#include "file_api/file_api.h"
#include "file_api/file_flows.h"
#include "framework/data_bus.h"
+#include "log/messages.h"
#include "log/unified2.h"
#include "main/snort_debug.h"
#include "mime/decode_base.h"
#include <sys/types.h>
// FIXIT-L all snort includes should use <form> instead of "form"
+#include "log/messages.h"
#include "protocols/packet.h"
#include "main/snort_debug.h"
#include "decompress/file_decomp.h"
#include <string>
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_debug.h"
#include "framework/logger.h"
#include <string.h>
#include <ctype.h>
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_debug.h"
#include "protocols/packet.h"
#endif
#include "framework/codec.h"
+#include "log/messages.h"
#include "protocols/protocol_ids.h"
#include "protocols/packet.h"
#include "codecs/codec_module.h"
#include "codecs/codec_module.h"
#include "protocols/ip.h"
#include "protocols/ipv4_options.h"
+#include "log/messages.h"
#include "log/text_log.h"
#include "log/log_text.h"
#include "sfip/sf_ipvar.h"
#include "ips_options/ips_pcre.h"
#include "filters/detection_filter.h"
#include "latency/packet_latency.h"
+#include "log/messages.h"
#include "main/thread_config.h"
#include "framework/ips_option.h"
#include "framework/cursor.h"
#include "ports/rule_port_tables.h"
#include "framework/mpse.h"
#include "framework/ips_option.h"
+#include "log/messages.h"
#include "managers/mpse_manager.h"
#include "target_based/snort_protocols.h"
#include "latency/packet_latency.h"
#include "latency/rule_latency.h"
+#include "log/messages.h"
#include "main/snort_config.h"
#include "main/snort_debug.h"
#include "framework/cursor.h"
#include "fp_config.h"
#include "fp_create.h"
+#include "log/messages.h"
#include "main/snort_config.h"
#include "utils/util.h"
#include <stdlib.h>
#include <string.h>
+#include "log/messages.h"
#include "main/snort_config.h"
#include "hash/sfghash.h"
#include "utils/sflsq.h"
#include "detection/rules.h"
#include "detection/treenodes.h"
#include "hash/sfghash.h"
+#include "log/messages.h"
#include "parser/parser.h"
#include "main/snort_config.h"
#include "rules.h"
#include "treenodes.h"
+#include "log/messages.h"
#include "main/snort_debug.h"
#include "main/snort_config.h"
#include "protocols/packet.h"
#include "utils/util.h"
#include "utils/stats.h"
#include "filters/sfthreshold.h"
+#include "log/messages.h"
#include "parser/parser.h"
typedef struct s_SNORT_EVENTQ_USER
#include "file_cache.h"
#include "file_service.h"
+#include "log/messages.h"
+#include "main/snort_config.h"
#include "sfip/sfip_t.h"
#include "sfip/sf_ip.h"
#include "time/packet_time.h"
#include "utils/util.h"
#include "utils/snort_bounds.h"
-#include "main/snort_config.h"
uint64_t FileCache::num_add_fails = 0;
#include <sys/types.h>
#include <sys/stat.h>
-#include "file_config.h"
-#include "file_stats.h"
-
-#include "main/snort_config.h"
#include "hash/hashes.h"
+#include "log/messages.h"
+#include "main/snort_config.h"
#include "utils/util.h"
#include "utils/stats.h"
+#include "file_config.h"
+#include "file_stats.h"
+
FileMemPool* FileCapture::file_mempool = nullptr;
File_Capture_Stats file_capture_stats;
#include "framework/data_bus.h"
#include "hash/hashes.h"
#include "hash/sfxhash.h"
+#include "log/messages.h"
#include "main/snort_types.h"
#include "managers/action_manager.h"
#include "packet_io/active.h"
#include <algorithm>
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_debug.h"
#include "parser/parser.h"
**
*/
+#include "file_mempool.h"
+
#include <stdlib.h>
#include <stdio.h>
#include <assert.h>
-#include "file_mempool.h"
+#include "log/messages.h"
#include "utils/util.h"
/*This magic is used for double free detection*/
#include <stdlib.h>
#include <string.h>
-#include "utils/util.h"
-#include "parser/parser.h"
#include "filters/sfthd.h"
+#include "log/messages.h"
#include "main/thread.h"
+#include "parser/parser.h"
+#include "utils/util.h"
static THREAD_LOCAL SFXHASH* detection_filter_hash = NULL;
#include <iostream>
+#include "log/messages.h"
#include "main.h"
#include "main/thread.h"
#include "main/snort.h"
#include <ctype.h>
#include <errno.h>
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_debug.h"
