]> git.ipfire.org Git - thirdparty/snort3.git/log
thirdparty/snort3.git
3 weeks agoPull request #4273: main: update usage of a deprecated hwloc macro master
Andrii Serbeniuk -X (aserbeni - SOFTSERVE INC at Cisco) [Wed, 10 Apr 2024 10:28:49 +0000 (10:28 +0000)] 
Pull request #4273: main: update usage of a deprecated hwloc macro

Merge in SNORT/snort3 from ~ASERBENI/snort3:hwloc_macro_update to master

Squashed commit of the following:

commit 82c0b7a89d3c9fbfcc7d870fe9572df21ae6bb9e
Author: Andrii Serbeniuk <aserbeni@cisco.com>
Date:   Tue Apr 9 11:09:37 2024 -0400

    main: update usage of a deprecated hwloc macro

    Thanks to teicors for reporting the issue!

3 weeks agoPull request #4271: build: generate and tag 3.1.84.0 3.1.84.0
Priyanka Bangalore Gurudev (prbg) [Tue, 9 Apr 2024 20:42:54 +0000 (20:42 +0000)] 
Pull request #4271: build: generate and tag 3.1.84.0

Merge in SNORT/snort3 from ~PRBG/snort3:build_3.1.84.0 to master

Squashed commit of the following:

commit ea6d2d4ce80fe78f27587f110cce3d9aa290dc55
Author: Priyanka Gurudev <prbg@cisco.com>
Date:   Mon Apr 8 23:21:03 2024 -0400

    build: generate and tag 3.1.84.0

3 weeks agoPull request #4270: packet_capture: include cstdint in a header file
Andrii Serbeniuk -X (aserbeni - SOFTSERVE INC at Cisco) [Mon, 8 Apr 2024 15:18:16 +0000 (15:18 +0000)] 
Pull request #4270: packet_capture: include cstdint in a header file

Merge in SNORT/snort3 from ~ASERBENI/snort3:alpine_cstdint to master

Squashed commit of the following:

commit 2a7dfb7b1983eabf06dea5e96c1dd86bc115e60d
Author: Plup <plup@plup.io>
Date:   Tue Apr 2 13:55:02 2024 +0200

    packet_capture: include cstdint in a header file

    This resolves build issues on Alpine 3.19.1.
    Thanks to Plup <plup@plup.io> and Hauke Mehrtens <hauke@hauke-m.de> for reporting this!

4 weeks agoPull request #4267: framework: add workaround to support case from double to unsigned
Yehor Velykozhon -X (yvelykoz - SOFTSERVE INC at Cisco) [Tue, 2 Apr 2024 13:24:32 +0000 (13:24 +0000)] 
Pull request #4267: framework: add workaround to support case from double to unsigned

Merge in SNORT/snort3 from ~YVELYKOZ/snort3:fix_parser_on_arm to master

Squashed commit of the following:

commit 3a02dd2f969f3902c8d48885a8a9259614259d10
Author: Yehor Velykozhon <yvelykoz@cisco.com>
Date:   Mon Apr 1 17:31:24 2024 +0300

    framework: add correct cast from double to unsigned

    Standard doesn't not guarantee the conversion of negative double
    to unsigned. Meanwhile, cast double to int and int to unsigned
    is defined by it.

4 weeks agoPull request #4261: http_inspect: add file_data to buffer list
Danylo Kyrylov -X (dkyrylov - SOFTSERVE INC at Cisco) [Mon, 1 Apr 2024 12:00:53 +0000 (12:00 +0000)] 
Pull request #4261: http_inspect: add file_data to buffer list

Merge in SNORT/snort3 from ~DKYRYLOV/snort3:nhi_add_file_data to master

Squashed commit of the following:

commit 4d97b856566e56a3496d3602edf661c6f4ba0c0e
Author: dkyrylov <dkyrylov@cisco.com>
Date:   Mon Mar 25 14:31:42 2024 +0200

    http_inspect: add file_data to buffer list

5 weeks agoPull request #4257: appid: enhanced appid config parsing
Bhumika Sachdeva (bsachdev) [Wed, 27 Mar 2024 13:17:58 +0000 (13:17 +0000)] 
Pull request #4257: appid: enhanced appid config parsing

Merge in SNORT/snort3 from ~BSACHDEV/snort3:tp_delimiter_change to master

Squashed commit of the following:

commit 9c063de67b6f2b81d3a2d1d2dfd63b07a8c45e02
Author: bsachdev <bsachdev@cisco.com>
Date:   Mon Mar 18 11:10:17 2024 -0400

    appid: enhanced appid config parsing

5 weeks agoPull request #4256: dce_smb: Fixing an ASAN memory corruption issue
Kumar swamy Nagabhushana (kumhn) [Wed, 27 Mar 2024 07:03:55 +0000 (07:03 +0000)] 
Pull request #4256: dce_smb: Fixing an ASAN memory corruption issue

Merge in SNORT/snort3 from ~KUMHN/snort3:smb_asan_crash to master

Squashed commit of the following:

commit 3663fe8d9a6ca005062e195b2c5c3b25d10adbc6
Author: kumhn <kumhn@cisco.com>
Date:   Fri Mar 22 17:39:58 2024 +0530

    dce_smb: Fixing an ASAN memory corruption issue

5 weeks agoPull request #4253: appid: remove locks from peg counts
Lukasz Czarnik -X (lczarnik - SOFTSERVE INC at Cisco) [Tue, 26 Mar 2024 18:55:14 +0000 (18:55 +0000)] 
Pull request #4253: appid: remove locks from peg counts

Merge in SNORT/snort3 from ~LCZARNIK/snort3:remove_locks to master

Squashed commit of the following:

commit 4d73601f9df627b208115605398b400d8218b1b9
Author: Lukasz Czarnik <lczarnik@cisco.com>
Date:   Thu Mar 21 09:01:14 2024 -0400

    appid: remove locks from peg counts

5 weeks agoPull request #4254: appid: separate main thread and packet thread appid_pub_id
Lukasz Czarnik -X (lczarnik - SOFTSERVE INC at Cisco) [Tue, 26 Mar 2024 18:54:26 +0000 (18:54 +0000)] 
Pull request #4254: appid: separate main thread and packet thread appid_pub_id

Merge in SNORT/snort3 from ~LCZARNIK/snort3:appid_pub_id to master

Squashed commit of the following:

commit c7e9539db79ad120fdd1c50dd2b1d213378e6aa9
Author: Lukasz Czarnik <lczarnik@cisco.com>
Date:   Fri Mar 22 07:53:34 2024 -0400

    appid: separate main thread and packet thread appid_pub_id

5 weeks agoPull request #4260: xhash: fixed typo
ARUNKUMAR KAYAMBU -X (akayambu - XORIANT CORPORATION at Cisco) [Tue, 26 Mar 2024 15:41:55 +0000 (15:41 +0000)] 
Pull request #4260: xhash: fixed typo

Merge in SNORT/snort3 from ~AKAYAMBU/snort3:xhash_typo_fix to master

Squashed commit of the following:

commit ef656c71459e6f6baeaa91e91a975b38f2f9ad34
Author: Arunkumar Kayambu <akayambu@cisco.com>
Date:   Mon Mar 25 15:55:57 2024 -0400

    xhash: fixed typo

5 weeks agoPull request #4255: detection: handle policy changes in continuation
Adrian Mamolea (admamole) [Tue, 26 Mar 2024 14:27:58 +0000 (14:27 +0000)] 
Pull request #4255: detection: handle policy changes in continuation

Merge in SNORT/snort3 from ~ADMAMOLE/snort3:sse_policy_change to master

Squashed commit of the following:

commit 32fd659e58805f4a5c0f76954596e520e6c0a825
Author: Adrian Mamolea <admamole@cisco.com>
Date:   Thu Mar 21 17:01:19 2024 -0400

    detection: handle policy changes in continuation

5 weeks agoPull request #4258: build: generate and tag 3.1.83.0 3.1.83.0
Priyanka Bangalore Gurudev (prbg) [Mon, 25 Mar 2024 17:22:54 +0000 (17:22 +0000)] 
Pull request #4258: build: generate and tag 3.1.83.0

Merge in SNORT/snort3 from ~PRBG/snort3:build_3.1.83.0 to master

Squashed commit of the following:

commit 5db7781f1c56b76fe08c45f6cea597db2b3d6e3f
Author: Priyanka Gurudev <prbg@cisco.com>
Date:   Sun Mar 24 21:40:55 2024 -0400

    build: generate and tag 3.1.83.0

6 weeks agoPull request #4237: trace: Replace colon delimiter for tenant with whitespace in...
Vitalii Tron -X (vtron - SOFTSERVE INC at Cisco) [Thu, 21 Mar 2024 14:33:44 +0000 (14:33 +0000)] 
Pull request #4237: trace: Replace colon delimiter for tenant with whitespace in the trace_logger output

Merge in SNORT/snort3 from ~VTRON/snort3:trace_tenant_format to master

Squashed commit of the following:

commit df874033ba82d3915710cb65bf020a09244d931f
Author: Vitalii Tron <vtron@cisco.com>
Date:   Thu Mar 7 02:45:44 2024 -0500

    trace: Replace colon delimiter for tenant with whitespace in the trace_logger output

