]> git.ipfire.org Git - thirdparty/snort3.git/commit
Merge pull request #3122 in SNORT/snort3 from ~RUCOMBS/snort3:hyper_serial to master
authorRuss Combs (rucombs) <rucombs@cisco.com>
Mon, 25 Oct 2021 22:48:35 +0000 (22:48 +0000)
committerRuss Combs (rucombs) <rucombs@cisco.com>
Mon, 25 Oct 2021 22:48:35 +0000 (22:48 +0000)
commit4e09ce8286d5897f5d57db8e1edec1f082030e8b
tree2d024d6329b452087ab408b8c064fdf1c4a04567
parentf78f91690d114318dd96aaef4736839bb0ff5dca
Merge pull request #3122 in SNORT/snort3 from ~RUCOMBS/snort3:hyper_serial to master

Squashed commit of the following:

commit 9daf5f9c73643d751835d24790aab34c9382f338
Author: russ <rucombs@cisco.com>
Date:   Wed Oct 13 14:19:08 2021 -0400

    detection: refactor mpse serialization

commit 5b0ab03288a64707313c5f3f4f1214df235556c1
Author: russ <rucombs@cisco.com>
Date:   Wed Oct 13 10:19:58 2021 -0400

    detection: rename PortGroup to the more apt RuleGroup (and related)

    PortGroup is a legacy name that predates service. RuleGroups are a
    collection of rules based on port (port, src|dst|any, #) or service
    (service, c2s|s2c).

commit 47fa569f433c9c0ae034693c0caf76cfec65a89c
Author: russ <rucombs@cisco.com>
Date:   Wed Oct 13 10:12:01 2021 -0400

    detection: replace PortGroup::alloc/free with ctor/dtor

commit 412073be22c8d8da0f7b532351bb377465186aad
Author: russ <rucombs@cisco.com>
Date:   Mon Oct 11 15:33:47 2021 -0400

    search_engine: support port group serialization

commit 181e18b47f0a49a5a39dda02a44dc4f9702a3f97
Author: russ <rucombs@cisco.com>
Date:   Mon Oct 11 09:43:20 2021 -0400

    ips: correct fast pattern port group counts

commit edbeadd92064f02a0f7690f14805cb037ecbd980
Author: russ <rucombs@cisco.com>
Date:   Sun Oct 10 12:57:52 2021 -0400

    mpse: add md5 check to deserialization

commit 2dc6cde03deddcf2af26626fee5075e957d06fa9
Author: russ <rucombs@cisco.com>
Date:   Thu Oct 7 10:24:09 2021 -0400

    hyperscan: sort patterns for dump / load stability

commit 8fcc0ac4b79fe51e8d2a76484dc05238069b331b
Author: russ <rucombs@cisco.com>
Date:   Thu Oct 7 07:53:37 2021 -0400

    search_engine: support hyperscan serialization

    Dump hyperscan databases for service rule groups to the given directory
    with --dump-rule-databases. They can be reloaded with
    search_engine.rule_db_dir. This does not serialize port group databases.
25 files changed:
src/detection/fp_config.h
src/detection/fp_create.cc
src/detection/fp_detect.cc
src/detection/fp_detect.h
src/detection/fp_utils.cc
src/detection/fp_utils.h
src/detection/pcrm.cc
src/detection/pcrm.h
src/detection/service_map.cc
src/detection/service_map.h
src/framework/mpse.h
src/main/modules.cc
src/main/snort_config.cc
src/main/snort_config.h
src/main/snort_module.cc
src/ports/port_group.cc
src/ports/port_group.h
src/ports/port_object.cc
src/ports/port_object.h
src/ports/port_object2.cc
src/ports/port_object2.h
src/ports/port_table.cc
src/ports/port_table.h
src/search_engines/hyperscan.cc
src/search_engines/test/hyperscan_test.cc