aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
main
main-8.0.x
main-7.0.x
master-6.0.x
master-5.0.x
master-4.1.x
master-4.0.x
master-3.2.x
suricata-8.0.7
suricata-8.0.6
suricata-7.0.17
suricata-8.0.5
suricata-7.0.16
suricata-8.0.4
suricata-7.0.15
suricata-8.0.3
suricata-7.0.14
suricata-8.0.2
suricata-7.0.13
suricata-8.0.1
suricata-7.0.12
suricata-8.0.0
suricata-7.0.11
suricata-8.0.0-rc1
suricata-8.0.0-beta1
suricata-7.0.10
suricata-7.0.9
suricata-7.0.8
suricata-7.0.7
suricata-7.0.6
suricata-6.0.20
suricata-7.0.5
suricata-6.0.19
suricata-6.0.18
suricata-7.0.4
suricata-6.0.17
suricata-7.0.3
suricata-6.0.16
suricata-7.0.2
suricata-6.0.15
suricata-7.0.1
suricata-6.0.14
suricata-7.0.0
suricata-7.0.0-rc2
suricata-6.0.13
suricata-6.0.12
suricata-6.0.11
suricata-7.0.0-rc1
suricata-6.0.10
suricata-6.0.9
suricata-7.0.0-beta1
suricata-6.0.8
suricata-6.0.7
suricata-6.0.6
suricata-5.0.10
suricata-6.0.5
suricata-5.0.9
suricata-6.0.4
suricata-5.0.8
suricata-6.0.3
suricata-5.0.7
suricata-6.0.2
suricata-5.0.6
suricata-6.0.1
suricata-5.0.5
suricata-4.1.10
suricata-4.1.9
suricata-5.0.4
suricata-6.0.0
suricata-6.0.0-rc1
suricata-6.0.0-beta1
suricata-5.0.3
suricata-4.1.8
suricata-4.1.7
suricata-5.0.2
suricata-4.1.6
suricata-5.0.1
suricata-5.0.0
suricata-5.0.0-rc1
suricata-4.1.5
suricata-5.0.0-beta1
suricata-4.1.4
suricata-4.1.3
suricata-4.0.7
suricata-4.1.2
suricata-4.1.1
suricata-4.1.0
suricata-4.0.6
suricata-4.1.0-rc2
suricata-4.1.0-rc1
suricata-4.0.5
suricata-4.1.0-beta1
suricata-4.0.4
suricata-4.0.3
suricata-4.0.2
suricata-3.2.5
suricata-4.0.1
suricata-3.2.4
suricata-4.0.0
suricata-4.0.0-rc2
suricata-3.2.3
suricata-4.0.0-rc1
suricata-4.0.0-beta1
suricata-3.2.2
suricata-3.1.4
suricata-3.2.1
suricata-3.2
suricata-3.2RC1
suricata-3.1.3
suricata-3.2beta1
suricata-3.1.2
suricata-3.1.1
suricata-3.1
suricata-3.0.2
suricata-3.1RC1
suricata-3.0.1
suricata-3.0.1RC1
suricata-3.0
suricata-2.0.11
suricata-3.0RC3
suricata-3.0RC2
suricata-3.0RC1
suricata-2.0.10
suricata-2.0.9
suricata-2.1beta4
suricata-2.0.8
suricata-2.0.7
suricata-2.1beta3
suricata-2.0.6
suricata-2.0.5
suricata-2.1beta2
suricata-2.0.4
suricata-2.1beta1
suricata-2.0.3
suricata-2.0.2
suricata-2.0.1
suricata-2.0.1rc1
suricata-2.0
suricata-2.0rc3
suricata-2.0rc2
suricata-2.0rc1
suricata-2.0beta2
suricata-1.4.7
suricata-1.4.6
suricata-1.4.5
suricata-2.0beta1
suricata-1.4.4
suricata-1.4.3
suricata-1.4.2
suricata-1.4.1
suricata-1.3.6
suricata-1.4
suricata-1.3.5
suricata-1.4rc1
suricata-1.3.4
suricata-1.4beta3
suricata-1.3.3
suricata-1.4beta2
suricata-1.3.2
suricata-1.4beta1
suricata-1.3.1
suricata-1.3
suricata-1.3rc1
suricata-1.3beta2
suricata-1.3beta1
suricata-1.2.1
suricata-1.2
suricata-1.2rc1
suricata-1.2beta1
suricata-1.1.1
suricata-0.8.2
suricata-1.0.0
suricata-1.0.1
suricata-1.0.2
suricata-1.0.3
suricata-1.0.4
suricata-1.0.5
suricata-1.1
suricata-1.1beta1
suricata-1.1beta2
suricata-1.1beta3
suricata-1.1rc1
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'f025e07191'
${ noResults }
suricata/src
History
Shivani Bhardwaj f025e07191 tls/issuerdn: use byte array instead of string 
TLS parsers use x509-parser crate which parses X.509 certificates that
use ASN.1 DER encoding that can allow arbitrary byte sequences. An
attacker could inject null byte in a certificate anywhere to stump the
common language parsers terminating the string at a null byte leading to
a bypass of a possibly malicious certificate.

So far, the rust TLS parser for "issuerdn" used a pattern that involved:
-> Get ASN.1 DER encoded raw data from the x509-parser crate
-> Convert this raw data to a decoded string (Rust)
-> Convert the Rust string to CString
-- The problem lies here. CString only accepts proper strings/byte
buffers and converts it into an owned C-compatible, null-terminated
string. However, if any null byte occurs in the string passed to the
CString then it panics.
In the rust TLS parser, this panic is handled by returning NULL.

This means that the parser will error out during the decoding of the
certificate. However, Suricata must be able to detect the null byte
injection attack being an IDS/IPS.

Hence, replace all such string patterns w.r.t. TLS IssuerDN with a byte
array.

Bug 7887
 		10 months ago
..