6 weeks agoPull request #4208: packet_capture: fixed wrong dlt in pcap header when nfq is used
Oleg Torubara -X (otorubar - SOFTSERVE INC at Cisco) [Thu, 21 Mar 2024 13:40:55 +0000 (13:40 +0000)] 
Pull request #4208: packet_capture: fixed wrong dlt in pcap header when nfq is used

Merge in SNORT/snort3 from ~OTORUBAR/snort3:fix_wrong_dlt_for_nfq_daq to master

Squashed commit of the following:

commit cee6485478982b20b5b0478c8814374beb14fab8
Author: otorubar <otorubar@cisco.com>
Date:   Thu Feb 15 09:12:19 2024 -0800

    packet_capture: fixed wrong dlt in pcap header when nfq is used

6 weeks agoPull request #4248: doc: add libml to optional dependencies
Yurii Chalov -X (ychalov - SOFTSERVE INC at Cisco) [Tue, 19 Mar 2024 16:21:05 +0000 (16:21 +0000)] 
Pull request #4248: doc: add libml to optional dependencies

Merge in SNORT/snort3 from ~YCHALOV/snort3:snort_ml_doc_update to master

Squashed commit of the following:

commit ba718f34220b4a718057817fa51870b3b9f8a319
Author: Yurii Chalov <ychalov@cisco.com>
Date:   Mon Mar 18 13:24:25 2024 +0100

    doc: add libml to optional dependencies

6 weeks agoPull request #4249: flow: UT fix
ARUNKUMAR KAYAMBU -X (akayambu - XORIANT CORPORATION at Cisco) [Mon, 18 Mar 2024 19:52:08 +0000 (19:52 +0000)] 
Pull request #4249: flow: UT fix

Merge in SNORT/snort3 from ~AKAYAMBU/snort3:flow_ut_fix to master

Squashed commit of the following:

commit 4d9d08eb2afd642f5122ed568286b3df8111368e
Author: Arunkumar Kayambu <akayambu@cisco.com>
Date:   Mon Mar 18 14:34:45 2024 -0400

    flow: UT fix

6 weeks agoPull request #4242: hash: exception handling for random device
Raza Shafiq (rshafiq) [Mon, 18 Mar 2024 15:40:49 +0000 (15:40 +0000)] 
Pull request #4242: hash: exception handling for random device

Merge in SNORT/snort3 from ~RSHAFIQ/snort3:rand_dev_exception to master

Squashed commit of the following:

commit 3cf896071f6c739cd5d36038c99eae8f928e2e66
Author: rshafiq <rshafiq@cisco.com>
Date:   Wed Mar 13 13:40:21 2024 -0400

    hash: exception handling for random device

6 weeks agoPull request #4238: Show conn details
ARUNKUMAR KAYAMBU -X (akayambu - XORIANT CORPORATION at Cisco) [Mon, 18 Mar 2024 15:07:10 +0000 (15:07 +0000)] 
Pull request #4238: Show conn details

Merge in SNORT/snort3 from ~AKAYAMBU/snort3:show_conn_details to master

Squashed commit of the following:

commit 5a7c785c52599c257ff8e2da88d4ec7e63858351
Author: RAGHURAAM CONJEEVARAM UDAYANAN -X (rconjeev - XORIANT CORPORATION at Cisco) <rconjeev@cisco.com>
Date:   Wed Nov 8 17:39:11 2023 +0530

    flow: add filter to dump flows

7 weeks agoPull request #4245: detection: update debug logs to avoid use invalid packet
Yehor Velykozhon -X (yvelykoz - SOFTSERVE INC at Cisco) [Fri, 15 Mar 2024 16:40:34 +0000 (16:40 +0000)] 
Pull request #4245: detection: update debug logs to avoid use invalid packet

Merge in SNORT/snort3 from ~YVELYKOZ/snort3:sse_debug_fix to master

Squashed commit of the following:

commit 2146df95cc4fdeef0bfc0ca3d5aea5559ad7a706
Author: Yehor Velykozhon <yvelykoz@cisco.com>
Date:   Fri Mar 15 17:02:31 2024 +0200

    detection: use correct packet in trace logs

7 weeks agoPull request #4243: stream: count retransmits when we disable content rules
Michael Matirko (mmatirko) [Fri, 15 Mar 2024 16:22:19 +0000 (16:22 +0000)] 
Pull request #4243: stream: count retransmits when we disable content rules

Merge in SNORT/snort3 from ~MMATIRKO/snort3:rexmit to master

Squashed commit of the following:

commit 338821c3170cf12362c666cc0eb98f9291de268c
Author: Michael Matirko <mmatirko@cisco.com>
Date:   Wed Mar 13 15:28:23 2024 -0400

    stream: count retransmits when we disable content rules

7 weeks agoPull request #4241: build: generate and tag 3.1.82.0 3.1.82.0
Priyanka Bangalore Gurudev (prbg) [Wed, 13 Mar 2024 14:17:33 +0000 (14:17 +0000)] 
Pull request #4241: build: generate and tag 3.1.82.0

Merge in SNORT/snort3 from ~PRBG/snort3:build_3.1.82.0 to master

Squashed commit of the following:

commit d9bb586ef7e5317954321e6ff1934b399014ac6c
Author: Priyanka Gurudev <prbg@cisco.com>
Date:   Tue Mar 12 12:20:50 2024 -0400

    build: generate and tag 3.1.82.0

7 weeks agoPull request #4224: packet_capture: add packet capturing per tenant
Oleg Torubara -X (otorubar - SOFTSERVE INC at Cisco) [Tue, 12 Mar 2024 05:50:06 +0000 (05:50 +0000)] 
Pull request #4224: packet_capture: add packet capturing per tenant

Merge in SNORT/snort3 from ~OTORUBAR/snort3:packet_capture_per_tenant to master

Squashed commit of the following:

commit 3c0d68b1ab21d305c9d46016fe30e8c40fa1d9e8
Author: otorubar <otorubar@cisco.com>
Date:   Fri Feb 23 09:05:08 2024 -0800

    packet_capture: add packet capturing per tenant

8 weeks agoPull request #4235: stream_tcp: add reasons for drops due to trims
Juweria Ali Imran (jaliimra) [Thu, 7 Mar 2024 14:22:19 +0000 (14:22 +0000)] 
Pull request #4235: stream_tcp: add reasons for drops due to trims

Merge in SNORT/snort3 from ~JALIIMRA/snort3:drop_reason to master

Squashed commit of the following:

commit fb9c9dc56abfd72ddc898814680be4f356d71ee8
Author: Juweria Ali Imran <jaliimra@cisco.com>
Date:   Thu Feb 1 03:54:41 2024 -0500

    stream_tcp: add reasons for drops due to trims

8 weeks agoPull request #4233: file_api: do not clear the file capture and user file data pointe...
Ron Dempster (rdempste) [Wed, 6 Mar 2024 14:58:27 +0000 (14:58 +0000)] 
Pull request #4233: file_api: do not clear the file capture and user file data pointers when updating the verdict from the cache

Merge in SNORT/snort3 from ~RDEMPSTE/snort3:file_api to master

Squashed commit of the following:

commit 791c1a09f14d4cd4ebb4d9094c445a7a44b6c30e
Author: Ron Dempster (rdempste) <rdempste@cisco.com>
Date:   Thu Feb 29 08:16:59 2024 -0500

    file_api: do not clear the file capture and user file data pointers when updating the verdict from the cache

8 weeks agoPull request #4227: stream_tcp: implement support for proxy mode normalization behavior
Davis McPherson -X (davmcphe - XORIANT CORPORATION at Cisco) [Wed, 6 Mar 2024 14:07:31 +0000 (14:07 +0000)] 
Pull request #4227: stream_tcp: implement support for proxy mode normalization behavior

Merge in SNORT/snort3 from ~DAVMCPHE/snort3:stream_tcp_proxy to master

Squashed commit of the following:

commit 82260056aa6c8e53a7d6fed23e77ebaf75d8c337
Author: davis mcpherson <davmcphe@cisco.com>
Date:   Thu Feb 22 11:44:08 2024 -0500

    stream_tcp: implement support for proxy mode normalization behavior

8 weeks agoPull request #4236: stats: fix timing stats
ARUNKUMAR KAYAMBU -X (akayambu - XORIANT CORPORATION at Cisco) [Wed, 6 Mar 2024 14:07:02 +0000 (14:07 +0000)] 
Pull request #4236: stats: fix timing stats

Merge in SNORT/snort3 from ~AKAYAMBU/snort3:timing_stats_fix to master

Squashed commit of the following:

commit 87f6beb339848be3b2175ee409cabab96b1a96e1
Author: Arunkumar Kayambu <akayambu@cisco.com>
Date:   Tue Mar 5 15:32:26 2024 -0500

    stats: fix timing stats

8 weeks agoPull request #4230: trace: Add tenants filtering and logging
Vitalii Tron -X (vtron - SOFTSERVE INC at Cisco) [Tue, 5 Mar 2024 17:21:04 +0000 (17:21 +0000)] 
Pull request #4230: trace: Add tenants filtering and logging

Merge in SNORT/snort3 from ~VTRON/snort3:trace_module_tenant to master

Squashed commit of the following:

commit ae746511828751a36b744c3056da353cdfecf00e
Author: Vitalii Tron <vtron@cisco.com>
Date:   Tue Feb 27 11:38:40 2024 -0500

    trace: add tenants logging

8 weeks agoPull request #4232: appid: broadcast commands with ctrlcon
Lukasz Czarnik -X (lczarnik - SOFTSERVE INC at Cisco) [Tue, 5 Mar 2024 14:08:37 +0000 (14:08 +0000)] 
Pull request #4232: appid: broadcast commands with ctrlcon

