcp-data.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
log-tlslog.c
|
log-tls: add notBefore and notAfter fields to extended output
|
9 years ago |
|
log-tlslog.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
log-tlsstore.c
|
tls-store: fix bug that causes Suricata to crash
|
9 years ago |
|
log-tlsstore.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
output-file.c
|
magic: make optional
|
9 years ago |
|
output-file.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
output-filedata.c
|
util-file: introduce new functions for file size
|
9 years ago |
|
output-filedata.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
output-flow.c
|
logging: use a single entry point for all loggers
|
9 years ago |
|
output-flow.h
|
logging: convert json flow output to non-thread module
|
9 years ago |
|
output-json-alert.c
|
output-json-alert: print 'tunnel' JSON object if tunnel
|
8 years ago |
|
output-json-alert.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
output-json-dnp3-objects.c
|
DNP3: Log DNP3 transactions.
|
9 years ago |
|
output-json-dnp3-objects.h
|
DNP3: Log DNP3 transactions.
|
9 years ago |
|
output-json-dnp3.c
|
DNP3: Use directional logging.
|
9 years ago |
|
output-json-dnp3.h
|
DNP3: Log DNP3 transactions.
|
9 years ago |
|
output-json-dns.c
|
dns: fix outputs with 0-len A/AAAA records
|
9 years ago |
|
output-json-dns.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
output-json-drop.c
|
logging: don't log that json is disabled in each logger
|
9 years ago |
|
output-json-drop.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
output-json-email-common.c
|
output-json-email: fix memleak
|
9 years ago |
|
output-json-email-common.h
|
json-email: JsonEmailAddMetadata update
|
10 years ago |
|
output-json-file.c
|
util-file: introduce new functions for file size
|
9 years ago |
|
output-json-file.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
output-json-flow.c
|
output-json-flow: add has_alerts field
|
9 years ago |
|
output-json-flow.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
output-json-http.c
|
logging: don't log that json is disabled in each logger
|
9 years ago |
|
output-json-http.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
output-json-netflow.c
|
logging: don't log that json is disabled in each logger
|
9 years ago |
|
output-json-netflow.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
output-json-smtp.c
|
logging: don't log that json is disabled in each logger
|
9 years ago |
|
output-json-smtp.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
output-json-ssh.c
|
ssh: remove single logger limit
|
8 years ago |
|
output-json-ssh.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
output-json-stats.c
|
logging: don't log that json is disabled in each logger
|
9 years ago |
|
output-json-stats.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
output-json-template.c
|
template logger - fix coverity CID 1324964
|
9 years ago |
|
output-json-template.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
output-json-tls.c
|
output-json-tls: code cleanup
|
8 years ago |
|
output-json-tls.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
output-json-vars.c
|
outputs: vars log
|
8 years ago |
|
output-json-vars.h
|
outputs: vars log
|
8 years ago |
|
output-json.c
|
output-json: move code to get 5-tuple to own function
|
8 years ago |
|
output-json.h
|
output-json: move code to get 5-tuple to own function
|
8 years ago |
|
output-lua.c
|
lua: convert lua output to be tx aware
|
8 years ago |
|
output-lua.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
output-packet.c
|
logging: remove the packetqueue's from the logging path
|
9 years ago |
|
output-packet.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
output-stats.c
|
logging: use a single entry point for all loggers
|
9 years ago |
|
output-stats.h
|
logging: convert stats loggers to non-thread module
|
9 years ago |
|
output-streaming.c
|
logging: remove the packetqueue's from the logging path
|
9 years ago |
|
output-streaming.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
output-tx.c
|
tx logging: only update logged tx id if all loggers logged
|
9 years ago |
|
output-tx.h
|
logging: rename registration functions to not have tmm
|
9 years ago |
|
output.c
|
outputs: vars log
|
8 years ago |
|
output.h
|
ssh: remove single logger limit
|
8 years ago |
|
packet-queue.c
|
packet pool: make sure packet next ptr is always set
|
9 years ago |
|
packet-queue.h
|
…
|
|
|
pkt-var.c
|
pktvars: same name pktvars, key-value vars
|
8 years ago |
|
pkt-var.h
|
pktvars: same name pktvars, key-value vars
|
8 years ago |
|
ptxdump.py
|
…
|
|
|
queue.h
|
queue: add debug assertions to TAILQ
|
9 years ago |
|
reputation.c
|
reputation: fix -Wshadow warnings
|
9 years ago |
|
reputation.h
|
…
|
|
|
respond-reject-libnet11.c
|
libnet: work around older libnet type difference
|
9 years ago |
|
respond-reject-libnet11.h
|
…
|
|
|
respond-reject.c
|
…
|
|
|
respond-reject.h
|
…
|
|
|
runmode-af-packet.c
|
offloading: restore settings on exit
|
9 years ago |
|
runmode-af-packet.h
|
…
|
|
|
runmode-erf-dag.c
|
Update threads to use global thread names.