tests fuzz: really restrict path for nalloc 11 months ago
Makefile.am tls: remove deprecated tls-log 10 months ago
action-globals.h
…
alert-debuglog.c detect/alert: fully add pass-only rules to alert queue 12 months ago
alert-debuglog.h
…
alert-fastlog.c counters: remove ThreadVars from API 11 months ago
alert-fastlog.h
…
alert-syslog.c detect/alert: fully add pass-only rules to alert queue 12 months ago
alert-syslog.h
…
app-layer-detect-proto.c detect: new command line option : list-rule-protos 11 months ago
app-layer-detect-proto.h detect: new command line option : list-rule-protos 11 months ago
app-layer-dnp3-objects.c
…
app-layer-dnp3-objects.h
…
app-layer-dnp3.c unittests: clean up memory for dnp3 tests 1 year ago
app-layer-dnp3.h
…
app-layer-events.c rust: bindgen SCAppLayerParserTriggerRawStreamInspection 1 year ago
app-layer-events.h rust: move AppLayerEvents funcs out of RustContext 1 year ago
app-layer-expectation.c
…
app-layer-expectation.h
…
app-layer-frames.c rust: bindgen frames functions 12 months ago
app-layer-frames.h rust: bindgen frames functions 12 months ago
app-layer-ftp.c unittests: clean up memory in ftp tests 1 year ago
app-layer-ftp.h
…
app-layer-htp-body.c
…
app-layer-htp-body.h
…
app-layer-htp-file.c rust: bindgen SCHTPFileCloseHandleRange 11 months ago
app-layer-htp-file.h rust: bindgen SCHTPFileCloseHandleRange 11 months ago
app-layer-htp-mem.c
…
app-layer-htp-mem.h
…
app-layer-htp-range.c rust: bindgen SCHTPFileCloseHandleRange 11 months ago
app-layer-htp-range.h rust: bindgen SCHTPFileCloseHandleRange 11 months ago
app-layer-htp-xff.c
…
app-layer-htp-xff.h
…
app-layer-htp.c counters: remove ThreadVars from API 11 months ago
app-layer-htp.h
…
app-layer-http2.c rust: bindgen SCHTTP2MimicHttp1Request 1 year ago
app-layer-http2.h rust: bindgen SCHTTP2MimicHttp1Request 1 year ago
app-layer-ike.c
…
app-layer-ike.h rust: move file functions out of SuricataContext 1 year ago
app-layer-imap.c
…
app-layer-imap.h
…
app-layer-modbus.c counters: remove ThreadVars from API 11 months ago
app-layer-modbus.h
…
app-layer-nfs-tcp.c
…
app-layer-nfs-tcp.h
…
app-layer-nfs-udp.c
…
app-layer-nfs-udp.h
…
app-layer-parser.c snmp: can be set to detection-only 12 months ago
app-layer-parser.h snmp: can be set to detection-only 12 months ago
app-layer-protos.c snmp: can be set to detection-only 12 months ago
app-layer-protos.h
…
app-layer-register.c rust: bindgen SCAppLayerRegisterProtocolDetection 11 months ago
app-layer-register.h rust: bindgen SCAppLayerRegisterProtocolDetection 11 months ago
app-layer-smb.c
…
app-layer-smb.h
…
app-layer-smtp.c counters: remove ThreadVars from API 11 months ago
app-layer-smtp.h rust: bindgen frames functions 12 months ago
app-layer-ssh.c unittests: clean up memory for ssh tests 1 year ago
app-layer-ssh.h
…
app-layer-ssl.c tls/issuerdn: use byte array instead of string 10 months ago
app-layer-ssl.h tls/issuerdn: use byte array instead of string 10 months ago
app-layer-tftp.c
…
app-layer-tftp.h rust: move file functions out of SuricataContext 1 year ago
app-layer.c counters: remove ThreadVars from counter registration 11 months ago
app-layer.h counters: regular counter Add API update 11 months ago
bindgen.h rust: bindgen functions needed for datasets 12 months ago
conf-yaml-loader.c conf: do not exit on alloc failure 11 months ago
conf-yaml-loader.h
…
conf.c conf: add SCConfNodeChildValueIsFalse to check for false value 10 months ago
conf.h conf: add SCConfNodeChildValueIsFalse to check for false value 10 months ago
counters.c counters: use strcmp instead of memcmp 10 months ago
counters.h counters: remove ThreadVars from counter registration 11 months ago
datasets-context-json.c datasets: debug validation for stack allocation size 12 months ago
datasets-context-json.h
…
datasets-ipv4.c
…
datasets-ipv4.h
…
datasets-ipv6.c
…
datasets-ipv6.h
…
datasets-md5.c
…
datasets-md5.h
…
datasets-reputation.h
…
datasets-sha256.c
…
datasets-sha256.h
…
datasets-string.c
…
datasets-string.h
…
datasets.c rust: bindgen functions needed for datasets 12 months ago
datasets.h rust: bindgen functions needed for datasets 12 months ago
decode-arp.c counters: regular counter Incr API update 11 months ago
decode-arp.h
…
decode-chdlc.c counters: regular counter Incr API update 11 months ago
decode-chdlc.h
…
decode-erspan.c counters: regular counter Incr API update 11 months ago
decode-erspan.h
…
decode-esp.c counters: regular counter Incr API update 11 months ago
decode-esp.h
…
decode-etag.c counters: regular counter Incr API update 11 months ago
decode-etag.h decode/etag: ETag 802.1BR decoder 1 year ago
decode-ethernet.c counters: regular counter Incr API update 11 months ago
decode-ethernet.h decode/etag: ETag 802.1BR decoder 1 year ago
decode-events.c decode/etag: ETag 802.1BR decoder 1 year ago
decode-events.h decode/etag: ETag 802.1BR decoder 1 year ago
decode-geneve.c counters: regular counter Incr API update 11 months ago
decode-geneve.h
…
decode-gre.c counters: regular counter Incr API update 11 months ago
decode-gre.h
…
decode-icmpv4.c counters: regular counter Incr API update 11 months ago
decode-icmpv4.h
…
decode-icmpv6.c counters: regular counter Incr API update 11 months ago
decode-icmpv6.h
…
decode-ipv4.c counters: regular counter Incr API update 11 months ago
decode-ipv4.h
…
decode-ipv6.c counters: regular counter Incr API update 11 months ago
decode-ipv6.h
…
decode-mpls.c counters: regular counter Incr API update 11 months ago
decode-mpls.h
…
decode-nsh.c counters: regular counter Incr API update 11 months ago
decode-nsh.h
…
decode-null.c counters: regular counter Incr API update 11 months ago
decode-ppp.c counters: regular counter Incr API update 11 months ago
decode-ppp.h decode/pppoe: CDPCP as a known protocol 1 year ago
decode-pppoe.c src: doc: remove double-space typos 10 months ago
decode-pppoe.h decode/pppoe: Run clang-format 1 year ago
decode-raw.c counters: regular counter Incr API update 11 months ago
decode-raw.h
…
decode-sctp.c counters: regular counter Incr API update 11 months ago
decode-sctp.h
…
decode-sll.c counters: regular counter Incr API update 11 months ago
decode-sll.h
…
decode-sll2.c counters: regular counter Incr API update 11 months ago
decode-sll2.h
…
decode-tcp.c counters: regular counter Incr API update 11 months ago
decode-tcp.h
…
decode-template.c
…
decode-template.h
…
decode-teredo.c counters: regular counter Incr API update 11 months ago
decode-teredo.h
…
decode-udp.c counters: regular counter Incr API update 11 months ago
decode-udp.h
…
decode-vlan.c counters: regular counter Incr API update 11 months ago