#include "protocols/packet.h"
#endif
#include "extract.h"
+#include "log/messages.h"
#include "main/snort_types.h"
#include "parser/parser.h"
#include "detection/detection_defines.h"
#include "extract.h"
#include "ips_byte_extract.h"
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_debug.h"
#include "protocols/packet.h"
#include "extract.h"
#include "ips_byte_extract.h"
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_debug.h"
#include "protocols/packet.h"
#endif
#include "ips_byte_extract.h"
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_debug.h"
#include "utils/boyer_moore.h"
#include <string.h>
#include <ctype.h>
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_debug.h"
#include "protocols/packet.h"
#include <string.h>
#include <ctype.h>
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_debug.h"
#include "detection/treenodes.h"
#include <string>
#include <forward_list>
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_debug.h"
#include "detection/treenodes.h"
#include <ctype.h>
#include <string.h>
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_debug.h"
#include "protocols/packet.h"
#include <string>
#include "ips_byte_extract.h"
+#include "log/messages.h"
#include "main/snort_types.h"
#include "parser/parser.h"
#include "parser/parse_utils.h"
#include <errno.h>
#include <netdb.h>
+#include "log/messages.h"
#include "main/snort_debug.h"
#include "protocols/packet.h"
#include "parser/parser.h"
#include <errno.h>
#include "ips_byte_extract.h"
+#include "log/messages.h"
#include "protocols/packet.h"
#include "parser/parser.h"
#include "parser/mstring.h"
#include <string>
#include <vector>
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_debug.h"
#include "main/snort_config.h"
#include <sys/types.h>
#include <pcre.h>
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_debug.h"
#include "main/snort_config.h"
#include "detection/detection_defines.h"
#include "detection/pattern_match_data.h"
#include "hash/sfhashfcn.h"
+#include "log/messages.h"
#include "main/snort_config.h"
#include "main/thread.h"
#include "parser/parser.h"
#include <assert.h>
#include <string>
+#include "log/messages.h"
#include "main/snort_config.h"
#include "main/snort_types.h"
#include "main/snort_debug.h"
#include "detection/detection_defines.h"
#include "detection/pattern_match_data.h"
#include "hash/sfhashfcn.h"
+#include "log/messages.h"
+#include "log/obfuscator.h"
#include "main/snort_config.h"
#include "main/thread.h"
#include "parser/parser.h"
#include "profiler/profiler.h"
#include "sd_credit_card.h"
-#include "log/obfuscator.h"
#define s_name "sd_pattern"
#define s_help "rule option for detecting sensitive data"
#include <string>
+#include "log/messages.h"
#include "main/snort_config.h"
#include "protocols/packet.h"
#include "main/snort_debug.h"
#include <sstream>
#include <vector>
+#include "log/messages.h"
#include "main/snort_config.h"
#include "main/thread.h"
#include "protocols/packet.h"
#include <string>
#include <mutex>
-#include "log_text.h"
#include "main/snort_debug.h"
#include "main/snort_config.h"
#include "protocols/tcp.h"
+#include "log_text.h"
+#include "messages.h"
+
#define DEFAULT_DAEMON_ALERT_FILE "alert"
/* Input is packet and an nine-byte (including NULL) character array. Results
#include "detection/treenodes.h"
#include "detection/signature.h"
#include "detection/detection_util.h"
+#include "log/messages.h"
#include "main/snort_debug.h"
#include "main/snort_config.h"
#include "packet_io/sfdaq.h"
#include "main/snort_debug.h"
#include "framework/logger.h"
#include "framework/module.h"
+#include "log/messages.h"
#include "managers/event_manager.h"
#include "detection/rules.h"
#include "detection/treenodes.h"
#include <string>
+#include "log/messages.h"
#include "main/snort_debug.h"
#include "main/snort_config.h"
#include "framework/logger.h"
#include <string>
+#include "log/messages.h"
#include "main/snort_debug.h"
#include "main/snort_config.h"
#include "framework/logger.h"
#include "detection/detect.h"
#include "parser/parser.h"
#include "events/event.h"
+#include "log/messages.h"
#include "log/obfuscator.h"