Merge in SNORT/snort3 from ~LCZARNIK/snort3:broad_ctrlcon to master

Squashed commit of the following:

commit 43cc5e1b230645b337b19bcb350c511ac67f8abf
Author: Lukasz Czarnik <lczarnik@cisco.com>
Date:   Fri Mar 1 08:33:46 2024 -0500

    appid: broadcast commands with ctrlcon

8 weeks agoPull request #4174: filters: updated dyn array with vector
Raza Shafiq (rshafiq) [Mon, 4 Mar 2024 21:21:51 +0000 (21:21 +0000)] 
Pull request #4174: filters: updated dyn array with vector

Merge in SNORT/snort3 from ~RSHAFIQ/snort3:dyn_vector to master

Squashed commit of the following:

commit ebf9adff7693f9073fe08e63862779e9722232c4
Author: rshafiq <rshafiq@cisco.com>
Date:   Wed Jan 24 19:11:05 2024 -0500

    filters: updated dyn array with vector

8 weeks agoPull request #4095: Perf accumulate each thread data
ARUNKUMAR KAYAMBU -X (akayambu - XORIANT CORPORATION at Cisco) [Mon, 4 Mar 2024 20:18:43 +0000 (20:18 +0000)] 
Pull request #4095: Perf accumulate each thread data

Merge in SNORT/snort3 from ~AKAYAMBU/snort3:perf_accumulate_each_thread_data to master

Squashed commit of the following:

commit bc4dfd6566df0b9276141b33529c9c2e6d619231
Author: Arunkumar Kayambu <akayambu@cisco.com>
Date:   Fri Oct 27 11:19:09 2023 -0400

    stats: perf improvement changes

2 months agoPull request #4234: Rename Kaizen to Snort ML.
Oleksii Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) [Mon, 4 Mar 2024 15:17:21 +0000 (15:17 +0000)] 
Pull request #4234: Rename Kaizen to Snort ML.

Merge in SNORT/snort3 from ~OSHUMEIK/snort3:rename_ml to master

Squashed commit of the following:

commit 7508b261bf66ef79e93ae300c5dee1287898b294
Author: Oleksii Shumeiko <oshumeik@cisco.com>
Date:   Fri Mar 1 15:55:49 2024 +0200

    kaizen: rename to Snort ML

2 months agoPull request #4220: smb: fix for improper session cache destruction in tterm during...
Ashik Thomas (ashiktho) [Fri, 1 Mar 2024 06:16:55 +0000 (06:16 +0000)] 
Pull request #4220: smb: fix for improper session cache destruction in tterm during config reload

Merge in SNORT/snort3 from ~ASHIKTHO/snort3:CSCwi63586_H_2 to master

Squashed commit of the following:

commit eacf9039ca9a09319adb944ebb948cdd42e158be
Author: Ashik Thomas <ashiktho@cisco.com>
Date:   Tue Feb 27 13:26:06 2024 +0530

    smb: fix for improper session cache destruction in tterm during config reload - review comments

commit 3545adcb934ede0d6d4c18c1a009de70f691e4f3
Author: Ashik Thomas <ashiktho@cisco.com>
Date:   Wed Feb 21 00:19:10 2024 +0530

    smb: fix for improper session cache destruction in tterm during config reload

2 months agoPull request #4229: stream: remove splitter from session before inspectors
Andrii Serbeniuk -X (aserbeni - SOFTSERVE INC at Cisco) [Thu, 29 Feb 2024 15:34:45 +0000 (15:34 +0000)] 
Pull request #4229: stream: remove splitter from session before inspectors

Merge in SNORT/snort3 from ~ASERBENI/snort3:http_splitter_tsan to master

Squashed commit of the following:

commit c130ef97ed07885fff092d5b5c0fb79caaa7b595
Author: Vitalii <vhorbato@cisco.com>
Date:   Fri Nov 11 11:01:07 2022 +0200

    stream: remove splitter from session before inspectors

2 months agoPull request #4215: appid: change eve pattern matching logic
Lukasz Czarnik -X (lczarnik - SOFTSERVE INC at Cisco) [Wed, 28 Feb 2024 20:12:54 +0000 (20:12 +0000)] 
Pull request #4215: appid: change eve pattern matching logic

Merge in SNORT/snort3 from ~LCZARNIK/snort3:eve to master

Squashed commit of the following:

commit fcc27614cacf8e7a712429522b35e9e41522c07f
Author: Lukasz Czarnik <lczarnik@cisco.com>
Date:   Tue Feb 20 08:27:01 2024 -0500

    appid: change eve pattern matching logic

2 months agoPull request #4222: Validating number parameter in a string form.
Oleksii. Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) [Wed, 28 Feb 2024 19:34:24 +0000 (19:34 +0000)] 
Pull request #4222: Validating number parameter in a string form.

Merge in SNORT/snort3 from ~OSHUMEIK/snort3:cofig_parser_int_str to master

Squashed commit of the following:

commit ce64987a1dc2068944d7ebc52b685cf9909d8cb3
Author: Oleksii Shumeiko <oshumeik@cisco.com>
Date:   Wed Feb 28 16:11:02 2024 +0200

    main: update limits help

commit 3ed986bdca58218ea999d2cc46054f1f5556c698
Author: Oleksii Shumeiko <oshumeik@cisco.com>
Date:   Fri Feb 23 14:45:11 2024 +0200

    framework: validate parameter of number type in a string form

    Make string format strict. A few unit tests added.

2 months agoPull request #4225: flow: updated flow_data linklist with STL container
Raza Shafiq (rshafiq) [Tue, 27 Feb 2024 18:24:51 +0000 (18:24 +0000)] 
Pull request #4225: flow: updated flow_data linklist with STL container

Merge in SNORT/snort3 from ~RSHAFIQ/snort3:master_flow_data to master

Squashed commit of the following:

commit 3e6805d43c0eb9da2a94820da3fc86ec94b1d80f
Author: rshafiq <rshafiq@cisco.com>
Date:   Thu Feb 22 15:08:43 2024 -0500

    flow: updated flow_data linklist with STL container

2 months agoPull request #4228: snort2lua: change deprecated use of ptr_fn to lambda
Michael Matirko (mmatirko) [Tue, 27 Feb 2024 16:08:04 +0000 (16:08 +0000)] 
Pull request #4228: snort2lua: change deprecated use of ptr_fn to lambda

Merge in SNORT/snort3 from ~MMATIRKO/snort3:cpp17-ptrfn to master

Squashed commit of the following:

commit f0f894c85b5440d6042fad273453a8e73be83038
Author: Michael Matirko <mmatirko@cisco.com>
Date:   Mon Feb 26 11:54:16 2024 -0500

    snort2lua: change deprecated use of ptr_fn to lambda

2 months agoPull request #4212: appid: Replaced warning log with logging api for CBD
Bhumika Sachdeva (bsachdev) [Mon, 26 Feb 2024 20:54:59 +0000 (20:54 +0000)] 
Pull request #4212: appid: Replaced warning log with logging api for CBD

Merge in SNORT/snort3 from ~BSACHDEV/snort3:log_fix_cbd to master

Squashed commit of the following:

commit b33392a114aa6f7a2b61265bd6062b563ddf45d9
Author: bsachdev <bsachdev@cisco.com>
Date:   Fri Feb 16 17:11:00 2024 -0500

    appid: Replaced warning log with logging api for CBD

2 months agoPull request #4223: stream_tcp: update documentation for stream TCP alerts to include...
Davis McPherson -X (davmcphe - XORIANT CORPORATION at Cisco) [Mon, 26 Feb 2024 16:32:16 +0000 (16:32 +0000)] 
Pull request #4223: stream_tcp: update documentation for stream TCP alerts to include the new 129:21 and 129:22 alerts

Merge in SNORT/snort3 from ~DAVMCPHE/snort3:snort_reference_129_alert_updates to master

Squashed commit of the following:

commit 4bfdd56f461c81952330d5b35e76fb374692c502
Author: davis mcpherson <davmcphe@cisco.com>
Date:   Fri Feb 23 10:31:41 2024 -0500

    stream_tcp: update documentation for stream TCP alerts to include the new 129:21 and 129:22 alerts

2 months agoPull request #4185: main: make "reset_stats" command ignore SnortModule peg counters
Yehor Velykozhon -X (yvelykoz - SOFTSERVE INC at Cisco) [Mon, 26 Feb 2024 13:43:04 +0000 (13:43 +0000)] 
Pull request #4185: main: make "reset_stats" command ignore SnortModule peg counters

Merge in SNORT/snort3 from ~YVELYKOZ/snort3:global_counters to master

Squashed commit of the following:

commit 650effed988e6f87f2d7d5c19c6fc9e7f13ee3a8
Author: Yehor Velykozhon <yvelykoz@cisco.com>
Date:   Tue Jan 30 16:05:15 2024 +0200

    main: reset main-thread stats from the main thread

2 months agoPull request #4217: main: clear lua stack when registering commands in a shell
Andrii Serbeniuk -X (aserbeni - SOFTSERVE INC at Cisco) [Fri, 23 Feb 2024 12:27:58 +0000 (12:27 +0000)] 
Pull request #4217: main: clear lua stack when registering commands in a shell