decode-vlan.h
…
decode-vntag.c counters: regular counter Incr API update 11 months ago
decode-vntag.h
…
decode-vxlan.c counters: regular counter Incr API update 11 months ago
decode-vxlan.h decoder/vxlan: fix VXLAN port detection per RFC 7348 1 year ago
decode.c flow: split elephant flow detection per dir 10 months ago
decode.h flow: split elephant flow detection per dir 10 months ago
defrag-config.c
…
defrag-config.h
…
defrag-hash.c counters: regular counter Incr API update 11 months ago
defrag-hash.h
…
defrag-stack.c defrag: improve thread safety in config logging 1 year ago
defrag-stack.h defrag: improve thread safety in config logging 1 year ago
defrag-timeout.c
…
defrag-timeout.h
…
defrag.c counters: regular counter Incr API update 11 months ago
defrag.h
…
detect-app-layer-event.c
…
detect-app-layer-event.h
…
detect-app-layer-protocol.c
…
detect-app-layer-protocol.h
…
detect-app-layer-state.c
…
detect-app-layer-state.h
…
detect-asn1.c
…
detect-asn1.h
…
detect-base64-data.c detect/base64_data: Convert unittests to FAIL/PASS API 1 year ago
detect-base64-data.h
…
detect-base64-decode.c counters: remove ThreadVars from API 11 months ago
detect-base64-decode.h
…
detect-bsize.c detect: list-keywords cli shows integers 1 year ago
detect-bsize.h
…
detect-bypass.c
…
detect-bypass.h
…
detect-byte-extract.c detect/byte: update comments to reflect current parsing logic 1 year ago
detect-byte-extract.h
…
detect-byte.c
…
detect-byte.h
…
detect-bytejump.c
…
detect-bytejump.h
…
detect-bytemath.c counters: remove ThreadVars from API 11 months ago
detect-bytemath.h
…
detect-bytetest.c detect-bytetest: remove meaningless NULL check on data_offset 1 year ago
detect-bytetest.h
…
detect-classtype.c unittests: clean up memory for classtype tests 1 year ago
detect-classtype.h
…
detect-config.c doc: add some missing url and desc 1 year ago
detect-config.h
…
detect-content.c detect: do not exit on allocation failure during rule (re)load 10 months ago
detect-content.h
…
detect-csum.c counters: remove ThreadVars from API 11 months ago
detect-csum.h
…
detect-datarep.c rust: bindgen functions needed for datasets 12 months ago
detect-datarep.h
…
detect-dataset.c rust: bindgen functions needed for datasets 12 months ago
detect-dataset.h
…
detect-dce-iface.c doc: add some missing url and desc 1 year ago
detect-dce-iface.h
…
detect-dce-opnum.c doc: add some missing url and desc 1 year ago
detect-dce-opnum.h
…
detect-dce-stub-data.c src: doc: remove double-space typos 10 months ago
detect-dce-stub-data.h
…
detect-depth.c
…
detect-depth.h
…
detect-detection-filter.c counters: remove ThreadVars from API 11 months ago
detect-detection-filter.h
…
detect-distance.c
…
detect-distance.h
…
detect-dnp3.c detect: dnp3.func is now a generic integer 12 months ago
detect-dnp3.h detect/dnp3: make dnp3.ind a generic uint16 bitflags keyword 1 year ago
detect-dns-name.c detect: list-keywords cli shows multi-buffers 1 year ago
detect-dns-name.h
…
detect-dns-response.c
…
detect-dns-response.h
…
detect-dsize.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-dsize.h
…
detect-email.c detect: list-keywords cli shows multi-buffers 1 year ago
detect-email.h
…
detect-engine-address-ipv4.c unittests: clean up memory for address tests 1 year ago
detect-engine-address-ipv4.h
…
detect-engine-address-ipv6.c detect/address: switch tests to FAIL/PASS API 12 months ago
detect-engine-address-ipv6.h
…
detect-engine-address.c detect/address: make list clean function non-static 1 year ago
detect-engine-address.h detect/address: make list clean function non-static 1 year ago
detect-engine-alert.c detect/alert: fully add pass-only rules to alert queue 12 months ago
detect-engine-alert.h
…
detect-engine-analyzer.c detect/flow: add support for elephant flow detection 10 months ago
detect-engine-analyzer.h
…
detect-engine-buffer.c
…
detect-engine-buffer.h
…
detect-engine-build.c detect/tcp: make tcp.flags a generic integer with bitflags 1 year ago
detect-engine-build.h file: remove unused flag 1 year ago
detect-engine-content-inspection.c detect/entropy: Ensure entropy matcher has flow 1 year ago
detect-engine-content-inspection.h
…
detect-engine-dcepayload.c counters: remove ThreadVars from API 11 months ago
detect-engine-dcepayload.h
…
detect-engine-event.c src: doc: remove double-space typos 10 months ago
detect-engine-event.h
…
detect-engine-file.c
…
detect-engine-file.h
…
detect-engine-frame.c rust: bindgen frames functions 12 months ago
detect-engine-frame.h rust: bindgen frames functions 12 months ago
detect-engine-helper.c
…
detect-engine-helper.h detect: grow SigTableElmt flags to u32 1 year ago
detect-engine-inspect-buffer.c src: remove BUG_ON in packet path 1 year ago
detect-engine-inspect-buffer.h
…
detect-engine-iponly.c detect/iponly: address format truncation warnings 1 year ago
detect-engine-iponly.h
…
detect-engine-loader.c detect: remove redundant fw rule path log 1 year ago
detect-engine-loader.h
…
detect-engine-mpm.c detect/mpm: use fixed constant for stack allocation 12 months ago
detect-engine-mpm.h
…
detect-engine-payload.c counters: remove ThreadVars from API 11 months ago
detect-engine-payload.h
…
detect-engine-port.c unittests: clean up detect port tests 1 year ago
detect-engine-port.h
…
detect-engine-prefilter-common.c detect/integer: support missing modes for u8 prefilter 1 year ago
detect-engine-prefilter-common.h
…
detect-engine-prefilter.c detect: remove unused PrefilterStoreGetName 1 year ago
detect-engine-prefilter.h detect: remove unused PrefilterStoreGetName 1 year ago
detect-engine-profile.c
…
detect-engine-profile.h
…
detect-engine-proto.c detect: new command line option : list-rule-protos 11 months ago
detect-engine-proto.h detect: new command line option : list-rule-protos 11 months ago
detect-engine-register.c detect/flow: add support for elephant flow detection 10 months ago
detect-engine-register.h detect/flow: add support for elephant flow detection 10 months ago
detect-engine-siggroup.c counters: remove ThreadVars from API 11 months ago
detect-engine-siggroup.h
…
detect-engine-sigorder.c detect: address intermittent UT crash on OpenBSD 1 year ago
detect-engine-sigorder.h
…
detect-engine-state.c counters: remove ThreadVars from API 11 months ago
detect-engine-state.h rust: move DetectEngineStateFree out of RustContext 1 year ago
detect-engine-tag.c counters: remove ThreadVars from API 11 months ago
detect-engine-tag.h
…
detect-engine-threshold.c detect/threshold: set missing alert flag in rate_filter 12 months ago
detect-engine-threshold.h
…
detect-engine-uint.c
…
detect-engine-uint.h