#include "packet_io/active.h"
#include "packet_io/sfdaq.h"
#include <string>
#include <thread>
+#include "log/messages.h"
#include "main/analyzer.h"
#include "main/shell.h"
#include "main/snort.h"
#include "host_tracker/host_tracker_module.h"
#include "host_tracker/host_cache_module.h"
#include "latency/latency_module.h"
+#include "log/messages.h"
#include "managers/module_manager.h"
#include "managers/plugin_manager.h"
#include "memory/memory_module.h"
#include "ips_options/ips_flowbits.h"
#include "latency/packet_latency.h"
#include "latency/rule_latency.h"
+#include "log/messages.h"
#include "managers/action_manager.h"
#include "managers/codec_manager.h"
#include "managers/inspector_manager.h"
#include "helpers/process.h"
#include "ips_options/ips_pcre.h"
#include "latency/latency_config.h"
+#include "log/messages.h"
#include "managers/inspector_manager.h"
#include "managers/ips_manager.h"
#include "managers/module_manager.h"
#include <syslog.h>
#include <stdlib.h>
+#include "log/messages.h"
+
#include "snort_types.h"
#include "snort_config.h"
#include "framework/base_api.h"
#include "framework/module.h"
#include "framework/parameter.h"
+#include "log/messages.h"
#include "managers/module_manager.h"
#include "managers/plugin_manager.h"
#include "packet_io/sfdaq_config.h"
#include <hwloc.h>
+#include "log/messages.h"
#include "utils/util.h"
#ifdef UNIT_TEST
#include <utility>
#include "framework/connector.h"
+#include "log/messages.h"
#include "main/snort_config.h"
#include "main/snort_debug.h"
#include "module_manager.h"
#include <lua.hpp>
#include "plugin_manager.h"
+#include "log/messages.h"
#include "main/snort_config.h"
#include "main/modules.h"
#include "main/shell.h"
#include "file_api/file_api.h"
#include "file_api/file_flows.h"
#include "framework/data_bus.h"
+#include "log/messages.h"
#include "protocols/packet.h"
#include "search_engines/search_tool.h"
#include "utils/util.h"
#include "config.h"
#endif
+#include "log/messages.h"
#include "main/thread.h"
#include "profiler/profiler.h"
#include "appid_stats.h"
static void dump_appid_stats()
{
LogMessage("Application Identification Preprocessor:\n");
- LogMessage(" Total packets received : %lu\n", appid_stats.packets);
- LogMessage(" Total packets processed : %lu\n", appid_stats.processed_packets);
+ LogMessage(" Total packets received : %" PRIu64 "\n", appid_stats.packets);
+ LogMessage(" Total packets processed : %" PRIu64 "\n", appid_stats.processed_packets);
if (thirdparty_appid_module)
thirdparty_appid_module->print_stats();
- LogMessage(" Total packets ignored : %lu\n", appid_stats.ignored_packets);
+ LogMessage(" Total packets ignored : %" PRIu64 "\n", appid_stats.ignored_packets);
AppIdServiceStateDumpStats();
}
#include <string.h>
#include <stdio.h>
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_debug.h"
#include "detection/detect.h"
#include "binding.h"
#include "protocols/packet.h"
#include "parser/parse_ip.h"
+#include "log/messages.h"
#include "main/policy.h"
#include "main/snort_config.h"
#include "main/shell.h"
#include "packet_io/sfdaq.h"
#include "parser/parser.h"
#include "profiler/profiler.h"
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_config.h"
#include "framework/inspector.h"
#include "flow_ip_tracker.h"
#include "perf_module.h"
+#include "log/messages.h"
#include "sfip/sf_ip.h"
#include "utils/util.h"
#include "perf_monitor.h"
#include "perf_module.h"
+#include "log/messages.h"
#include "main/snort_config.h"
#include "main/snort_types.h"
#include "main/snort_debug.h"
#include "ps_module.h"
#include "ipobj.h"
+#include "log/messages.h"
#include "main/snort_config.h"
#include "managers/inspector_manager.h"
#include "protocols/packet_manager.h"
#include <sys/types.h>
#include "ipobj.h"
+#include "log/messages.h"
#include "main/snort_config.h"
#include "protocols/packet.h"
#include "time/packet_time.h"
#include "protocols/packet.h"
#include "sfip/sf_ip.h"
#include "events/event_queue.h"
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_debug.h"
#include "profiler/profiler.h"
#include "reputation_module.h"
-#include "utils/util.h"
#include <assert.h>
#include <sstream>
+#include "log/messages.h"