Merge in SNORT/snort3 from ~ASERBENI/snort3:lua_overflow to master

Squashed commit of the following:

commit d8c24607f2ad685749edcac75d94ddf3b2f458ea
Author: Andrii Serbeniuk <aserbeni@cisco.com>
Date:   Tue Feb 20 15:20:22 2024 +0200

    main: clear lua stack when registering commands in a shell

2 months agoPull request #4205: sfip: set pointers to nullptr after deletion to avoid heap-use...
Michael Matirko (mmatirko) [Tue, 20 Feb 2024 23:38:05 +0000 (23:38 +0000)] 
Pull request #4205: sfip: set pointers to nullptr after deletion to avoid heap-use-after-free on reload

Merge in SNORT/snort3 from ~MMATIRKO/snort3:sfvar_mem to master

Squashed commit of the following:

commit 43ffbe3a7b41e0fd6198cf51444955ce6ea057c4
Author: Michael Matirko <mmatirko@cisco.com>
Date:   Wed Feb 14 16:36:53 2024 -0500

    sfip: remove references to unused mode feature

commit 81cabc672c4196bae2a56c112641c5a9807667bf
Author: Michael Matirko <mmatirko@cisco.com>
Date:   Tue Feb 13 16:34:46 2024 -0500

    sfip: zero out var/node pointers after operations to remedy heap-use-after-free on reload

2 months agoPull request #4214: build: generate and tag 3.1.81.0 3.1.81.0
Steve Chew (stechew) [Tue, 20 Feb 2024 18:54:47 +0000 (18:54 +0000)] 
Pull request #4214: build: generate and tag 3.1.81.0

Merge in SNORT/snort3 from ~STECHEW/snort3:build_3.1.81.0 to master

Squashed commit of the following:

commit 4c29bf2c082140b028cb2becc4a7c665a77c0221
Author: Steve Chew <stechew@cisco.com>
Date:   Fri Feb 16 17:46:23 2024 -0500

    build: generate and tag 3.1.81.0

2 months agoPull request #4196: http_inspect: add check to handle situation when reload takes...
Anna Norokh -X (anorokh - SOFTSERVE INC at Cisco) [Fri, 16 Feb 2024 19:42:06 +0000 (19:42 +0000)] 
Pull request #4196: http_inspect: add check to handle situation when reload takes place inside transaction unit

Merge in SNORT/snort3 from ~ANOROKH/snort3:js_conf_reload to master

Squashed commit of the following:

commit 21b4f72d313794eb71460a233fb68475cc71b67f
Author: Anna Norokh <anorokh@cisco.com>
Date:   Tue Feb 6 15:38:08 2024 +0200

    service_inspectors: add check for JSNorm config actuality

    * added check to pop, imap and smtp inspectors to recreate or delete
        normalizer in case of config reload

commit f3d87c8ab8e468adffed4be9ce9a12873ebfbd55
Author: Andrii Serbeniuk <aserbeni@cisco.com>
Date:   Fri Jan 26 16:34:07 2024 +0200

    http_inspect: recreate JSNorm if reload takes place inside transaction

    * add generation_id field to JSNorm obj to track creation reload_id;

2 months agoPull request #4166: control: fix crash in update_scratch and ctrlcon block related...
Lukasz Czarnik -X (lczarnik - SOFTSERVE INC at Cisco) [Fri, 16 Feb 2024 19:12:29 +0000 (19:12 +0000)] 
Pull request #4166: control: fix crash in update_scratch and ctrlcon block related issues

Merge in SNORT/snort3 from ~LCZARNIK/snort3:scratch_crash to master

Squashed commit of the following:

commit 2efd39cac108297f9bfa6b7ca768bd0ae9c2ed10
Author: Lukasz Czarnik <lczarnik@cisco.com>
Date:   Tue Jan 23 08:54:09 2024 -0500

    control: Adds counting to ctrlcon blocked to allow for nested commands

2 months agoPull request #4194: memory: prevent data race between main and packet threads
Yurii Chalov -X (ychalov - SOFTSERVE INC at Cisco) [Fri, 16 Feb 2024 16:35:23 +0000 (16:35 +0000)] 
Pull request #4194: memory: prevent data race between main and packet threads

Merge in SNORT/snort3 from ~YCHALOV/snort3:memory_cap_data_race_fix to master

Squashed commit of the following:

commit ef724cb45bb450574339403684605444afa2e61b
Author: Yurii Chalov <ychalov@cisco.com>
Date:   Thu Feb 1 23:15:02 2024 +0100

    memory: prevent data race between main and packet threads

2 months agoPull request #4171: lua: improve spell of wizard for HTTP
Yehor Velykozhon -X (yvelykoz - SOFTSERVE INC at Cisco) [Fri, 16 Feb 2024 16:02:11 +0000 (16:02 +0000)] 
Pull request #4171: lua: improve spell of wizard for HTTP

Merge in SNORT/snort3 from ~YVELYKOZ/snort3:wizard_spells_upd to master

Squashed commit of the following:

commit 8be9348a51f818761eac5c7e24b5bce2977c75ca
Author: Yehor Velykozhon <yvelykoz@cisco.com>
Date:   Fri Jan 19 15:15:55 2024 +0200

    lua: improve spell of wizard for HTTP

2 months agoPull request #4190: kaizen: update enabling of Kaizen mock
Yehor Velykozhon -X (yvelykoz - SOFTSERVE INC at Cisco) [Fri, 16 Feb 2024 13:03:30 +0000 (13:03 +0000)] 
Pull request #4190: kaizen: update enabling of Kaizen mock

Merge in SNORT/snort3 from ~YVELYKOZ/snort3:kaizen_mock_chg to master

Squashed commit of the following:

commit bbc1f110e6815c1672948b5319d09540e9d35f22
Author: Yehor Velykozhon <yvelykoz@cisco.com>
Date:   Wed Feb 14 14:50:05 2024 +0200

    kaizen: provide an option to enable Kaizen's mock

2 months agoPull request #4179: host_cache: fixed update_stats to remove race_condition causing...
Raza Shafiq (rshafiq) [Thu, 15 Feb 2024 16:38:40 +0000 (16:38 +0000)] 
Pull request #4179: host_cache: fixed update_stats to remove race_condition causing crash

Merge in SNORT/snort3 from ~RSHAFIQ/snort3:lru_race to master

Squashed commit of the following:

commit 75cf5786a801c3858cb8ac3c48c718b7420163b3
Author: rshafiq <rshafiq@cisco.com>
Date:   Wed Jan 24 08:51:45 2024 -0500

    host_cache: fixed update_stats to remove race_condition

2 months agoPull request #4204: kaizen: rename modules
Oleksii. Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) [Wed, 14 Feb 2024 19:20:39 +0000 (19:20 +0000)] 
Pull request #4204: kaizen: rename modules

Merge in SNORT/snort3 from ~OSHUMEIK/snort3:kaizen_rename to master

Squashed commit of the following:

commit 09cfb949abb43d892b13a1cf305d0b2ae0b8f07e
Author: Oleksii Shumeiko <oshumeik@cisco.com>
Date:   Wed Feb 14 15:49:19 2024 +0200

    kaizen: rename modules

2 months agoPull request #4202: appid: Lowering max packet count before service fail
Oleksandr Stepanov -X (ostepano - SOFTSERVE INC at Cisco) [Tue, 13 Feb 2024 21:27:16 +0000 (21:27 +0000)] 
Pull request #4202: appid: Lowering max packet count before service fail

Merge in SNORT/snort3 from ~OSTEPANO/snort3:appid_min_packet_fail to master

Squashed commit of the following:

commit cba87ecc5b2533276894c48f1f14294cefa873f7
Author: Oleksandr Stepanov <ostepano@cisco.com>
Date:   Fri Feb 9 06:30:31 2024 -0500

    appid: Lowering max packet count before service fail

2 months agoPull request #4114: ips_context alt_buffer update
Yehor Velykozhon -X (yvelykoz - SOFTSERVE INC at Cisco) [Mon, 12 Feb 2024 13:45:05 +0000 (13:45 +0000)] 
Pull request #4114: ips_context alt_buffer update

Merge in SNORT/snort3 from ~YVELYKOZ/snort3:ips_context_allocation_upd to master

Squashed commit of the following:

commit ee31592668aae0a799f3a54298eb594ca94698fd
Author: Yehor Velykozhon <yvelykoz@cisco.com>
Date:   Tue Nov 21 14:59:36 2023 +0200

    ips_context: add lazy-allocation of alt buffer

2 months agoPull request #4184: appid: log error message instead of fatal error if appid stats...
Sreeja Athirkandathil Narayanan (sathirka) [Fri, 9 Feb 2024 15:45:35 +0000 (15:45 +0000)] 
Pull request #4184: appid: log error message instead of fatal error if appid stats logfile is not accessible

Merge in SNORT/snort3 from ~SATHIRKA/snort3:appid_stats_fatalerr_fix to master

Squashed commit of the following:

commit c1e4352680234f9dcd5e7a2a9747798fe45983d7
Author: Sreeja Athirkandathil Narayanan <sathirka@cisco.com>
Date:   Mon Jan 29 14:39:14 2024 -0500

    appid: log error message instead of fatal error if appid stats logfile is not accessible