…
detect-engine.c counters: remove ThreadVars from counter registration 11 months ago
detect-engine.h src: remove some unused functions 1 year ago
detect-entropy.c util/var: add NULL check in VarNameStoreRegister 1 year ago
detect-entropy.h detect/entropy: Ensure entropy matcher has flow 1 year ago
detect-fast-pattern.c counters: remove ThreadVars from API 11 months ago
detect-fast-pattern.h
…
detect-file-data.c detect/files: support protocols only over udp 1 year ago
detect-file-data.h
…
detect-file-hash-common.c detect-file-hash: drop redundant rule_file NULL check 1 year ago
detect-file-hash-common.h
…
detect-filemagic.c detect: list-keywords cli shows multi-buffers 1 year ago
detect-filemagic.h
…
detect-filemd5.c
…
detect-filemd5.h
…
detect-filename.c detect: list-keywords cli shows multi-buffers 1 year ago
detect-filename.h
…
detect-filesha1.c
…
detect-filesha1.h
…
detect-filesha256.c
…
detect-filesha256.h
…
detect-filesize.c detect: list-keywords cli shows integers 1 year ago
detect-filesize.h
…
detect-filestore.c rust: bindgen functions neede for features 12 months ago
detect-filestore.h
…
detect-flow-age.c detect: list-keywords cli shows integers 1 year ago
detect-flow-age.h
…
detect-flow-elephant.c detect/flow: add support for elephant flow detection 10 months ago
detect-flow-elephant.h detect/flow: add support for elephant flow detection 10 months ago
detect-flow-pkts.c detect/flow-pkts: check for both dir 10 months ago
detect-flow-pkts.h
…
detect-flow.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-flow.h
…
detect-flowbits.c counters: remove ThreadVars from API 11 months ago
detect-flowbits.h
…
detect-flowint.c counters: remove ThreadVars from API 11 months ago
detect-flowint.h
…
detect-flowvar.c src: check retval of VarNameStoreRegister 12 months ago
detect-flowvar.h
…
detect-fragbits.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-fragbits.h detect/ipv4: make fragbits a generic uint16 bitflags keyword 1 year ago
detect-fragoffset.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-fragoffset.h detect: fragoffset is now a generic integer 12 months ago
detect-frame.c rust: bindgen frames functions 12 months ago
detect-frame.h
…
detect-ftp-command-data.c
…
detect-ftp-command-data.h
…
detect-ftp-command.c
…
detect-ftp-command.h
…
detect-ftp-completion-code.c detect: list-keywords cli shows multi-buffers 1 year ago
detect-ftp-completion-code.h
…
detect-ftp-dynamic-port.c detect: list-keywords cli shows integers 1 year ago
detect-ftp-dynamic-port.h
…
detect-ftp-mode.c
…
detect-ftp-mode.h
…
detect-ftp-reply-received.c
…
detect-ftp-reply-received.h
…
detect-ftp-reply.c detect: list-keywords cli shows multi-buffers 1 year ago
detect-ftp-reply.h
…
detect-ftpbounce.c
…
detect-ftpbounce.h
…
detect-ftpdata.c
…
detect-ftpdata.h
…
detect-geoip.c
…
detect-geoip.h
…
detect-gid.c detect: replace strtoul with ByteExtractStringUint32 1 year ago
detect-gid.h
…
detect-hostbits.c counters: remove ThreadVars from API 11 months ago
detect-hostbits.h
…
detect-http-accept-enc.c
…
detect-http-accept-enc.h
…
detect-http-accept-lang.c
…
detect-http-accept-lang.h
…
detect-http-accept.c
…
detect-http-accept.h
…
detect-http-client-body.c
…
detect-http-client-body.h
…
detect-http-connection.c
…
detect-http-connection.h
…
detect-http-content-len.c
…
detect-http-content-len.h
…
detect-http-content-type.c
…
detect-http-content-type.h
…
detect-http-cookie.c
…
detect-http-cookie.h
…
detect-http-header-common.c
…
detect-http-header-common.h
…
detect-http-header-names.c
…
detect-http-header-names.h
…
detect-http-header.c detect: list-keywords cli shows multi-buffers 1 year ago
detect-http-header.h
…
detect-http-headers-stub.h
…
detect-http-headers.c
…
detect-http-headers.h
…
detect-http-host.c
…
detect-http-host.h
…
detect-http-location.c
…
detect-http-location.h
…
detect-http-method.c
…
detect-http-method.h
…
detect-http-protocol.c
…
detect-http-protocol.h
…
detect-http-raw-header.c
…
detect-http-raw-header.h
…
detect-http-referer.c
…
detect-http-referer.h
…
detect-http-request-line.c
…
detect-http-request-line.h
…
detect-http-response-line.c
…
detect-http-response-line.h
…
detect-http-server-body.c
…
detect-http-server-body.h
…
detect-http-server.c
…
detect-http-server.h
…
detect-http-start.c
…
detect-http-start.h
…
detect-http-stat-code.c
…
detect-http-stat-code.h
…
detect-http-stat-msg.c
…
detect-http-stat-msg.h
…
detect-http-ua.c
…
detect-http-ua.h
…
detect-http-uri.c
…
detect-http-uri.h
…
detect-http2.c detect/http2: call correct free function on errors 1 year ago
detect-http2.h
…
detect-icmp-id.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-icmp-id.h detect: icmp_id is now a generic integer 12 months ago
detect-icmp-seq.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-icmp-seq.h detect: icmp_seq is now a generic integer 12 months ago
detect-icmpv4hdr.c
…
detect-icmpv4hdr.h
…
detect-icmpv6-mtu.c detect: list-keywords cli shows integers 1 year ago
detect-icmpv6-mtu.h
…
detect-icmpv6hdr.c
…
detect-icmpv6hdr.h
…
detect-icode.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-icode.h
…
detect-id.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-id.h detect: id is now a generic integer 12 months ago
detect-ike-chosen-sa.c
…
detect-ike-chosen-sa.h
…
detect-ike-exch-type.c detect: list-keywords cli shows integers 1 year ago
detect-ike-exch-type.h
…
detect-ike-key-exchange-payload-length.c detect: list-keywords cli shows integers 1 year ago
detect-ike-key-exchange-payload-length.h
…
detect-ike-key-exchange-payload.c
…
detect-ike-key-exchange-payload.h
…
detect-ike-nonce-payload-length.c detect: list-keywords cli shows integers 1 year ago
detect-ike-nonce-payload-length.h
…
detect-ike-nonce-payload.c
…
detect-ike-nonce-payload.h
…
detect-ike-spi.c
…
detect-ike-spi.h
…
detect-ike-vendor.c detect: list-keywords cli shows multi-buffers 1 year ago
detect-ike-vendor.h
…
detect-ipaddr.c detect/ip.src: Allow use with transforms 1 year ago
detect-ipaddr.h
…
detect-ipopts.c unittests: clean up memory for ipopts tests 1 year ago
detect-ipopts.h
…
detect-ipproto.c counters: remove ThreadVars from API 11 months ago
detect-ipproto.h
…
detect-iprep.c counters: remove ThreadVars from API 11 months ago
detect-iprep.h
…
detect-ipv4hdr.c
…
detect-ipv4hdr.h
…
detect-ipv6hdr.c
…
detect-ipv6hdr.h
…
detect-isdataat.c
…
detect-isdataat.h
…
detect-itype.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-itype.h
…
detect-ja4-hash.c
…
detect-ja4-hash.h
…
detect-krb5-cname.c detect: list-keywords cli shows multi-buffers 1 year ago
detect-krb5-cname.h
…
detect-krb5-errcode.c