|
9 years ago |
|
runmode-erf-dag.h
|
…
|
|
|
runmode-erf-file.c
|
logging: hook into flow worker thread
|
9 years ago |
|
runmode-erf-file.h
|
…
|
|
|
runmode-ipfw.c
|
…
|
|
|
runmode-ipfw.h
|
…
|
|
|
runmode-napatech.c
|
Update threads to use global thread names.
|
9 years ago |
|
runmode-napatech.h
|
…
|
|
|
runmode-netmap.c
|
offloading: implement restoring settings for BSD
|
9 years ago |
|
runmode-netmap.h
|
…
|
|
|
runmode-nflog.c
|
Update threads to use global thread names.
|
9 years ago |
|
runmode-nflog.h
|
…
|
|
|
runmode-nfq.c
|
…
|
|
|
runmode-nfq.h
|
…
|
|
|
runmode-pcap-file.c
|
logging: hook into flow worker thread
|
9 years ago |
|
runmode-pcap-file.h
|
…
|
|
|
runmode-pcap.c
|
sources: fix netmap compilation and pcap setup
|
9 years ago |
|
runmode-pcap.h
|
…
|
|
|
runmode-pfring.c
|
sources: allow interface definitions to be reordered
|
9 years ago |
|
runmode-pfring.h
|
…
|
|
|
runmode-tile.c
|
flowworker: initial support
|
9 years ago |
|
runmode-tile.h
|
…
|
|
|
runmode-unittests.c
|
http_header: remove old files
|
8 years ago |
|
runmode-unittests.h
|
…
|
|
|
runmode-unix-socket.c
|
unix-socket: add/list/remove hostbit commands
|
8 years ago |
|
runmode-unix-socket.h
|
unix-socket: add/list/remove hostbit commands
|
8 years ago |
|
runmodes.c
|
startup/shutdown: cleanup and unify with unix mode
|
9 years ago |
|
runmodes.h
|
logging: use a single entry point for all loggers
|
9 years ago |
|
source-af-packet.c
|
af-packet: write VLAN info for both TPACKET_V2 and V3
|
8 years ago |
|
source-af-packet.h
|
af-packet: test if fanout is supported before use
|
9 years ago |
|
source-erf-dag.c
|
threads: remove EngineKill & SURICATA_KILL
|
9 years ago |
|
source-erf-dag.h
|
…
|
|
|
source-erf-file.c
|
threads: remove EngineKill & SURICATA_KILL
|
9 years ago |
|
source-erf-file.h
|
…
|
|
|
source-ipfw.c
|
ipfw: disable more code to suppress compiler warnings
|
9 years ago |
|
source-ipfw.h
|
…
|
|
|
source-mpipe.c
|
livedev: shorten devname at registration
|
9 years ago |
|
source-mpipe.h
|
…
|
|
|
source-napatech.c
|
threads: remove EngineKill & SURICATA_KILL
|
9 years ago |
|
source-napatech.h
|
…
|
|
|
source-netmap.c
|
offloading: restore settings on exit
|
9 years ago |
|
source-netmap.h
|
netmap: redo config parsing
|
9 years ago |
|
source-nflog.c
|
pkt acq: introduce break loop API
|
9 years ago |
|
source-nflog.h
|
…
|
|
|
source-nfq-prototypes.h
|
…
|
|
|
source-nfq.c
|
nfq: fix -Wshadow warnings
|
9 years ago |
|
source-nfq.h
|
…
|
|
|
source-pcap-file.c
|
pcap-file: minor cleanup
|
9 years ago |
|
source-pcap-file.h
|
…
|
|
|
source-pcap.c
|
offloading: restore settings on exit
|