2 months agoPull request #4175: CSCwi44108 - snort_calloc is used on non-trivial structures
Maya Dagon (mdagon) [Fri, 9 Feb 2024 13:52:08 +0000 (13:52 +0000)] 
Pull request #4175: CSCwi44108 - snort_calloc is used on non-trivial structures

Merge in SNORT/snort3 from ~MDAGON/snort3:calloc_cleanup to master

Squashed commit of the following:

commit 17f3fc999811be731ba414fb9d7cfc999044542e
Author: maya dagon <mdagon@cisco.com>
Date:   Thu Jan 25 08:51:13 2024 -0500

    detection: add c'tors, use new instead of snort_calloc

2 months agoPull request #4191: kaizen: remove redundant semicolum and add explicit cast
Yehor Velykozhon -X (yvelykoz - SOFTSERVE INC at Cisco) [Fri, 9 Feb 2024 10:10:39 +0000 (10:10 +0000)] 
Pull request #4191: kaizen: remove redundant semicolum and add explicit cast

Merge in SNORT/snort3 from ~YVELYKOZ/snort3:fix_cppchecks_kaizen to master

Squashed commit of the following:

commit a7e95f4068b1a38923be160c74aeac5e1e19298d
Author: Yehor Velykozhon <yvelykoz@cisco.com>
Date:   Thu Feb 1 16:12:57 2024 +0200

    kaizen: remove redundant semicolon and add explicit cast

2 months agoPull request #4187: detection: copy ip var name in dup_rtn
Adrian Mamolea (admamole) [Fri, 9 Feb 2024 08:51:52 +0000 (08:51 +0000)] 
Pull request #4187: detection: copy ip var name in dup_rtn

Merge in SNORT/snort3 from ~ADMAMOLE/snort3:var_bug to master

Squashed commit of the following:

commit c3b9334700647d5bbd1698da377117f64e50228d
Author: Adrian Mamolea <admamole@cisco.com>
Date:   Tue Jan 30 09:22:38 2024 -0500

    detection: copy ip var name in dup_rtn

2 months agoPull request #4181: flow: added ips event suppression flags
Abhishek Rawat (abhrawat) [Fri, 9 Feb 2024 03:02:51 +0000 (03:02 +0000)] 
Pull request #4181: flow: added ips event suppression flags

Merge in SNORT/snort3 from ~ABHRAWAT/snort3:conn_event_ips_suppression to master

Squashed commit of the following:

commit 4790cd489d98de6f2759d5bd875e23f04f561940
Author: abhrawat <abhrawat@cisco.com>
Date:   Mon Jan 29 19:33:39 2024 +0000

    flow: added ips event suppression flags

2 months agoPull request #4195: stream_tcp: add alerts for exceeding thresholds for max queued...
Davis McPherson -X (davmcphe - XORIANT CORPORATION at Cisco) [Thu, 8 Feb 2024 19:09:27 +0000 (19:09 +0000)] 
Pull request #4195: stream_tcp: add alerts for exceeding thresholds for max queued bytes or segments

Merge in SNORT/snort3 from ~DAVMCPHE/snort3:alert_on_queue_limit_events to master

Squashed commit of the following:

commit ef3d7c1d48fefc50bef5b28006206968d1b07ee4
Author: davis mcpherson <davmcphe@cisco.com>
Date:   Mon Jan 29 15:08:15 2024 -0500

    stream_tcp: add alerts for exceeding thresholds for max queued bytes or segments

    update snort_reference document to include descriptions of new 129 builtin rules

2 months agoPull request #4180: stream_tcp: add check to verify seglist head is not nullptr and...
Davis McPherson -X (davmcphe - XORIANT CORPORATION at Cisco) [Thu, 8 Feb 2024 19:00:05 +0000 (19:00 +0000)] 
Pull request #4180: stream_tcp: add check to verify seglist head is not nullptr and only initialize PAF when it is not

Merge in SNORT/snort3 from ~DAVMCPHE/snort3:CSCwi80961_verify_seglist_not_empty to master

Squashed commit of the following:

commit 9c06b0a65fb09348f660781170de380214f8eea5
Author: davis mcpherson <davmcphe@cisco.com>
Date:   Mon Jan 29 19:09:18 2024 -0500

    stream_tcp: add check to verify seglist head is not nullptr and only initialize PAF when it is not

2 months agoPull request #4197: appid: check tenant_match() if required
Serhii. Vlasiuk -X (svlasiuk - SOFTSERVE INC at Cisco) [Thu, 8 Feb 2024 17:40:11 +0000 (17:40 +0000)] 
Pull request #4197: appid: check tenant_match() if required

Merge in SNORT/snort3 from ~SVLASIUK/snort3:appid_tenants_filter_perf_fix to master

Squashed commit of the following:

commit 942b0edd2df839e4fd3da0be3cc7f69610dce263
Author: Serhii Vlasiuk <svlasiuk@cisco.com>
Date:   Thu Feb 1 16:18:05 2024 +0200

    appid: check tenant_match() if required

2 months agoPull request #4172: util: add macro for setting thread names on various systems
Michael Matirko (mmatirko) [Thu, 8 Feb 2024 15:51:11 +0000 (15:51 +0000)] 
Pull request #4172: util: add macro for setting thread names on various systems

Merge in SNORT/snort3 from ~MMATIRKO/snort3:thread_names to master

Squashed commit of the following:

commit 0a6d452e0c710757a3656427d11c0fa2fe62c119
Author: Michael Matirko <mmatirko@cisco.com>
Date:   Wed Jan 24 16:05:28 2024 -0500

    utils: add macro for setting thread name

2 months agoPull request #4200: build: generate and tag 3.1.80.0
Steve Chew (stechew) [Wed, 7 Feb 2024 19:38:04 +0000 (19:38 +0000)] 
Pull request #4200: build: generate and tag 3.1.80.0

Merge in SNORT/snort3 from ~STECHEW/snort3:build_3.1.80.0 to master

Squashed commit of the following:

commit 731250c54f91cb83f1b317525f7c9e24fb8490fe
Author: Steve Chew <stechew@cisco.com>
Date:   Mon Feb 5 18:41:01 2024 -0500

    build: generate and tag 3.1.80.0

2 months agoPull request #4193: build: generate and tag 3.1.79.0 3.1.79.0
Steve Chew (stechew) [Sun, 4 Feb 2024 18:25:21 +0000 (18:25 +0000)] 
Pull request #4193: build: generate and tag 3.1.79.0

Merge in SNORT/snort3 from ~STECHEW/snort3:build_3.1.79.0 to master

Squashed commit of the following:

commit abfb35c9cb81fbaca5f7e99129a0fa548d6adf8b
Author: Steve Chew <stechew@cisco.com>
Date:   Thu Feb 1 14:57:35 2024 -0500

    build: generate and tag 3.1.79.0

3 months agoPull request #4169: appid: return false in is_appid_inspecting_session for quic if...
Shibin K V (shikv) [Thu, 1 Feb 2024 04:41:55 +0000 (04:41 +0000)] 
Pull request #4169: appid: return false in is_appid_inspecting_session for quic if not decrypting

Merge in SNORT/snort3 from ~SHIKV/snort3:whitelist_quic to master

Squashed commit of the following:

commit 84ed4ba8e57ea4d2c0333af82e2ae1e9309d66f2
Author: shibin k v <shikv@cisco.com>
Date:   Fri Jan 19 12:39:52 2024 +0000

    appid: return false in is_appid_inspecting_session for quic if not decrypting

3 months agoPull request #4182: Kaizen
Oleksii. Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) [Wed, 31 Jan 2024 17:04:33 +0000 (17:04 +0000)] 
Pull request #4182: Kaizen

Merge in SNORT/snort3 from ~OSHUMEIK/snort3:feature/kaizen to master

Squashed commit of the following:

commit a127d8b0b075aba335bf216c69c2a09cd52f0919
Author: Oleksii Shumeiko <oshumeik@cisco.com>
Date:   Tue Jan 30 16:01:12 2024 +0200

    kaizen: add dev_notes.txt

commit 558dee4cdd82850d875e868ebb7ce8f2b2e820ba
Author: Oleksii Shumeiko <oshumeik@cisco.com>
Date:   Tue Jan 30 15:43:58 2024 +0200

    kaizen: update copyright

commit f4fd702f97b35604c3eca073de23dd902a8928b4
Merge: e8332d15da d6d691cb89
Author: Vitalii Serhiiovych Horbatov -X (vhorbato - SOFTSERVE INC at Cisco) <vhorbato@cisco.com>
Date:   Thu Jan 25 14:02:09 2024 +0000

    Pull request #949: kaizen: change GID to 411

    Merge in FIREPOWER/snort3 from ~VHORBATO/snort3:kaizen_gid_411 to feature/kaizen

    * commit 'd6d691cb890dde908fe832c517075aee9588bd31':
      kaizen: change kaizen gid to 411

commit d6d691cb890dde908fe832c517075aee9588bd31
Author: vhorbato <vhorbato@cisco.com>
Date:   Thu Jan 25 11:41:20 2024 +0200

    kaizen: change kaizen gid to 411

commit e8332d15da6a91b648d853ceaf0389143845e1e3
Merge: 67d683fb0f 6c4e69b643
Author: Vitalii Serhiiovych Horbatov -X (vhorbato - SOFTSERVE INC at Cisco) <vhorbato@cisco.com>
Date:   Thu Jan 25 10:32:30 2024 +0000

