]> git.ipfire.org Git - thirdparty/snort3.git/commit
Squashed commit of the following:
authorruss <rucombs@cisco.com>
Sun, 30 Jun 2019 04:04:55 +0000 (00:04 -0400)
committerruss <rucombs@cisco.com>
Sun, 30 Jun 2019 04:04:55 +0000 (00:04 -0400)
commit13e6f61e709ffdaa50e105a684e22ed31a930429
tree121da2ccd6feb20efd4d8225dcbf92c942cff84b
parent9785e613f9b91aa807fb4efa9947c2e6c108618f
Squashed commit of the following:

commit f1e74ea89089c180ee2ed823daa009d19954b922
Author: russ <rucombs@cisco.com>
Date:   Sat Jun 29 17:49:25 2019 -0400

    profiler: convert ips options to use optional profiles

    Avoid the perf hit and double counting (with rule_eval) for detection
    options with normal builds.  Not deleted since it could be helpful
    to see individual options in some cases despite the issues.  Due to a
    bug, this is commented out but should be made a build option once
    fixed.

commit b06b0aebed47a2f8676346e4a7c3dcb2dd522f75
Author: russ <rucombs@cisco.com>
Date:   Thu Jun 27 10:28:44 2019 -0400

    profiler: split out paf from stream_tcp

    PAF (Protocol Aware Flushing) is the delegation by stream_tcp of flush point
    determination by service inspectors which encapsulate PDU analysis.  This
    change splits out the scanning portion of the PAF interface.  Reassembly
    will be dealt with later.  http_inspect will be the biggest contributor to
    PAF since it front-loads considerable to the scanning phase.

commit 9dfdc6c399eddd925185e4a0e1dbeec1df91ba5d
Author: russ <rucombs@cisco.com>
Date:   Wed Jun 26 21:36:37 2019 -0400

    profiler: track DAQ message receives and finalizes

commit 8ec66593d58130bca89071a2d4a2a0429af57223
Author: russ <rucombs@cisco.com>
Date:   Wed Jun 26 17:28:57 2019 -0400