9 years ago |
|
source-pcap.h
|
…
|
|
|
source-pfring.c
|
threads: remove EngineKill & SURICATA_KILL
|
9 years ago |
|
source-pfring.h
|
pfring pkt acq: keep running on 'pfring_set_cluster' failure when cluster is not required
|
10 years ago |
|
stream-tcp-inline.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
stream-tcp-inline.h
|
…
|
|
|
stream-tcp-private.h
|
stream: per TcpStream reassembly depth
|
9 years ago |
|
stream-tcp-reassemble.c
|
stream: initialize stream segment pool from mtu
|
9 years ago |
|
stream-tcp-reassemble.h
|
…
|
|
|
stream-tcp-sack.c
|
tcp sack: improve tests
|
9 years ago |
|
stream-tcp-sack.h
|
…
|
|
|
stream-tcp-util.c
|
stream-tcp: improve test function cleanup
|
9 years ago |
|
stream-tcp-util.h
|
…
|
|
|
stream-tcp.c
|
stream-tcp: fix format string compiler warnings
|
9 years ago |
|
stream-tcp.h
|
stream: per TcpStream reassembly depth
|
9 years ago |
|
stream.c
|
stream: remove lock from StreamTcpSegmentForEach
|
9 years ago |
|
stream.h
|
…
|
|
|
suricata-common.h
|
autoconf - look for stdbool.h
|
8 years ago |
|
suricata.c
|
detect: use engine version instead of id
|
8 years ago |
|
suricata.h
|
Open 4.0 development branch
|
8 years ago |
|
threads-arch-tile.h
|
…
|
|
|
threads-debug.h
|
…
|
|
|
threads-profile.h
|
…
|
|
|
threads.c
|
macOS: thread return value affects newer macOS as well
|
9 years ago |
|
threads.h
|
threads: fix -Wshadow warnings
|
9 years ago |
|
threadvars.h
|
threads: address sleep under lock issue
|
8 years ago |
|
tm-modules.c
|
logging: hook into flow worker thread
|
9 years ago |
|
tm-modules.h
|
logging: remove output priorities: not used
|
9 years ago |
|
tm-queuehandlers.c
|
…
|
|
|
tm-queuehandlers.h
|
…
|
|
|
tm-queues.c
|
tm-queue: unify queue name handling
|
9 years ago |
|
tm-queues.h
|
…
|
|
|
tm-threads-common.h
|
logging: hook into flow worker thread
|
9 years ago |
|
tm-threads.c
|
threads: address sleep under lock issue
|
8 years ago |
|
tm-threads.h
|
threads: address sleep under lock issue
|
8 years ago |
|
tmqh-flow.c
|
output: introduce config and perf output levels
|
9 years ago |
|
tmqh-flow.h
|
autofp: update queue handlers
|
9 years ago |
|
tmqh-nfq.c
|
…
|
|
|
tmqh-nfq.h
|
…
|
|
|
tmqh-packetpool.c
|
logging: hook into flow worker thread
|
9 years ago |
|
tmqh-packetpool.h
|
threading: avoid autofp deadlock
|
10 years ago |
|
tmqh-ringbuffer.c
|
…
|
|
|
tmqh-ringbuffer.h
|
…
|
|
|
tmqh-simple.c
|
…
|
|
|
tmqh-simple.h
|
…
|
|
|
unix-manager.c
|
threads: don't sleep under lock
|
8 years ago |
|
unix-manager.h
|
startup/shutdown: cleanup and unify with unix mode
|
9 years ago |
|
util-action.c
|
Removed duplicate include statements.