    Pull request #948: kaizen: change default value of uri_depth to -1

    Merge in FIREPOWER/snort3 from ~VHORBATO/snort3:kaizen_uri_default to feature/kaizen

    * commit '6c4e69b6435b1ed0e4052d877f51f80cd84c0f28':
      kaizen: change default value of uri_depth to -1

commit 6c4e69b6435b1ed0e4052d877f51f80cd84c0f28
Author: vhorbato <vhorbato@cisco.com>
Date:   Thu Jan 25 11:07:31 2024 +0200

    kaizen: change default value of uri_depth to -1

commit 67d683fb0ffdd446076d9cb64ab3db4d2a05eeac
Merge: 32685a7bf3 8acf22fb16
Author: Vitalii Serhiiovych Horbatov -X (vhorbato - SOFTSERVE INC at Cisco) <vhorbato@cisco.com>
Date:   Wed Jan 24 16:32:28 2024 +0000

    Pull request #942: kaizen: make kaizen configurable per policy

    Merge in FIREPOWER/snort3 from ~VHORBATO/snort3:kaizen_fixes to feature/kaizen

    * commit '8acf22fb16055acd87073e352817ada8a7c5ed03':
      kaizen: change kaizen gid to 155
      kaizen: make kaizen configurable per policy

commit 8acf22fb16055acd87073e352817ada8a7c5ed03
Author: vhorbato <vhorbato@cisco.com>
Date:   Fri Jan 19 22:19:39 2024 +0200

    kaizen: change kaizen gid to 155

commit d4f65497bc32587e4209e8680d6fc9d405e6db76
Author: vhorbato <vhorbato@cisco.com>
Date:   Wed Dec 20 18:29:49 2023 +0200

    kaizen: make kaizen configurable per policy

commit 32685a7bf359e01d69d586127adb42cb295e4016
Author: Oleksii Shumeiko <oshumeik@cisco.com>
Date:   Tue Dec 19 16:02:06 2023 +0200

    kaizen: extend mock object with simple matching mechanism

commit c7a02041f358c5e2ac916078524f10a924803379
Author: Oleksii Shumeiko <oshumeik@cisco.com>
Date:   Mon Dec 18 14:27:16 2023 +0200

    kaizen: register module only when LibML present or REG_TEST defined

commit ad5ee55b22f421c01037ffabdbe57f019da9b7c0
Author: Yehor Velykozhon -X (yvelykoz - SOFTSERVE INC at Cisco) <yvelykoz@cisco.com>
Date:   Tue Dec 19 09:33:10 2023 +0000

    Pull request #931: configure_cmake.sh: fix conflict-resolve issue

    Merge in FIREPOWER/snort3 from ~YVELYKOZ/snort3:kaizen_fix_config to feature/kaizen

    Squashed commit of the following:

    commit 6111cb812e852e7e0bff10a4494363f37a5ff390
    Author: Yehor Velykozhon <yvelykoz@cisco.com>
    Date:   Mon Dec 18 17:54:05 2023 +0200

        build: fix configure_cmake.sh after incomplete rebase

commit cf6f22e251b9bfe57f573129eae3ece00c1a0d02
Author: Brandon Stultz <brastult@cisco.com>
Date:   Fri Sep 22 16:50:39 2023 -0400

    network_inspectors: add kaizen ML based exploit detector

3 months agoPull request #4173: appid: add tenants filter for appid debug
Serhii. Vlasiuk -X (svlasiuk - SOFTSERVE INC at Cisco) [Tue, 30 Jan 2024 03:32:24 +0000 (03:32 +0000)] 
Pull request #4173: appid: add tenants filter for appid debug

Merge in SNORT/snort3 from ~SVLASIUK/snort3:appid_tenants_filter to master

Squashed commit of the following:

commit 4aa58015003c8f08ea3a2cdb0f4686d27b39d816
Author: Serhii Vlasiuk <svlasiuk@cisco.com>
Date:   Thu Jan 25 13:55:34 2024 +0200

    appid: add tenants filter for appid debug

3 months agoPull request #4161: mercury: updating alpn info without sni in 7.6
Vikash Ranjan (vikasran) [Thu, 25 Jan 2024 16:51:43 +0000 (16:51 +0000)] 
Pull request #4161: mercury: updating alpn info without sni in 7.6

Merge in SNORT/snort3 from ~VIKASRAN/snort3:vikash_work to master

Squashed commit of the following:

commit fecd5a2345c7a45cac943f3bb02bfdb95e87e2c3
Author: vikasran <vikasran@cisco.com>
Date:   Mon Dec 18 23:56:22 2023 +0530

    mercury: updating alpn info without sni in 7.6

3 months agoPull request #4140: ssl: heap overflow issue when processing handshake records
RAGHURAAM CONJEEVARAM UDAYANAN -X (rconjeev - XORIANT CORPORATION at Cisco) [Thu, 25 Jan 2024 15:08:14 +0000 (15:08 +0000)] 
Pull request #4140: ssl: heap overflow issue when processing handshake records

Merge in SNORT/snort3 from ~RCONJEEV/snort3:ssl_heap_overflow_issue to master

Squashed commit of the following:

commit 409d741819b112b39ebbb6dde991f6ec6c5ef762
Author: RAGHURAAM CONJEEVARAM UDAYANAN -X (rconjeev - XORIANT CORPORATION at Cisco) <rconjeev@cisco.com>
Date:   Mon Dec 11 17:50:26 2023 +0530

    ssl: heap overflow issue when processing handshake records

3 months agoPull request #4170: packet_tracer: add tenants to filters
Serhii. Vlasiuk -X (svlasiuk - SOFTSERVE INC at Cisco) [Wed, 24 Jan 2024 19:55:50 +0000 (19:55 +0000)] 
Pull request #4170: packet_tracer: add tenants to filters

Merge in SNORT/snort3 from ~SVLASIUK/snort3:pt_tenants_filter to master

Squashed commit of the following:

commit 93fc7a347f3e3792f2a896b234c3f9004b1a8092
Author: Serhii Vlasiuk <svlasiuk@cisco.com>
Date:   Fri Jan 19 15:59:54 2024 +0200

    packet_tracer: add tenants to filters

3 months agoPull request #4154: stream_tcp: correct labeling of in-sequence and out-of-sequence...
Juweria Ali Imran (jaliimra) [Tue, 23 Jan 2024 20:36:01 +0000 (20:36 +0000)] 
Pull request #4154: stream_tcp: correct labeling of in-sequence and out-of-sequence packets

Merge in SNORT/snort3 from ~JALIIMRA/snort3:ins_oos to master

Squashed commit of the following:

commit 1868eda57a7b465d0ff589f40a93672eafc2cc5b
Author: Juweria Ali Imran <jaliimra@cisco.com>
Date:   Wed Dec 6 08:16:24 2023 -0500

    stream_tcp: correct labeling of in-sequence and out-of-sequence packets

3 months agoPull request #4144: appid: process organization unit instead of organization name
Oleksandr Stepanov -X (ostepano - SOFTSERVE INC at Cisco) [Tue, 23 Jan 2024 20:28:23 +0000 (20:28 +0000)] 
Pull request #4144: appid: process organization unit instead of organization name

Merge in SNORT/snort3 from ~OSTEPANO/snort3:org_name_extr to master

Squashed commit of the following:

commit 1182e2ebd813cc0b6a523438704d44ff95e4691e
Author: Oleksandr Stepanov <ostepano@cisco.com>
Date:   Wed Dec 13 07:24:00 2023 -0500

    appid: process organization unit instead of organization name

3 months agoPull request #4142: CSCwh95127 - Skip initial seglist holes for midstream flows in...
Davis McPherson -X (davmcphe - XORIANT CORPORATION at Cisco) [Mon, 22 Jan 2024 23:56:50 +0000 (23:56 +0000)] 
Pull request #4142: CSCwh95127 - Skip initial seglist holes for midstream flows in IPS mode

Merge in SNORT/snort3 from ~DAVMCPHE/snort3:ips_seglist_hole_cscwh95127 to master

Squashed commit of the following:

commit 24510aba30c9cb8681d8bef03fb9b7d7ba2692f2
Author: davis mcpherson <davmcphe@cisco.com>
Date:   Fri Dec 8 14:46:11 2023 -0500

    stream_tcp:  on midstream pickup the peer that received the initial midstream packet remains in
    MID_STREAM_RECV state until a packet with an ACK is sent by that peer. Data packets received are added
    to the seglist but reassembly is not initiated.  When the ACK is seen the seglist is scanned for holes
    left of the ACK and all packets left of the holes are purged and reassembly started with the first
    packet to the right of the hole

    set packet direction flag based on direction saved in reassembly state

3 months agoPull request #4162: coverity: fix for stream and hash
Raza Shafiq (rshafiq) [Mon, 22 Jan 2024 20:36:23 +0000 (20:36 +0000)] 
Pull request #4162: coverity: fix for stream and hash