…
detect-krb5-errcode.h
…
detect-krb5-sname.c detect: list-keywords cli shows multi-buffers 1 year ago
detect-krb5-sname.h
…
detect-krb5-ticket-encryption.c
…
detect-krb5-ticket-encryption.h
…
detect-l3proto.c counters: remove ThreadVars from API 11 months ago
detect-l3proto.h
…
detect-lua-extensions.c
…
detect-lua-extensions.h
…
detect-lua.c detect/lua: exclude script setup from the max-bytes limit 10 months ago
detect-lua.h
…
detect-mark.c src: doc: remove double-space typos 10 months ago
detect-mark.h
…
detect-metadata.c
…
detect-metadata.h
…
detect-modbus.c
…
detect-modbus.h
…
detect-msg.c detect/msg: avoid temporary stack buffer 12 months ago
detect-msg.h
…
detect-nfs-version.c detect/nfs: move nfs_procedure to rust 1 year ago
detect-nfs-version.h
…
detect-noalert.c
…
detect-noalert.h
…
detect-nocase.c
…
detect-nocase.h
…
detect-offset.c
…
detect-offset.h
…
detect-parse.c detect: do not exit on allocation failure during rule (re)load 10 months ago
detect-parse.h detect: new command line option : list-rule-protos 11 months ago
detect-pcre.c counters: remove ThreadVars from API 11 months ago
detect-pcre.h
…
detect-pkt-data.c
…
detect-pkt-data.h
…
detect-pktvar.c src: check retval of VarNameStoreRegister 12 months ago
detect-pktvar.h
…
detect-prefilter.c
…
detect-prefilter.h
…
detect-priority.c
…
detect-priority.h
…
detect-quic-cyu-hash.c counters: remove ThreadVars from API 11 months ago
detect-quic-cyu-hash.h
…
detect-quic-cyu-string.c counters: remove ThreadVars from API 11 months ago
detect-quic-cyu-string.h
…
detect-quic-sni.c src: doc: remove double-space typos 10 months ago
detect-quic-sni.h
…
detect-quic-ua.c src: doc: remove double-space typos 10 months ago
detect-quic-ua.h
…
detect-quic-version.c src: doc: remove double-space typos 10 months ago
detect-quic-version.h
…
detect-rawbytes.c
…
detect-rawbytes.h
…
detect-reference.c unittests: clean up memory for detect reference tests 1 year ago
detect-reference.h
…
detect-replace.c counters: remove ThreadVars from API 11 months ago
detect-replace.h
…
detect-requires.c
…
detect-requires.h
…
detect-rev.c detect: replace strtoul with ByteExtractStringUint32 1 year ago
detect-rev.h
…
detect-rpc.c counters: remove ThreadVars from API 11 months ago
detect-rpc.h
…
detect-sameip.c counters: remove ThreadVars from API 11 months ago
detect-sameip.h
…
detect-sid.c detect: replace strtoul with ByteExtractStringUint32 1 year ago
detect-sid.h
…
detect-sip-method.c
…
detect-sip-method.h
…
detect-sip-uri.c
…
detect-sip-uri.h
…
detect-smb-ntlmssp.c doc: add some missing url and desc 1 year ago
detect-smb-ntlmssp.h
…
detect-smb-share.c doc: add some missing url and desc 1 year ago
detect-smb-share.h
…
detect-smb-version.c
…
detect-smb-version.h
…
detect-smtp.c detect: list-keywords cli shows multi-buffers 1 year ago
detect-smtp.h
…
detect-ssh-hassh-server-string.c
…
detect-ssh-hassh-server-string.h
…
detect-ssh-hassh-server.c
…
detect-ssh-hassh-server.h
…
detect-ssh-hassh-string.c
…
detect-ssh-hassh-string.h
…
detect-ssh-hassh.c
…
detect-ssh-hassh.h
…
detect-ssh-proto-version.c
…
detect-ssh-proto-version.h
…
detect-ssh-proto.c
…
detect-ssh-proto.h
…
detect-ssh-software-version.c
…
detect-ssh-software-version.h
…
detect-ssh-software.c
…
detect-ssh-software.h
…
detect-ssl-state.c detect/ssl_state: minor code cleanups 10 months ago
detect-ssl-state.h
…
detect-ssl-version.c detect/ssl_version: minor code cleanups 10 months ago
detect-ssl-version.h detect/ssl: properly handle negation in ssl_version keyword 11 months ago
detect-stream_size.c unittests: clean up memory for detect stream_size tests 1 year ago
detect-stream_size.h
…
detect-tag.c doc: add some missing url and desc 1 year ago
detect-tag.h
…
detect-target.c
…
detect-target.h
…
detect-tcp-ack.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-tcp-ack.h detect: tcp.ack is now a generic integer 12 months ago
detect-tcp-flags.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-tcp-flags.h detect/tcp: make tcp.flags a generic integer with bitflags 1 year ago
detect-tcp-seq.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-tcp-seq.h detect: tcp.seq is now a generic integer 12 months ago
detect-tcp-window.c detect: tcp.window is now a generic integer 12 months ago
detect-tcp-window.h detect: tcp.window is now a generic integer 12 months ago
detect-tcp-wscale.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-tcp-wscale.h
…
detect-tcphdr.c
…
detect-tcphdr.h
…
detect-tcpmss.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-tcpmss.h
…
detect-template.c
…
detect-template.h
…
detect-template2.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-template2.h
…
detect-threshold.c counters: remove ThreadVars from API 11 months ago
detect-threshold.h
…
detect-tls-alpn.c detect: list-keywords cli shows multi-buffers 1 year ago
detect-tls-alpn.h
…
detect-tls-cert-fingerprint.c
…
detect-tls-cert-fingerprint.h
…
detect-tls-cert-issuer.c tls/issuerdn: use byte array instead of string 10 months ago
detect-tls-cert-issuer.h
…
detect-tls-cert-serial.c
…
detect-tls-cert-serial.h
…
detect-tls-cert-subject.c tls/subject: use byte array instead of string 10 months ago
detect-tls-cert-subject.h
…
detect-tls-cert-validity.c detect/tls: get rid of stack allocation 12 months ago
detect-tls-cert-validity.h
…
detect-tls-certs.c detect: list-keywords cli shows integers 1 year ago
detect-tls-certs.h
…
detect-tls-ja3-hash.c
…
detect-tls-ja3-hash.h
…
detect-tls-ja3-string.c
…
detect-tls-ja3-string.h
…
detect-tls-ja3s-hash.c
…
detect-tls-ja3s-hash.h
…
detect-tls-ja3s-string.c
…
detect-tls-ja3s-string.h
…
detect-tls-random.c
…
detect-tls-random.h
…
detect-tls-sni.c
…
detect-tls-sni.h
…
detect-tls-subjectaltname.c detect: list-keywords cli shows multi-buffers 1 year ago
detect-tls-subjectaltname.h
…
detect-tls-version.c detect/tls.version: minor code cleanups 10 months ago
detect-tls-version.h
…
detect-tls.c tls/issuerdn: use byte array instead of string 10 months ago
detect-tls.h
…
detect-tos.c
…
detect-tos.h
…
detect-transform-luaxform.c detect/luaxform: fix allowed lua rules check 10 months ago
detect-transform-luaxform.h
…
detect-transform-pcrexform.c
…
detect-transform-pcrexform.h
…
detect-ttl.c detect: use PrefilterIsPrefilterableById where possible 11 months ago
detect-ttl.h
…
detect-udphdr.c
…
detect-udphdr.h
…
detect-uricontent.c
…
detect-uricontent.h
…
detect-urilen.c counters: remove ThreadVars from API 11 months ago
detect-urilen.h
…
detect-vlan.c detect/vlan: move vlan.id keyword to generic integer 12 months ago
detect-vlan.h
…
detect-within.c
…
detect-within.h
…