|
9 years ago |
|
util-action.h
|
…
|
|
|
util-affinity.c
|
affinity: fix compilation on SunOS
|
9 years ago |
|
util-affinity.h
|
affinity: fix compilation on SunOS
|
9 years ago |
|
util-atomic.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
util-atomic.h
|
…
|
|
|
util-base64.c
|
base64: code style fixups
|
10 years ago |
|
util-base64.h
|
util-base64: strict mode - all characters must be valid
|
10 years ago |
|
util-binsearch.c
|
…
|
|
|
util-binsearch.h
|
…
|
|
|
util-bloomfilter-counting.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
util-bloomfilter-counting.h
|
…
|
|
|
util-bloomfilter.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
util-bloomfilter.h
|
mpm: constify search func args
|
9 years ago |
|
util-buffer.c
|
…
|
|
|
util-buffer.h
|
eve: fix mishandling of big messages
|
10 years ago |
|
util-byte.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
util-byte.h
|
byteswap: fix compilation on SunOS
|
9 years ago |
|
util-checksum.c
|
…
|
|
|
util-checksum.h
|
…
|
|
|
util-cidr.c
|
…
|
|
|
util-cidr.h
|
…
|
|
|
util-classification-config.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
util-classification-config.h
|
…
|
|
|
util-clock.h
|
…
|
|
|
util-conf.c
|
unix-socket: add auto mode
|
9 years ago |
|
util-conf.h
|
unix-socket: add auto mode
|
9 years ago |
|
util-coredump-config.c
|
output: reduce verbosity on info level
|
9 years ago |
|
util-coredump-config.h
|
…
|
|
|
util-cpu.c
|
profiling: suppress inferior version of UtilCpuGetTicks warning
|
9 years ago |
|
util-cpu.h
|
…
|
|
|
util-crypt.c
|
…
|
|
|
util-crypt.h
|
…
|
|
|
util-cuda-buffer.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
util-cuda-buffer.h
|
…
|
|
|
util-cuda-handlers.c
|
cuda: fix compilation
|
9 years ago |
|
util-cuda-handlers.h
|
…
|
|
|
util-cuda-vars.c
|
cuda: fix compilation
|
9 years ago |
|
util-cuda-vars.h
|
…
|
|
|
util-cuda.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
util-cuda.h
|
…
|
|
|
util-daemon.c
|
daemon: suppress coverity resource leak warning (CID 400725)
|
9 years ago |
|
util-daemon.h
|
…
|
|
|
util-debug-filters.c
|
…
|
|
|
util-debug-filters.h
|
…
|
|
|
util-debug.c
|
output: clean up output function
|
9 years ago |
|
util-debug.h
|
logging: hook the application log file into rotation
|
9 years ago |
|
util-decode-asn1.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
util-decode-asn1.h
|
Update ASN1_MAX_FRAMES to reflect default in suricata.yaml.in
|
9 years ago |
|
util-decode-der-get.c
|
der: fix asan/valgrind errors in time parsing
|
9 years ago |
|
util-decode-der-get.h
|