Merge in SNORT/snort3 from ~RSHAFIQ/snort3:stream_coverity to master

Squashed commit of the following:

commit ebffbe09dda5a5733f86c683f16347716a0a51ce
Author: rshafiq <rshafiq@cisco.com>
Date:   Tue Dec 19 14:15:41 2023 -0500

    coverity: fix for stream and hash

3 months agoPull request #4168: stream_tcp: persist disable_reassembly in Flow
Raza Shafiq (rshafiq) [Mon, 22 Jan 2024 16:18:02 +0000 (16:18 +0000)] 
Pull request #4168: stream_tcp: persist disable_reassembly in Flow

Merge in SNORT/snort3 from ~RSHAFIQ/snort3:gcp_perf to master

Squashed commit of the following:

commit 1e3853009369678775c85dc30d7f3669a352dcc2
Author: rshafiq <rshafiq@cisco.com>
Date:   Wed Dec 13 17:23:28 2023 -0500

    stream_tcp: persist disable_reassembly in Flow

3 months agoPull request #4167: profiler: improve multithread rule percentage calculation
Andrii Serbeniuk -X (aserbeni - SOFTSERVE INC at Cisco) [Thu, 18 Jan 2024 16:03:12 +0000 (16:03 +0000)] 
Pull request #4167: profiler: improve multithread rule percentage calculation

Merge in SNORT/snort3 from ~ASERBENI/snort3:multithread_rule_percent to master

Squashed commit of the following:

commit 48c52c9279e05dd56fcd7c3d332a144b92f953bb
Author: Andrii Serbeniuk <aserbeni@cisco.com>
Date:   Mon Jan 15 15:55:06 2024 +0200

    profiler: improve multithread rule percentage calculation

3 months agoPull request #4145: filters: make rate_filter multithreaded + cleanup
Michael Matirko (mmatirko) [Wed, 17 Jan 2024 21:43:12 +0000 (21:43 +0000)] 
Pull request #4145: filters: make rate_filter multithreaded + cleanup

Merge in SNORT/snort3 from ~MMATIRKO/snort3:multithread_sfrf to master

Squashed commit of the following:

commit e5d9ad1293230a926f6acc3720042a858bf35998
Author: Michael Matirko <mmatirko@cisco.com>
Date:   Tue Oct 31 16:06:07 2023 -0400

    filters: make rate_filter multithreaded + some cleanup

3 months agoPull request #4132: appid: update peg counts to be thread safe
Ron Dempster (rdempste) [Tue, 16 Jan 2024 23:09:53 +0000 (23:09 +0000)] 
Pull request #4132: appid: update peg counts to be thread safe

Merge in SNORT/snort3 from ~RDEMPSTE/snort3:appid_stats to master

Squashed commit of the following:

commit ccc7a16e0fb0e7ce4eb244ca6f19a41bca00dde4
Author: Ron Dempster (rdempste) <rdempste@cisco.com>
Date:   Wed Dec 6 15:11:21 2023 -0500

    appid: update peg counts to be thread safe

3 months agoPull request #4164: build: generate and tag 3.1.78.0 3.1.78.0
Priyanka Bangalore Gurudev (prbg) [Tue, 16 Jan 2024 20:04:35 +0000 (20:04 +0000)] 
Pull request #4164: build: generate and tag 3.1.78.0

Merge in SNORT/snort3 from ~PRBG/snort3:build_3.1.78.0 to master

Squashed commit of the following:

commit 7efc960d98260eef70b0316551772c882eca8cb9
Author: Priyanka Gurudev <prbg@cisco.com>
Date:   Tue Jan 16 01:31:20 2024 -0500

    build: generate and tag 3.1.78.0

3 months agoPull request #4163: doc: update arg list for "generate_builtin.sh"
Yehor Velykozhon -X (yvelykoz - SOFTSERVE INC at Cisco) [Mon, 15 Jan 2024 15:38:58 +0000 (15:38 +0000)] 
Pull request #4163: doc: update arg list for "generate_builtin.sh"

Merge in SNORT/snort3 from ~YVELYKOZ/snort3:generate_script_update to master

Squashed commit of the following:

commit 2b2b5c45d415a6ffb1cda8b4b1bba098df118460
Author: Yehor Velykozhon <yvelykoz@cisco.com>
Date:   Fri Jan 12 15:25:03 2024 +0200

    doc: update arg list for "generate_builtin.sh"

    Add parity to "generate_" scripts arg list, thanks to @puck(https://github.com/puck)
    for creating a fix.

3 months agoPull request #4117: appid: print odp version and odp detector count on startup
Lukasz Czarnik -X (lczarnik - SOFTSERVE INC at Cisco) [Thu, 11 Jan 2024 14:41:13 +0000 (14:41 +0000)] 
Pull request #4117: appid: print odp version and odp detector count on startup

Merge in SNORT/snort3 from ~LCZARNIK/snort3:logodp to master

Squashed commit of the following:

commit 3ec619e3c69a80dd89787fd2510de6c9aa4adff4
Author: Lukasz Czarnik <lczarnik@cisco.com>
Date:   Mon Nov 27 09:55:02 2023 -0500

    appid: print odp version and odp detector count on startup

3 months agoPull request #4160: Copyright: Update year to 2024
Maya Dagon (mdagon) [Thu, 11 Jan 2024 14:05:58 +0000 (14:05 +0000)] 
Pull request #4160: Copyright: Update year to 2024

Merge in SNORT/snort3 from ~MDAGON/snort3:copyright to master

Squashed commit of the following:

commit 4e4aa910e16b69b25483aee2b87d0b3b6fe98d05
Author: maya dagon <mdagon@cisco.com>
Date:   Tue Jan 9 10:34:28 2024 -0500

    Copyright: Update year to 2024

4 months agoPull request #4125: main: fix inconsistent lua variables assignment
Yurii Chalov -X (ychalov - SOFTSERVE INC at Cisco) [Fri, 22 Dec 2023 18:18:39 +0000 (18:18 +0000)] 
Pull request #4125: main: fix inconsistent lua variables assignment

Merge in SNORT/snort3 from ~YCHALOV/snort3:lua_variable_fix to master

Squashed commit of the following:

commit d05cfa28ecd64935bfb573312eba89bf96b2ca8d
Author: Yurii Chalov <ychalov@cisco.com>
Date:   Mon Dec 4 11:05:35 2023 +0100

    main: fix inconsistent lua variables assignment

4 months agoPull request #4139: parser: fix --dump-rule-meta for negated ports
Yurii Chalov -X (ychalov - SOFTSERVE INC at Cisco) [Fri, 22 Dec 2023 10:16:29 +0000 (10:16 +0000)] 
Pull request #4139: parser: fix --dump-rule-meta for negated ports

Merge in SNORT/snort3 from ~YCHALOV/snort3:negate_port_parse_fix to master

Squashed commit of the following:

commit 17b1e655c839f2d4d8415ff8c162fe230ba014e6
Author: Yurii Chalov <ychalov@cisco.com>
Date:   Fri Dec 8 16:11:24 2023 +0100

    parser: fix --dump-rule-meta for negated ports

4 months agoPull request #4156: build: generate and tag 3.1.77.0 3.1.77.0
Priyanka Bangalore Gurudev (prbg) [Thu, 21 Dec 2023 22:44:39 +0000 (22:44 +0000)] 
Pull request #4156: build: generate and tag 3.1.77.0

Merge in SNORT/snort3 from ~PRBG/snort3:build_3.1.77.0 to master

Squashed commit of the following:

commit 1a7cd88c533952f1b55a1aa9ef367edc245019a3
Author: Priyanka Gurudev <prbg@cisco.com>
Date:   Wed Dec 20 20:42:30 2023 -0500

    build: generate and tag 3.1.77.0

4 months agoPull request #4112: profiler: dump memory profiler stats at frequent interval
Akhilesh MY (amuttuva) [Wed, 20 Dec 2023 08:33:26 +0000 (08:33 +0000)] 
Pull request #4112: profiler: dump memory profiler stats at frequent interval

Merge in SNORT/snort3 from ~AMUTTUVA/snort3:mem_prof_master to master

Squashed commit of the following:

commit 8f5b8f6f3fcbfe60a28429ec41266cd88a2bf2c9
Author: sunimukh <sunimukh@cisco.com>
Date:   Wed Jun 28 06:45:54 2023 +0000

    profiler: dump memory profiler stats at frequent interval

4 months agoPull request #4152: flow: Add tenant ID to FlowKey
Ron Dempster (rdempste) [Tue, 19 Dec 2023 22:31:30 +0000 (22:31 +0000)] 
Pull request #4152: flow: Add tenant ID to FlowKey

Merge in SNORT/snort3 from ~RDEMPSTE/snort3:daq_tunnelid_addressspace to master

Squashed commit of the following:

commit 271a3198036f516f3eed82a5c3d1ac97f006ee75
Author: Steve Chew <stechew@cisco.com>
Date:   Tue Dec 12 17:31:26 2023 -0500

    flow: Add tenant ID to FlowKey

4 months agoPull request #4143: appid: do not delete hsession for http3
Shibin K V (shikv) [Tue, 19 Dec 2023 17:52:28 +0000 (17:52 +0000)] 
Pull request #4143: appid: do not delete hsession for http3

Merge in SNORT/snort3 from ~SHIKV/snort3:quic_event_fix to master

Squashed commit of the following:

commit 364cf7c2858eb5de01e54d4999fa3f2d74b876fb
Author: shibin k v <shikv@cisco.com>
Date:   Wed Dec 13 08:16:52 2023 +0000

    appid: do not delete hsession for http3

4 months agoPull request #4129: ssl: stopping inspection once client or server app packet is...
RAGHURAAM CONJEEVARAM UDAYANAN -X (rconjeev - XORIANT CORPORATION at Cisco) [Mon, 18 Dec 2023 18:24:00 +0000 (18:24 +0000)] 
Pull request #4129: ssl: stopping inspection once client or server app packet is found