detect-xbits.c detect/xbits: parse keywords w strtok_r 10 months ago
detect-xbits.h
…
detect.c counters: regular counter Add API update 11 months ago
detect.h counters: move regular counter id to dedicated type 11 months ago
device-storage.c
…
device-storage.h
…
feature.c features: use strcmp instead of memcmp 10 months ago
feature.h rust: bindgen functions neede for features 12 months ago
flow-bindgen.h rust: bindgen flow ffi API 1 year ago
flow-bit.c rust: bindgen GenericVarFree 1 year ago
flow-bit.h
…
flow-bypass.c counters: remove ThreadVars from counter registration 11 months ago
flow-bypass.h
…
flow-callbacks.c
…
flow-callbacks.h
…
flow-hash.c counters: regular counter Incr API update 11 months ago
flow-hash.h
…
flow-manager.c counters: remove ThreadVars from counter registration 11 months ago
flow-manager.h
…
flow-private.h flow-timeout: Use yaml config value for CAPTURE_BYPASSED flow 1 year ago
flow-queue.c
…
flow-queue.h
…
flow-spare-pool.c
…
flow-spare-pool.h
…
flow-storage.c unittests: clean memory in flow storage tests 1 year ago
flow-storage.h
…
flow-timeout.c rust: bindgen frames functions 12 months ago
flow-timeout.h
…
flow-util.c counters: remove ThreadVars from counter registration 11 months ago
flow-util.h counters: regular counter Incr API update 11 months ago
flow-var.c
…
flow-var.h
…
flow-worker.c counters: remove ThreadVars from counter registration 11 months ago
flow-worker.h
…
flow.c flow: swap MACs when flow direction is swapped 10 months ago
flow.h flow: split elephant flow detection per dir 10 months ago
host-bit.c unittests: clean up memory for hostbit tests 1 year ago
host-bit.h
…
host-queue.c
…
host-queue.h
…
host-storage.c unittests: clean up memory for host storage tests 1 year ago
host-storage.h
…
host-timeout.c
…
host-timeout.h
…
host.c
…
host.h
…
interval-tree.h
…
ippair-bit.c ippair-bit: Convert unittests to FAIL/PASS APIs 1 year ago
ippair-bit.h
…
ippair-queue.c
…
ippair-queue.h
…
ippair-storage.c ippair-storage: convert unittests to FAIL/PASS APIs 1 year ago
ippair-storage.h
…
ippair-timeout.c
…
ippair-timeout.h
…
ippair.c
…
ippair.h
…
log-cf-common.c unittests: disable LogCustomFormatTest01 for MinGW 1 year ago
log-cf-common.h
…
log-flush.c
…
log-flush.h
…
log-httplog.c
…
log-httplog.h
…
log-pcap.c src: doc: remove double-space typos 10 months ago
log-pcap.h
…
log-stats.c
…
log-stats.h
…
log-tcp-data.c
…
log-tcp-data.h
…
log-tlsstore.c tls/issuerdn: use byte array instead of string 10 months ago
log-tlsstore.h
…
main.c lib: opt-in signal handlers 1 year ago
output-eve-bindgen.h
…
output-eve-null.c
…
output-eve-null.h
…
output-eve-stream.c
…
output-eve-stream.h
…
output-eve-syslog.c
…
output-eve-syslog.h
…
output-eve.c
…
output-eve.h doc/devguide: document eve file types 1 year ago
output-file.c
…
output-file.h
…
output-filedata.c src: remove BUG_ON in packet path 1 year ago
output-filedata.h
…
output-filestore.c counters: remove ThreadVars from counter registration 11 months ago
output-filestore.h
…
output-flow.c
…
output-flow.h
…
output-json-alert.c eve/verdict: more explicit pass handling 12 months ago
output-json-alert.h eve/verdict: more explicit pass handling 12 months ago
output-json-anomaly.c
…
output-json-anomaly.h
…
output-json-arp.c
…
output-json-arp.h
…
output-json-common.c
…
output-json-dcerpc.c
…
output-json-dcerpc.h
…
output-json-dhcp.c
…
output-json-dhcp.h
…
output-json-dnp3-objects.c
…
output-json-dnp3-objects.h
…
output-json-dnp3.c detect/dnp3: make dnp3.ind a generic uint16 bitflags keyword 1 year ago
output-json-dnp3.h
…
output-json-dns.c util-byte: fix usage of util-byte integer parsers 1 year ago
output-json-dns.h
…
output-json-drop.c eve/verdict: more explicit pass handling 12 months ago
output-json-drop.h
…
output-json-email-common.c
…
output-json-email-common.h
…
output-json-file.c src: remove BUG_ON in packet path 1 year ago
output-json-file.h
…
output-json-flow.c flow: split elephant flow detection per dir 10 months ago
output-json-flow.h
…
output-json-frame.c output/frame: remove ifdefed out code 12 months ago
output-json-frame.h
…
output-json-ftp.c
…
output-json-ftp.h
…
output-json-http.c output/http: log content-type like other headers 12 months ago
output-json-http.h
…
output-json-ike.c
…
output-json-ike.h
…
output-json-mdns.c
…
output-json-mdns.h
…
output-json-metadata.c
…
output-json-metadata.h
…
output-json-mqtt.c
…
output-json-mqtt.h
…
output-json-netflow.c
…
output-json-netflow.h
…
output-json-nfs.c
…
output-json-nfs.h
…
output-json-pgsql.c
…
output-json-pgsql.h
…
output-json-smb.c
…
output-json-smb.h
…
output-json-smtp.c
…
output-json-smtp.h
…
output-json-stats.c eve/stats: work around format truncation warnings 1 year ago
output-json-stats.h
…
output-json-tls.c tls/issuerdn: use byte array instead of string 10 months ago
output-json-tls.h
…
output-json.c output: debug validation about stack allocations 12 months ago
output-json.h
…
output-lua.c detect/alert: fully add pass-only rules to alert queue 12 months ago
output-lua.h
…
output-packet.c
…
output-packet.h
…
output-stats.c
…
output-stats.h
…
output-streaming.c
…
output-streaming.h
…
output-tx.c output: fix NULL deref if no app-layer is logged 1 year ago
output-tx.h
…
output.c tls: remove deprecated tls-log 10 months ago
output.h
…
packet-queue.c
…
packet-queue.h
…
packet.c eve/verdict: clean up packet action checking 12 months ago
packet.h eve/verdict: clean up packet action checking 12 months ago
pkt-var.c
…
pkt-var.h
…
queue.h
…
reputation.c rust: bindgen SCSRepCatGetByShortname 12 months ago
reputation.h rust: bindgen SCSRepCatGetByShortname 12 months ago
respond-reject-libnet11.c
…
respond-reject-libnet11.h
…
respond-reject.c
…
respond-reject.h
…
runmode-af-packet.c af-packet: disable hwtimestamp by default 11 months ago
runmode-af-packet.h
…
runmode-af-xdp.c runmodes: let thread count callback return uint16_t 1 year ago
runmode-af-xdp.h
…
runmode-dpdk.c runmodes: let thread count callback return uint16_t 1 year ago
runmode-dpdk.h
…
runmode-erf-dag.c runmodes: let thread count callback return uint16_t 1 year ago
runmode-erf-dag.h
…
runmode-erf-file.c threads: remove thread group name logic 11 months ago
runmode-erf-file.h
…
runmode-ipfw.c
…
runmode-ipfw.h
…
runmode-lib.c
…
runmode-lib.h
…
runmode-netmap.c runmodes: let thread count callback return uint16_t 1 year ago
runmode-netmap.h
…
runmode-nflog.c runmodes: let thread count callback return uint16_t 1 year ago
runmode-nflog.h
…
runmode-nfq.c
…
runmode-nfq.h
…
runmode-pcap-file.c threads: remove thread group name logic 11 months ago
runmode-pcap-file.h
…