app-layer-ssl: add validity dates from certificate
|
9 years ago |
|
util-decode-der.c
|
util-decode-der: decode GeneralizedTime
|
9 years ago |
|
util-decode-der.h
|
util-decode-der: decode GeneralizedTime
|
9 years ago |
|
util-decode-mime.c
|
afl: with -Wshadow issues
|
9 years ago |
|
util-decode-mime.h
|
QA: expose Mime decoding API to commandline using --afl-mime=<file>
|
9 years ago |
|
util-device.c
|
offloading: restore settings on exit
|
9 years ago |
|
util-device.h
|
offloading: restore settings on exit
|
9 years ago |
|
util-enum.c
|
…
|
|
|
util-enum.h
|
…
|
|
|
util-error.c
|
output-json-tls: log certificate and chain
|
8 years ago |
|
util-error.h
|
output-json-tls: log certificate and chain
|
8 years ago |
|
util-file.c
|
util-file: introduce new functions for file size
|
9 years ago |
|
util-file.h
|
util-file: introduce new functions for file size
|
9 years ago |
|
util-fix_checksum.c
|
…
|
|
|
util-fix_checksum.h
|
…
|
|
|
util-fmemopen.c
|
…
|
|
|
util-fmemopen.h
|
…
|
|
|
util-hash-lookup3.c
|
util-hash-lookup3: Add hashlittle_safe() variant
|
9 years ago |
|
util-hash-lookup3.h
|
util-hash-lookup3: Add hashlittle_safe() variant
|
9 years ago |
|
util-hash.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
util-hash.h
|
…
|
|
|
util-hashlist.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
util-hashlist.h
|
…
|
|
|
util-host-info.c
|
util-host-info: fix memleaks
|
9 years ago |
|
util-host-info.h
|
…
|
|
|
util-host-os-info.c
|
host-info: coverity 1298890
|
9 years ago |
|
util-host-os-info.h
|
…
|
|
|
util-hyperscan.c
|
spm: add Hyperscan implementation
|
9 years ago |
|
util-hyperscan.h
|
spm: add Hyperscan implementation
|
9 years ago |
|
util-ioctl.c
|
offloading: reduce verbosity to 'perf'
|
9 years ago |
|
util-ioctl.h
|
offloading: restore settings on exit
|
9 years ago |
|
util-ip.c
|
ip parsing: fix cppcheck negative shift warning
|
9 years ago |
|
util-ip.h
|
…
|
|
|
util-logopenfile-tile.c
|
Use ConfValIsTrue for parsing TILE PCIE logging append value.
|
9 years ago |
|
util-logopenfile-tile.h
|
…
|
|
|
util-logopenfile.c
|
output-json: make JSON flags in eve-log user configurable
|
8 years ago |
|
util-logopenfile.h
|
unified2: nostamp and file rotation
|
8 years ago |
|
util-lua-common.c
|
lua: add SCFlowHasAlerts function
|
9 years ago |
|
util-lua-common.h
|
…
|
|
|
util-lua-dnp3-objects.c
|
DNP3: Lua detect support.
|
9 years ago |
|
util-lua-dnp3-objects.h
|
DNP3: Lua detect support.
|
9 years ago |
|
util-lua-dnp3.c
|
DNP3: Lua detect support.
|
9 years ago |
|
util-lua-dnp3.h
|
DNP3: Lua detect support.