+#include "utils/util.h"
+
#include "reputation_parse.h"
using namespace std;
#include <assert.h>
#include <limits>
+
+#include "log/messages.h"
+#include "main/snort_debug.h"
#include "parser/config_file.h"
#include "utils/util.h"
-#include "main/snort_debug.h"
using namespace std;
#include "active.h"
+#include "log/messages.h"
#include "managers/action_manager.h"
#include "packet_io/sfdaq.h"
#include "protocols/tcp.h"
#include <pcap.h>
#include <stdio.h>
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_debug.h"
#include "utils/util.h"
#include <sfbpf_dlt.h>
}
-#include "sfdaq_config.h"
+#include "log/messages.h"
#include "main/snort_config.h"
#include "parser/parser.h"
#include "protocols/vlan.h"
#include "utils/util.h"
+#include "sfdaq_config.h"
+
using namespace std;
#ifdef DEFAULT_DAQ
#include "sfdaq_module.h"
-#include "sfdaq_config.h"
+#include "log/messages.h"
#include "main/snort_config.h"
+#include "sfdaq_config.h"
+
#ifdef UNIT_TEST
#include "catch/catch.hpp"
#endif
#include <algorithm>
#include <fstream>
-#include "main/snort_config.h"
#include "helpers/directory.h"
+#include "log/messages.h"
+#include "main/snort_config.h"
std::vector<struct Trough::PcapReadObject> Trough::pcap_object_list;
std::vector<std::string> Trough::pcap_queue;
#include <string>
+#include "log/messages.h"
#include "main/help.h"
#include "main/snort_module.h"
#include "main/snort_config.h"
#include "mstring.h"
#include "detection/detect.h"
+#include "log/messages.h"
#include "main/snort.h"
#include "main/snort_config.h"
#include "main/snort_types.h"
#include "packet_io/active.h"
#include "file_api/file_config.h"
#include "framework/ips_option.h"
+#include "log/messages.h"
#include "managers/action_manager.h"
#include "actions/actions.h"
#include "target_based/snort_protocols.h"
#include <sys/types.h>
#include "parser.h"
+#include "log/messages.h"
#include "main/snort_debug.h"
#include "sfip/sf_vartable.h"
#include "sfip/sf_ipvar.h"
#include "packet_io/active.h"
#include "file_api/file_config.h"
#include "framework/ips_option.h"
+#include "log/messages.h"
#include "managers/ips_manager.h"
#include "managers/so_manager.h"
#include "target_based/snort_protocols.h"
#include <string.h>
#include "parser.h"
+#include "log/messages.h"
#include "utils/util.h"
using namespace std;
#include "packet_io/active.h"
#include "file_api/file_config.h"
#include "actions/actions.h"
+#include "log/messages.h"
#include "managers/event_manager.h"
#include "managers/module_manager.h"
#include "target_based/snort_protocols.h"
#include "cmd_line.h"
#include "parse_ports.h"
+#include "log/messages.h"
#include "main/snort_debug.h"
#include "main/snort_config.h"
#include "detection/rules.h"
#include "port_item.h"
#include "port_utils.h"
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_config.h"
#include "main/snort_debug.h"
#include "port_table.h"
#include "port_utils.h"
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_config.h"
#include "main/snort_debug.h"
#include "port_object2.h"
#include "port_utils.h"
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_config.h"
#include "main/snort_debug.h"
#include "port_object.h"
#include "port_table.h"
+#include "log/messages.h"
#include "parser/parser.h"
#include "utils/util.h"
#include "main/snort_config.h"
#endif
+#include "log/messages.h"
#include "main/snort_debug.h"
#include "main/snort_types.h"
#include "utils/stats.h"
#include <list>
#include "search_common.h"
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_debug.h"
#include "utils/stats.h"
#include <ctype.h>
#include <string.h>
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_types.h"
#include "main/snort_debug.h"
#include "dce_smb_module.h"
+#include "log/messages.h"
#include "main/snort_config.h"
#include "dce_smb.h"
#include "dnp3_module.h"
#include "dnp3.h"
+#include "log/messages.h"
#include "main/snort_config.h"
using namespace std;
#include "ftp_cmd_lookup.h"
#include "ftpp_return_codes.h"
+#include "log/messages.h"
#include "sfip/sf_ip.h"
#include "utils/util.h"
// imap_module.cc author Bhagyashree Bantwal <bbantwal@cisco.com>
#include "imap_module.h"
+
#include <assert.h>
#include <sstream>
+