runmode-pcap.c runmodes: let thread count callback return uint16_t 1 year ago
runmode-pcap.h
…
runmode-unittests.c unittests: don't leak memory with --list-unittests 1 year ago
runmode-unittests.h
…
runmode-unix-socket.c unix-socket/hostbits: fix ipv6 address parsing 12 months ago
runmode-unix-socket.h
…
runmode-windivert.c
…
runmode-windivert.h
…
runmodes.c conf/output: friendly error message on bad configuration 1 year ago
runmodes.h frames: add --list-app-layer-frames option 10 months ago
rust.h rust: bindgen functions needed for datasets 12 months ago
source-af-packet.c af-packet: disable hwtimestamp by default 11 months ago
source-af-packet.h af-packet: disable hwtimestamp by default 11 months ago
source-af-xdp.c counters: remove ThreadVars from counter registration 11 months ago
source-af-xdp.h runmodes: let thread count callback return uint16_t 1 year ago
source-dpdk.c counters: remove ThreadVars from counter registration 11 months ago
source-dpdk.h
…
source-erf-dag.c counters: regular counter get local API update 11 months ago
source-erf-dag.h
…
source-erf-file.c
…
source-erf-file.h
…
source-ipfw.c counters: remove ThreadVars from sync API 11 months ago
source-ipfw.h
…
source-lib.c counters: regular counter Incr API update 11 months ago
source-lib.h
…
source-netmap.c counters: remove ThreadVars from counter registration 11 months ago
source-netmap.h
…
source-nflog.c counters: remove ThreadVars from counter registration 11 months ago
source-nflog.h
…
source-nfq-prototypes.h
…
source-nfq.c counters: remove ThreadVars from sync API 11 months ago
source-nfq.h
…
source-pcap-file-directory-helper.c counters: remove ThreadVars from sync API 11 months ago
source-pcap-file-directory-helper.h
…
source-pcap-file-helper.c counters: remove ThreadVars from sync API 11 months ago
source-pcap-file-helper.h
…
source-pcap-file.c src: remove BUG_ON in packet path 1 year ago
source-pcap-file.h
…
source-pcap.c counters: remove ThreadVars from counter registration 11 months ago
source-pcap.h runmodes: let thread count callback return uint16_t 1 year ago
source-windivert-prototypes.h
…
source-windivert.c windivert: upgrade to 2.0.0 11 months ago
source-windivert.h
…
stream-tcp-cache.c
…
stream-tcp-cache.h
…
stream-tcp-inline.c src: remove BUG_ON in packet path 1 year ago
stream-tcp-inline.h
…
stream-tcp-list.c counters: regular counter Incr API update 11 months ago
stream-tcp-list.h
…
stream-tcp-private.h stream: improve SYN and SYN/ACK retransmission handling 1 year ago
stream-tcp-reassemble.c src: doc: remove double-space typos 10 months ago
stream-tcp-reassemble.h counters: move regular counter id to dedicated type 11 months ago
stream-tcp-sack.c
…
stream-tcp-sack.h
…
stream-tcp-util.c unittests: clean up memory for stream tests 1 year ago
stream-tcp-util.h
…
stream-tcp.c src: doc: remove double-space typos 10 months ago
stream-tcp.h counters: move regular counter id to dedicated type 11 months ago
stream.c
…
stream.h
…
suricata-common.h
…
suricata-plugin.h plugins: update SC_API_VERSION to 9 1 year ago
suricata.c frames: add --list-app-layer-frames option 10 months ago
suricata.h lib: opt-in signal handlers 1 year ago
thread-callbacks.c
…
thread-callbacks.h
…
thread-storage.c unittests: clean up memory for thread storage tests 1 year ago
thread-storage.h
…
threads-debug.h detect/dbv: Assert MT lock held 1 year ago
threads-profile.h detect/dbv: Assert MT lock held 1 year ago
threads.c threads: convert unittests for FAIL/PASS APIs 1 year ago
threads.h detect/dbv: Assert MT lock held 1 year ago
threadvars.h threads: remove thread group name logic 11 months ago
tm-modules.c
…
tm-modules.h
…
tm-queuehandlers.c
…
tm-queuehandlers.h
…
tm-queues.c
…
tm-queues.h
…
tm-threads-common.h
…
tm-threads.c threads: remove thread group name logic 11 months ago
tm-threads.h threads: remove thread group name logic 11 months ago
tmqh-flow.c counters: remove ThreadVars from sync API 11 months ago
tmqh-flow.h
…
tmqh-packetpool.c packetpool: improve thread safety 1 year ago
tmqh-packetpool.h
…
tmqh-simple.c counters: remove ThreadVars from sync API 11 months ago
tmqh-simple.h
…
tree.h
…
tx-bit.c
…
tx-bit.h
…
unix-manager.c unix-socket: don't doubly setup stats private area 11 months ago
unix-manager.h
…
util-action.c unittests: clean up memory for action order tests 1 year ago
util-action.h
…
util-affinity.c unittests: don't leak memory in affinity tests 1 year ago
util-affinity.h
…
util-atomic.c
…
util-atomic.h
…
util-bpf.c
…
util-bpf.h
…
util-buffer.c
…
util-buffer.h
…
util-byte.c output/http: log content-type like other headers 12 months ago
util-byte.h output/http: log content-type like other headers 12 months ago
util-checksum.c
…
util-checksum.h
…
util-cidr.c
…
util-cidr.h
…
util-classification-config.c classification: use strcmp instead of memcmp 10 months ago
util-classification-config.h
…
util-clock.h
…
util-conf.c
…
util-conf.h
…
util-config.h
…
util-coredump-config.c util/coredump: refactor parsing and respect zero core dump limit 1 year ago
util-coredump-config.h util/coredump: refactor parsing and respect zero core dump limit 1 year ago
util-cpu.c util: add timing assembly for arm64 10 months ago
util-cpu.h
…
util-daemon.c
…
util-daemon.h
…
util-datalink.c
…
util-datalink.h
…
util-debug-filters.c
…
util-debug-filters.h
…
util-debug.c main/options: display level name, not numeric 11 months ago
util-debug.h main/options: display level name, not numeric 11 months ago
util-detect.c
…
util-detect.h
…
util-device-private.h
…
util-device.c util/misc: Change shortening format and add unittests 11 months ago
util-device.h
…
util-dpdk-bonding.c dpdk: supress a warning of the bond function 1 year ago
util-dpdk-bonding.h
…
util-dpdk-common.c
…
util-dpdk-common.h
…
util-dpdk-i40e.c
…
util-dpdk-i40e.h
…
util-dpdk-ice.c
…
util-dpdk-ice.h
…
util-dpdk-ixgbe.c
…
util-dpdk-ixgbe.h
…
util-dpdk-mlx5.c
…
util-dpdk-mlx5.h
…
util-dpdk-rss.c
…
util-dpdk-rss.h
…
util-dpdk.c
…
util-dpdk.h
…
util-ebpf.c
…
util-ebpf.h
…
util-enum.c
…
util-enum.h
…
util-error.c src: remove some unused functions 1 year ago
util-error.h rust: bindgen SCLogMessage 1 year ago
util-exception-policy-types.h counters: move regular counter id to dedicated type 11 months ago
util-exception-policy.c counters: remove ThreadVars from counter registration 11 months ago
util-exception-policy.h
…
util-file-decompression.c util/swf: move allocation from stack to heap 12 months ago
util-file-decompression.h
…
util-file-swf-decompression.c
…
util-file-swf-decompression.h
…
util-file.c output/file: validate force-hash YAML values 11 months ago