Merge in SNORT/snort3 from ~RCONJEEV/snort3:ssl_inspection_perf_fix to master

Squashed commit of the following:

commit 46806aae62e751ac1d8a6382f2cf1827d38235ae
Author: RAGHURAAM CONJEEVARAM UDAYANAN -X (rconjeev - XORIANT CORPORATION at Cisco) <rconjeev@cisco.com>
Date:   Wed Dec 6 14:58:08 2023 +0530

    ssl: stopping inspection once client or server app packet is found

4 months agoPull request #4134: detection: collect matched buffers
Andrii Serbeniuk -X (aserbeni - SOFTSERVE INC at Cisco) [Mon, 18 Dec 2023 09:54:18 +0000 (09:54 +0000)] 
Pull request #4134: detection: collect matched buffers

Merge in SNORT/snort3 from ~ASERBENI/snort3:ips_buf_dump to master

Squashed commit of the following:

commit 210d825c271a41d02e04a850fac384e38a04b397
Author: Andrii Serbeniuk <aserbeni@cisco.com>
Date:   Tue Nov 28 14:53:31 2023 +0200

    detection: collect matched buffers on IpsContext

4 months agoPull request #4094: build: arm compilation support
NIKHIL PRIYANSHU -X (npriyans - XORIANT CORPORATION at Cisco) [Fri, 15 Dec 2023 04:25:42 +0000 (04:25 +0000)] 
Pull request #4094: build: arm compilation support

Merge in SNORT/snort3 from ~NPRIYANS/snort3:arm_support to master

Squashed commit of the following:

commit ecb27a186eb8b20fb594add7efad94404ee1f86e
Author: Shashi Lad <shaslad@cisco.com>
Date:   Tue Jul 25 23:40:07 2023 -0400

    build: arm compilation support

4 months agoPull request #4137: Coverity fixes
Umang Sharma (umasharm) [Wed, 13 Dec 2023 20:25:39 +0000 (20:25 +0000)] 
Pull request #4137: Coverity fixes

Merge in SNORT/snort3 from ~UMASHARM/snort3:coverity_fixes to master

Squashed commit of the following:

commit f005a9908950f50692dc4ce1dba83c7b406da8eb
Author: Umang Sharma <umasharm@cisco.com>
Date:   Fri Dec 8 11:40:39 2023 -0500

    appid: fixes for coverity issues

4 months agoPull request #4131: profiler: change time tracking for "rule_time (%)" field in rule_...
Vitalii Serhiiovych Horbatov -X (vhorbato - SOFTSERVE INC at Cisco) [Tue, 12 Dec 2023 14:07:19 +0000 (14:07 +0000)] 
Pull request #4131: profiler: change time tracking for "rule_time (%)" field in rule_profiler output

Merge in SNORT/snort3 from ~VHORBATO/snort3:rp_percent to master

Squashed commit of the following:

commit a11edea62ed46ae86fbba5ff6f377ef0bc21bd18
Author: vhorbato <vhorbato@cisco.com>
Date:   Wed Dec 6 15:12:12 2023 +0200

    profiler: change time tracking for "rule_time (%)" field in rule_profiler output

4 months agoPull request #4136: appid: add http3 to the list of ssl protocols as http3 will alway...
Shibin K V (shikv) [Sat, 9 Dec 2023 17:19:17 +0000 (17:19 +0000)] 
Pull request #4136: appid: add http3 to the list of ssl protocols as http3 will always be inside quic and encrypted

Merge in SNORT/snort3 from ~SHIKV/snort3:quic_url_si_multi to master

Squashed commit of the following:

commit 80c701e650b7ff9adc82a93ace1b5790e9586625
Author: shibin k v <shikv@cisco.com>
Date:   Thu Dec 7 21:20:44 2023 +0000

    appid: add http3 to the list of ssl protocols as http3 will always be inside quic and encrypted

4 months agoPull request #4135: Feature Prep
Brandon Stultz (brastult) [Fri, 8 Dec 2023 09:14:05 +0000 (09:14 +0000)] 
Pull request #4135: Feature Prep

Merge in SNORT/snort3 from ~BRASTULT/snort3:feature_prep to master

Squashed commit of the following:

commit 85e2bbe582be1ff3980da214aa92927fa9b2007e
Author: Brandon Stultz <brastult@cisco.com>
Date:   Mon Nov 20 17:58:17 2023 -0500

    utils: add get_file_size

commit 5362d679a2b1f162554647f970de07c66d80df94
Author: Brandon Stultz <brastult@cisco.com>
Date:   Thu Nov 9 14:58:42 2023 -0500

    main: fix reload_id data race

commit ada5805e25cf9d7d1ede3d44aec0c96bb25bb5e9
Author: Brandon Stultz <brastult@cisco.com>
Date:   Fri Nov 3 11:47:28 2023 -0400

    parser: add CWD to conf search order

commit b11e3124844d717857d8b0bf7995c0396203e610
Author: Brandon Stultz <brastult@cisco.com>
Date:   Fri Sep 22 16:44:24 2023 -0400

    pub_sub: add get_client_body and is_mime methods

commit 4da05779e308734d705e2de2c3afe4ec210413ce
Author: Brandon Stultz <brastult@cisco.com>
Date:   Fri Sep 22 16:40:09 2023 -0400

    http_inspect: publish HTTP/1 request bodies, track MIME boundary

4 months agoPull request #4133: host_cache: fix for race condition on peg counts
Raza Shafiq (rshafiq) [Thu, 7 Dec 2023 21:49:00 +0000 (21:49 +0000)] 
Pull request #4133: host_cache: fix for race condition on peg counts

Merge in SNORT/snort3 from ~RSHAFIQ/snort3:host_cache_pegs to master

Squashed commit of the following:

commit 2d742de0301f5940aa7f658336f382f33059f1e9
Author: rshafiq <rshafiq@cisco.com>
Date:   Wed Dec 6 08:37:52 2023 -0500

    host_cache: fix for race condition on peg counts

4 months agoPull request #4126: catch: add boost software license for catch.hpp
Michael Matirko (mmatirko) [Tue, 5 Dec 2023 18:03:02 +0000 (18:03 +0000)] 
Pull request #4126: catch: add boost software license for catch.hpp

Merge in SNORT/snort3 from ~MMATIRKO/snort3:boost_license to master

Squashed commit of the following:

commit 5355f9305ad11eb29eb687f54417f910e5a5f02d
Author: Michael Matirko <mmatirko@cisco.com>
Date:   Mon Dec 4 10:19:13 2023 -0500

    catch: add boost software license for catch.hpp

4 months agoPull request #4110: appid: Lua logging doc update
Oleksandr Stepanov -X (ostepano - SOFTSERVE INC at Cisco) [Tue, 5 Dec 2023 15:41:22 +0000 (15:41 +0000)] 
Pull request #4110: appid: Lua logging doc update

Merge in SNORT/snort3 from ~OSTEPANO/snort3:lua_os_doc to master

Squashed commit of the following:

commit 66d83304b0e7fefb4cde191f640c2ee9de0a1fb4
Author: Oleksandr Stepanov <ostepano@cisco.com>
Date:   Thu Nov 23 10:45:35 2023 -0500

    appid: Lua logging doc update

4 months agoPull request #4127: GID range for built-in rules.
Oleksii. Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) [Tue, 5 Dec 2023 11:26:15 +0000 (11:26 +0000)] 
Pull request #4127: GID range for built-in rules.

Merge in SNORT/snort3 from ~OSHUMEIK/snort3:gid_range to master

Squashed commit of the following:

commit 6ad50702f4158d5ea09670c1cf30b359dcc977ca
Author: Oleksii Shumeiko <oshumeik@cisco.com>
Date:   Mon Dec 4 13:29:16 2023 +0200

    detection: adjust built-in GID range to 40-999

4 months agoPull request #4123: build: generate and tag 3.1.76.0 3.1.76.0
Priyanka Bangalore Gurudev (prbg) [Mon, 4 Dec 2023 19:55:20 +0000 (19:55 +0000)] 
Pull request #4123: build: generate and tag 3.1.76.0

Merge in SNORT/snort3 from ~PRBG/snort3:build_3.1.76.0 to master

Squashed commit of the following:

commit 166c30f1a73c583d0fb615872328c5dc782ef1a2
Author: Priyanka Gurudev <prbg@cisco.com>
Date:   Sun Dec 3 23:09:32 2023 -0500

    build: generate and tag 3.1.76.0

5 months agoPull request #4116: appid: coverity issues
Umang Sharma (umasharm) [Thu, 30 Nov 2023 14:34:29 +0000 (14:34 +0000)] 
Pull request #4116: appid: coverity issues

Merge in SNORT/snort3 from ~UMASHARM/snort3:coverity_fixes to master

Squashed commit of the following:

commit 5f57ab950b53a47217d9a1155e4988f31bd288a5
Author: Umang Sharma <umasharm@cisco.com>
Date:   Wed Nov 22 02:25:17 2023 -0500

    appid: fixing coverity issues