+#include "log/messages.h"
#include "main/snort_config.h"
using namespace std;
// pop_module.cc author Bhagyashree Bantwal <bbantwal@cisco.com>
#include "pop_module.h"
+
#include <assert.h>
#include <sstream>
+
+#include "log/messages.h"
#include "main/snort_config.h"
using namespace std;
#include <ctype.h>
#include "parser/parser.h"
+#include "log/messages.h"
#include "main/snort_debug.h"
#include "detection/detect.h"
#include "log/log.h"
#include <stdio.h>
#include <sys/types.h>
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_debug.h"
#include "main/snort_config.h"
#include "sip_config.h"
-#include "utils/util.h"
+#include "log/messages.h"
#include "main/snort_debug.h"
#include "parser/parser.h"
+#include "utils/util.h"
#define SIP_SEPERATORS "()<>@,;:\\/[]?={}\" "
#include <stdio.h>
#include <sys/types.h>
+#include "log/messages.h"
#include "main/snort_types.h"
#include "main/snort_debug.h"
#include "profiler/profiler.h"
// smtp_module.cc author Bhagyashree Bantwal <bbantwal@cisco.com>
#include "smtp_module.h"
+
#include <assert.h>
#include <sstream>
+
+#include "log/messages.h"
#include "main/snort_config.h"
using namespace std;
#include "protocols/layer.h"
#include "protocols/ipv4_options.h"
#include "protocols/packet_manager.h"
+#include "log/messages.h"
#include "main/snort.h"
#include "main/snort_debug.h"
#include "profiler/profiler.h"
// tcp_stream_config.cc author davis mcpherson <davmcphe@@cisco.com>
// Created on: Oct 22, 2015
+#include "log/messages.h"
#include "main/snort_config.h"
#include "tcp_stream_config.h"
#include "sftarget_hostentry.h"
#include "sftarget_data.h"
+#include "hash/sfxhash.h"
+#include "log/messages.h"
#include "main/snort_config.h"
#include "main/snort_debug.h"
#include "parser/parser.h"
-#include "hash/sfxhash.h"
+#include "utils/stats.h"
#include "utils/util.h"
#include "utils/util_net.h"
-#include "utils/stats.h"
#include "sfip/sf_ip.h"
#include "sfrt/sfrt.h"
#include <vector>
#include "hash/sfghash.h"
+#include "log/messages.h"
#include "main/snort_debug.h"
-#include "utils/util.h"
#include "stream/stream.h"
+#include "utils/util.h"
#include "sftarget_reader.h"
#include "sftarget_hostentry.h"
#endif
#include "util.h"
+#include "log/messages.h"
#include "main/snort_config.h"
#include "helpers/process.h"
#include "packet_io/sfdaq.h"
#include "config.h"
#endif
-#include <assert.h>
-#include <dirent.h>
-#include <errno.h>
-#include <fcntl.h>
-#include <fnmatch.h>
#include <grp.h>
-#include <limits.h>
#include <luajit.h>
#include <netdb.h>
#include <openssl/crypto.h>
#include <pcap.h>
#include <pcre.h>
#include <pwd.h>
-#include <signal.h>
-#include <stdarg.h>
-#include <string.h>
-#include <syslog.h>
-#include <time.h>
-#include <unistd.h>
+#include <sys/file.h>
#include <zlib.h>
-
#ifdef HAVE_LZMA
#include <lzma.h>
#endif
#include <hs_compile.h>
#endif
-#include <sys/types.h>
-#include <sys/stat.h>
-#include <sys/resource.h>
+extern "C" {
+#include <daq.h>
+}
+
+#include <fstream>
+#include <sstream>
-#include "sflsq.h"
+#include "log/messages.h"
+#include "main/build.h"
#include "main/snort_config.h"
#include "main/snort_debug.h"
-#include "main/snort_types.h"
-#include "main/build.h"
-#include "parser/parser.h"
#include "packet_io/sfdaq.h"
-#include "packet_io/active.h"
-#include "ips_options/ips_pcre.h"
-#include "time/packet_time.h"
-#include "time/timersub.h"
#ifdef PATH_MAX
#define PATH_MAX_UTIL PATH_MAX
LogMessage(" Copyright (C) 2014-2016 Cisco and/or its affiliates."
" All rights reserved.\n");
LogMessage(" Copyright (C) 1998-2013 Sourcefire, Inc., et al.\n");
+ LogMessage(" Using DAQ version %s\n", daq_version_string());
#ifdef HAVE_PCAP_LIB_VERSION
LogMessage(" Using %s\n", pcap_lib_version());
#endif
#include "config.h"
#endif
-#include <sys/time.h>
-#include <sys/types.h>
-#include <stdlib.h>
#include <errno.h>
-#include <unistd.h>
+#include <stdlib.h>
#include <string.h>
-#include <ctype.h>
-#include <fstream>
-#include <sstream>
+#include <unistd.h>
#if defined(__linux__)
#include <sys/syscall.h>
#include <string>
#include "main/snort_types.h"
-#include "log/messages.h"
#define SNORT_SNPRINTF_SUCCESS 0
#define SNORT_SNPRINTF_TRUNCATION 1