    profiler: eliminate deep profiling

    Deep profiling creates broken totals, impacts performance, and is not a
    good substitute for actual profiling with gprof etc.  Furthermore, shallow
    profiling (ie a single bucket per component and subsystem) provides enough
    information to tune Snort effectively.
117 files changed:
config.cmake.h.in
configure_cmake.sh
src/detection/detect.cc
src/detection/detect.h
src/detection/detection_engine.cc
src/detection/fp_detect.cc
src/detection/fp_detect.h
src/framework/ips_option.h
src/framework/mpse.cc
src/framework/mpse.h
src/ips_options/ips_ack.cc
src/ips_options/ips_asn1.cc
src/ips_options/ips_base64.cc
src/ips_options/ips_bufferlen.cc
src/ips_options/ips_byte_extract.cc
src/ips_options/ips_byte_jump.cc
src/ips_options/ips_byte_math.cc
src/ips_options/ips_byte_test.cc
src/ips_options/ips_content.cc
src/ips_options/ips_dsize.cc
src/ips_options/ips_file_data.cc
src/ips_options/ips_file_type.cc
src/ips_options/ips_flags.cc
src/ips_options/ips_flow.cc
src/ips_options/ips_flowbits.cc
src/ips_options/ips_fragbits.cc
src/ips_options/ips_fragoffset.cc
src/ips_options/ips_hash.cc
src/ips_options/ips_icmp_id.cc
src/ips_options/ips_icmp_seq.cc
src/ips_options/ips_icode.cc
src/ips_options/ips_id.cc
src/ips_options/ips_ip_proto.cc
src/ips_options/ips_ipopts.cc
src/ips_options/ips_isdataat.cc
src/ips_options/ips_itype.cc
src/ips_options/ips_luajit.cc
src/ips_options/ips_pcre.cc
src/ips_options/ips_pkt_data.cc
src/ips_options/ips_raw_data.cc
src/ips_options/ips_regex.cc
src/ips_options/ips_replace.cc
src/ips_options/ips_rpc.cc
src/ips_options/ips_sd_pattern.cc
src/ips_options/ips_seq.cc
src/ips_options/ips_session.cc
src/ips_options/ips_so.cc
src/ips_options/ips_tos.cc
src/ips_options/ips_ttl.cc
src/ips_options/ips_window.cc
src/main/analyzer.cc
src/main/analyzer.h
src/main/snort.cc
src/managers/ips_manager.cc
src/network_inspectors/appid/appid_config.cc
src/network_inspectors/appid/appid_http_session.cc
src/network_inspectors/appid/appid_http_session.h
src/network_inspectors/appid/client_plugins/client_discovery.cc
src/network_inspectors/appid/ips_appid_option.cc
src/network_inspectors/appid/lua_detector_api.cc
src/network_inspectors/appid/lua_detector_api.h
src/network_inspectors/appid/lua_detector_module.cc
src/network_inspectors/appid/service_plugins/service_discovery.cc
src/network_inspectors/appid/tp_appid_utils.cc
src/network_inspectors/appid/tp_appid_utils.h
src/profiler/profiler_defs.h
src/service_inspectors/dce_rpc/dce_co.cc
src/service_inspectors/dce_rpc/dce_common.cc
src/service_inspectors/dce_rpc/dce_smb.cc
src/service_inspectors/dce_rpc/dce_smb.h
src/service_inspectors/dce_rpc/dce_smb_commands.cc
src/service_inspectors/dce_rpc/dce_smb_module.cc
src/service_inspectors/dce_rpc/dce_smb_module.h
src/service_inspectors/dce_rpc/dce_smb_transaction_utils.cc
src/service_inspectors/dce_rpc/dce_smb_utils.cc
src/service_inspectors/dce_rpc/dce_tcp.cc
src/service_inspectors/dce_rpc/dce_tcp.h
src/service_inspectors/dce_rpc/dce_tcp_module.cc
src/service_inspectors/dce_rpc/dce_tcp_module.h
src/service_inspectors/dce_rpc/dce_udp.cc
src/service_inspectors/dce_rpc/dce_udp.h
src/service_inspectors/dce_rpc/dce_udp_module.cc
src/service_inspectors/dce_rpc/dce_udp_module.h
src/service_inspectors/dce_rpc/dce_udp_processing.cc
src/service_inspectors/dce_rpc/ips_dce_iface.cc
src/service_inspectors/dce_rpc/ips_dce_opnum.cc
src/service_inspectors/dce_rpc/ips_dce_stub_data.cc
src/service_inspectors/dce_rpc/smb_message.cc
src/service_inspectors/dnp3/ips_dnp3_data.cc
src/service_inspectors/dnp3/ips_dnp3_func.cc
src/service_inspectors/dnp3/ips_dnp3_ind.cc
src/service_inspectors/dnp3/ips_dnp3_obj.cc
src/service_inspectors/gtp/ips_gtp_info.cc
src/service_inspectors/gtp/ips_gtp_type.cc
src/service_inspectors/gtp/ips_gtp_version.cc
src/service_inspectors/http_inspect/ips_http.cc
src/service_inspectors/modbus/ips_modbus_data.cc
src/service_inspectors/modbus/ips_modbus_func.cc
src/service_inspectors/modbus/ips_modbus_unit.cc
src/service_inspectors/sip/ips_sip.cc
src/service_inspectors/sip/ips_sip_method.cc
src/service_inspectors/sip/ips_sip_stat_code.cc
src/service_inspectors/ssl/ips_ssl_state.cc
src/service_inspectors/ssl/ips_ssl_version.cc
src/stream/ip/ip_defrag.cc
src/stream/ip/ip_module.cc
src/stream/ip/ip_module.h
src/stream/ip/ip_session.cc
src/stream/libtcp/tcp_stream_tracker.cc
src/stream/paf.cc
src/stream/paf.h
src/stream/tcp/ips_stream_reassemble.cc
src/stream/tcp/ips_stream_size.cc
src/stream/tcp/tcp_module.cc
src/stream/tcp/tcp_module.h
src/stream/tcp/tcp_reassembler.cc
src/stream/tcp/tcp_session.cc