|
9 years ago |
|
util-lua-dns.c
|
dns: fix outputs with 0-len A/AAAA records
|
9 years ago |
|
util-lua-dns.h
|
…
|
|
|
util-lua-http.c
|
http body handling: use streaming buffer API
|
9 years ago |
|
util-lua-http.h
|
…
|
|
|
util-lua-smtp.c
|
lua: remove flow locking from the lua layer
|
9 years ago |
|
util-lua-smtp.h
|
Lua: SMTP support; Addresses feature ticket #1775; v5
|
9 years ago |
|
util-lua-ssh.c
|
lua: remove flow locking from the lua layer
|
9 years ago |
|
util-lua-ssh.h
|
lua: SSH support
|
10 years ago |
|
util-lua-tls.c
|
lua: add lua functions for certificate validity dates
|
9 years ago |
|
util-lua-tls.h
|
…
|
|
|
util-lua.c
|
lua: luajit improvements
|
9 years ago |
|
util-lua.h
|
lua: luajit improvements
|
9 years ago |
|
util-luajit.c
|
lua: luajit improvements
|
9 years ago |
|
util-luajit.h
|
lua: luajit improvements
|
9 years ago |
|
util-magic.c
|
util-magic: fix build when magic is not available
|
9 years ago |
|
util-magic.h
|
magic: make optional
|
9 years ago |
|
util-mem.h
|
mem: fix SCStrdup -Wshadow warning
|
9 years ago |
|
util-memcmp.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
util-memcmp.h
|
…
|
|
|
util-memcpy.h
|
spm: constify search args
|
9 years ago |
|
util-memrchr.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
util-memrchr.h
|
…
|
|
|
util-misc.c
|
pcre: initialize var before use
|
9 years ago |
|
util-misc.h
|
…
|
|
|
util-mpm-ac-bs.c
|
ac-bs: fix scan-build warnings
|
9 years ago |
|
util-mpm-ac-bs.h
|
mpm: unify & localize mpm pattern (id) handling
|
9 years ago |
|
util-mpm-ac-cuda-kernel.cu
|
…
|
|
|
util-mpm-ac-tile-small.c
|
prefilter: rename PatternMatcherQueue datatype
|
9 years ago |
|
util-mpm-ac-tile.c
|
prefilter: rename PatternMatcherQueue datatype
|
9 years ago |
|
util-mpm-ac-tile.h
|
prefilter: rename PatternMatcherQueue datatype
|
9 years ago |
|
util-mpm-ac.c
|
mpm-ac: fix integer overflow on allocation
|
9 years ago |
|
util-mpm-ac.h
|
prefilter: rename PatternMatcherQueue datatype
|
9 years ago |
|
util-mpm-hs.c
|
hyperscan: fix minor coverity issue in error path
|
9 years ago |
|
util-mpm-hs.h
|
mpm: add Hyperscan integration
|
9 years ago |
|
util-mpm.c
|
mpm/spm: check for SSSE3 and enable/disable HS
|
9 years ago |
|
util-mpm.h
|
mpm/spm: check for SSSE3 and enable/disable HS
|
9 years ago |
|
util-optimize.h
|
…
|
|
|
util-pages.c
|
util: add facility to check for RWX page support
|
9 years ago |
|
util-pages.h
|
util: add facility to check for RWX page support
|
9 years ago |
|
util-path.c
|
…
|
|
|
util-path.h
|
…
|
|
|
util-pidfile.c
|
pidfile: fail if the pid file exists
|
8 years ago |
|
util-pidfile.h
|
…
|
|
|
util-pool-thread.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
util-pool-thread.h
|
…
|
|
|
util-pool.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
util-pool.h
|
…
|
|
|
util-prefilter.c
|
prefilter: rename PatternMatcherQueue datatype
|
9 years ago |
|
util-prefilter.h
|
prefilter: rename PatternMatcherQueue datatype
|
9 years ago |
|
util-print.c
|
ipv6: fix alignment issue in address to string code
|
9 years ago |
|
util-print.h
|
…
|
|
|
util-privs.c
|
Bug #2009: added CAP_NET_ADMIN for PCAP and af-packet modes.