util-file.h rust: bindgen more file functions 11 months ago
util-fix_checksum.c
…
util-fix_checksum.h
…
util-flow-rate.c unittests: clean memory flow rate tests 1 year ago
util-flow-rate.h
…
util-fmemopen.c
…
util-fmemopen.h
…
util-hash-lookup3.c
…
util-hash-lookup3.h
…
util-hash-string.c string-hash: use strcmp instead of memcmp 10 months ago
util-hash-string.h
…
util-hash.c util: Fix a hash table collision bug 1 year ago
util-hash.h
…
util-hashlist.c
…
util-hashlist.h
…
util-host-info.c
…
util-host-info.h
…
util-host-os-info.c unittests: clean up memory for host os info tests 1 year ago
util-host-os-info.h
…
util-hugepages.c
…
util-hugepages.h
…
util-hyperscan.c
…
util-hyperscan.h
…
util-ioctl.c
…
util-ioctl.h
…
util-ip.c
…
util-ip.h
…
util-ja3.c
…
util-ja3.h
…
util-landlock.c rust: bindgen functions neede for features 12 months ago
util-landlock.h
…
util-log-redis.c
…
util-log-redis.h
…
util-logopenfile.c src: remove BUG_ON in packet path 1 year ago
util-logopenfile.h
…
util-lua-base64lib.c
…
util-lua-base64lib.h
…
util-lua-builtins.c
…
util-lua-builtins.h
…
util-lua-bytevarlib.c lua/bytevarlib: return luaL_error to suppress warning 1 year ago
util-lua-bytevarlib.h
…
util-lua-common.c
…
util-lua-common.h
…
util-lua-config.c
…
util-lua-config.h
…
util-lua-dataset.c rust: bindgen functions needed for datasets 12 months ago
util-lua-dataset.h
…
util-lua-dnp3-objects.c
…
util-lua-dnp3-objects.h
…
util-lua-dnp3.c
…
util-lua-dnp3.h
…
util-lua-dns.c
…
util-lua-dns.h
…
util-lua-filelib.c
…
util-lua-filelib.h
…
util-lua-flowintlib.c
…
util-lua-flowintlib.h
…
util-lua-flowlib.c
…
util-lua-flowlib.h
…
util-lua-flowvarlib.c
…
util-lua-flowvarlib.h
…
util-lua-hashlib.c
…
util-lua-hashlib.h
…
util-lua-http.c lua: fix null dereference in tx HTTP accessor functions 1 year ago
util-lua-http.h
…
util-lua-ja3.c
…
util-lua-ja3.h
…
util-lua-log.c
…
util-lua-log.h
…
util-lua-packetlib.c
…
util-lua-packetlib.h
…
util-lua-rule.c
…
util-lua-rule.h
…
util-lua-sandbox.c lua/sandbox: allow disabling the bytes limit 10 months ago
util-lua-sandbox.h lua/sandbox: allow disabling the bytes limit 10 months ago
util-lua-smtp.c
…
util-lua-smtp.h
…
util-lua-ssh.c
…
util-lua-ssh.h
…
util-lua-tls.c tls/issuerdn: use byte array instead of string 10 months ago
util-lua-tls.h
…
util-lua-util.c threads: remove thread group name logic 11 months ago
util-lua-util.h
…
util-lua.c lua: remove luajit pushlstring workaround 1 year ago
util-lua.h
…
util-macset.c flow: swap MACs when flow direction is swapped 10 months ago
util-macset.h flow: swap MACs when flow direction is swapped 10 months ago
util-magic.c unittests: clean up magic tests 1 year ago
util-magic.h
…
util-mem.c
…
util-mem.h
…
util-memcmp.c
…
util-memcmp.h
…
util-memcpy.h memcpy: rename memcpy_tolower 10 months ago
util-memrchr.c
…
util-memrchr.h
…
util-misc.c util/misc: Change shortening format and add unittests 11 months ago
util-misc.h
…
util-mpm-ac-ks-small.c
…
util-mpm-ac-ks.c counters: remove ThreadVars from API 11 months ago
util-mpm-ac-ks.h
…
util-mpm-ac-queue.c
…
util-mpm-ac-queue.h
…
util-mpm-ac.c counters: remove ThreadVars from API 11 months ago
util-mpm-ac.h
…
util-mpm-hs-cache.c hyperscan: prevent LTO opmitizing out hash calculation 1 year ago
util-mpm-hs-cache.h
…
util-mpm-hs-core.c
…
util-mpm-hs-core.h
…
util-mpm-hs.c counters: remove ThreadVars from API 11 months ago
util-mpm-hs.h
…
util-mpm.c memcpy: rename memcpy_tolower 10 months ago
util-mpm.h rust: bindgen MpmAddPatternCI 1 year ago
util-optimize.h
…
util-pages.c
…
util-pages.h
…
util-path.c
…
util-path.h
…
util-pidfile.c util/pidfile: address format truncation warning 1 year ago
util-pidfile.h
…
util-plugin.c
…
util-plugin.h
…
util-pool-thread.c src: remove BUG_ON in packet path 1 year ago
util-pool-thread.h
…
util-pool.c util/pool: Convert unittests to new FAIL/PASS api 12 months ago
util-pool.h
…
util-port-interval-tree.c
…
util-port-interval-tree.h
…
util-prefilter.c
…
util-prefilter.h
…
util-print.c
…
util-print.h
…
util-privs.c
…
util-privs.h
…
util-profiling-keywords.c
…
util-profiling-locks.c
…
util-profiling-locks.h
…
util-profiling-prefilter.c
…
util-profiling-rulegroups.c
…
util-profiling-rules.c profiling: log rule profiling as json by default 10 months ago
util-profiling.c
…
util-profiling.h
…
util-proto-name.c proto: use strcmp instead of memcmp 10 months ago
util-proto-name.h
…
util-radix-tree-common.h src: doc: remove double-space typos 10 months ago
util-radix4-tree.c unittests: clean up memory for radix tests 1 year ago
util-radix4-tree.h
…
util-radix6-tree.c unittests: clean up memory for radix tests 1 year ago
util-radix6-tree.h
…
util-random.c
…
util-random.h
…
util-reference-config.c src: doc: remove double-space typos 10 months ago
util-reference-config.h
…
util-rohash.c
…
util-rohash.h
…
util-rule-vars.c rule/vars: convert unittests to new FAIL/PASS API 1 year ago
util-rule-vars.h
…
util-runmodes.c threads: remove thread group name logic 11 months ago
util-runmodes.h runmodes: let thread count callback return uint16_t 1 year ago
util-running-modes.c frames: add --list-app-layer-frames option 10 months ago
util-running-modes.h frames: add --list-app-layer-frames option 10 months ago
util-signal.c
…
util-signal.h
…
util-spm-bm.c memcpy: rename memcpy_tolower 10 months ago
util-spm-bm.h
…
util-spm-bs.c rust: bindgen util-spm-bs.h 1 year ago
util-spm-bs.h rust: bindgen util-spm-bs.h 1 year ago
util-spm-bs2bm.c
…
util-spm-bs2bm.h
…
util-spm-hs.c src: remove BUG_ON in packet path 1 year ago
util-spm-hs.h
…
util-spm.c spm: minor unittest cleanup 10 months ago
util-spm.h
…
util-storage.c
…
util-storage.h
…
util-streaming-buffer.c unittests: clean up memory for stream tests 1 year ago
util-streaming-buffer.h
…
util-strlcatu.c
…
util-strlcpyu.c
…
util-strptime.c
…
util-sysfs.c
…
util-sysfs.h
…
util-syslog.c
…
util-syslog.h
…
util-systemd.c
…
util-systemd.h
…
util-thash.c src: remove BUG_ON in packet path 1 year ago
util-thash.h
…
util-threshold-config.c src: doc: remove double-space typos 10 months ago
util-threshold-config.h
…
util-time.c util/time: fix TimeDifferenceMicros microseconds computation 12 months ago
util-time.h
…
util-unittest-helper.c counters: remove ThreadVars from API 11 months ago
util-unittest-helper.h
…
util-unittest.c
…
util-unittest.h
…
util-validate.h
…
util-var-name.c util/varname: check id before unregister 12 months ago
util-var-name.h
…
util-var.c rust: bindgen GenericVarFree 1 year ago
util-var.h rust: bindgen GenericVarFree 1 year ago
win32-misc.c
…
win32-misc.h
…
win32-service.c
…
win32-service.h
…
win32-syscall.c
…
win32-syscall.h
…
win32-syslog.h
…