|
9 years ago |
|
util-privs.h
|
…
|
|
|
util-profiling-keywords.c
|
profiling: fix keyword profiling
|
8 years ago |
|
util-profiling-locks.c
|
profiling: fix lock profile compilation
|
10 years ago |
|
util-profiling-locks.h
|
…
|
|
|
util-profiling-rulegroups.c
|
profiling: fix memory leaks
|
9 years ago |
|
util-profiling-rules.c
|
profiling: output all sort options for rules
|
8 years ago |
|
util-profiling.c
|
outputs: vars log
|
8 years ago |
|
util-profiling.h
|
profiling: support prefilter engines
|
9 years ago |
|
util-proto-name.c
|
…
|
|
|
util-proto-name.h
|
…
|
|
|
util-radix-tree.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
util-radix-tree.h
|
…
|
|
|
util-random.c
|
…
|
|
|
util-random.h
|
…
|
|
|
util-reference-config.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
util-reference-config.h
|
…
|
|
|
util-ringbuffer.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
util-ringbuffer.h
|
…
|
|
|
util-rohash.c
|
…
|
|
|
util-rohash.h
|
…
|
|
|
util-rule-vars.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
util-rule-vars.h
|
…
|
|
|
util-runmodes.c
|
runmodes: fix -Wshadow warnings
|
9 years ago |
|
util-runmodes.h
|
runmodes: constify names
|
9 years ago |
|
util-running-modes.c
|
cmdline: fix --list-keywords and --list-app-layer-protos
|
9 years ago |
|
util-running-modes.h
|
…
|
|
|
util-signal.c
|
…
|
|
|
util-signal.h
|
…
|
|
|
util-spm-bm.c
|
spm: add and use new SPM API
|
9 years ago |
|
util-spm-bm.h
|
spm: add and use new SPM API
|
9 years ago |
|
util-spm-bs.c
|
…
|
|
|
util-spm-bs.h
|
…
|
|
|
util-spm-bs2bm.c
|
…
|
|
|
util-spm-bs2bm.h
|
…
|
|
|
util-spm-hs.c
|
mpm-hs,spm-hs: don't call hs_scan() for zero bytes
|
9 years ago |
|
util-spm-hs.h
|
spm: add Hyperscan implementation
|
9 years ago |
|
util-spm.c
|
mpm/spm: check for SSSE3 and enable/disable HS
|
9 years ago |
|
util-spm.h
|
spm: add Hyperscan implementation
|
9 years ago |
|
util-storage.c
|
tests: no longer necessary to provide successful return code
|
9 years ago |
|
util-storage.h
|
…
|
|
|
util-streaming-buffer.c
|
streaming: improve error handling
|
9 years ago |
|
util-streaming-buffer.h
|
streaming: improve error handling
|
9 years ago |
|
util-strlcatu.c
|
…
|
|
|
util-strlcpyu.c
|
…
|
|
|
util-syslog.c
|
…
|
|
|
util-syslog.h
|
…
|
|
|
util-threshold-config.c
|
detect: remove hardcoded sm_list logic from setup
|
8 years ago |
|
util-threshold-config.h
|
threshold: fix and redo tests
|
8 years ago |
|
util-time.c
|
der: fix asan/valgrind errors in time parsing
|
9 years ago |
|
util-time.h
|
util-time: add function to create a UTC time string
|
9 years ago |
|
util-unittest-helper.c
|
unittest-helper: fix format string compiler warnings
|
9 years ago |
|
util-unittest-helper.h
|
…
|
|
|
util-unittest.c
|
testing: new test macros, new testing documentation group.
|
9 years ago |
|
util-unittest.h
|
unittest: FAIL macro to unconditionally fail a test
|
9 years ago |
|
util-validate.h
|
flowworker: initial support
|
9 years ago |
|
util-var-name.c
|
var-names: expose outside of detect engine
|
8 years ago |
|
util-var-name.h
|
var-names: expose outside of detect engine
|
8 years ago |
|
util-var.c
|
hostbits/xbits: free hostbit
|
9 years ago |
|
util-var.h
|
flowvar: shrink flowvar type by using padded space
|
8 years ago |
|
util-vector.h
|
…
|
|
|
win32-misc.c
|
…
|
|
|
win32-misc.h
|
…
|
|
|
win32-service.c
|
…
|
|
|
win32-service.h
|
…
|
|
|
win32-syslog.h
|
…
|
|
