]>
git.ipfire.org Git - thirdparty/snort3.git/log
Shawn Turner (shaturne) [Wed, 7 Sep 2016 17:13:21 +0000 (13:13 -0400)]
Merge pull request #613 in SNORT/snort3 from appid_client_smtp5 to master
Squashed commit of the following:
commit
244930cb9245e978861f61ee0387c726fc1974e5
Author: Steve Chew <stechew@cisco.com>
Date: Tue Sep 6 11:50:55 2016 -0400
Added smtp client counters and unit tests.
Michael Altizer (mialtize) [Wed, 7 Sep 2016 17:02:57 +0000 (13:02 -0400)]
Merge pull request #609 in SNORT/snort3 from smbv2 to master
Squashed commit of the following:
commit
a35102052f7c311bf47ac68f74fad952c3f79121
Author: mdagon <mdagon@cisco.com>
Date: Tue Aug 30 14:37:28 2016 -0400
Smbv2
Michael Altizer (mialtize) [Fri, 2 Sep 2016 21:01:23 +0000 (17:01 -0400)]
Merge pull request #612 in SNORT/snort3 from ftp_print_remove to master
Squashed commit of the following:
commit
07e889b0cc3417a2d6a4033cd2617e28a6136c91
Author: Tom Peters <thopeter@cisco.com>
Date: Fri Sep 2 11:27:59 2016 -0400
Commented out code related to ftp_config::show()
Michael Altizer (mialtize) [Fri, 2 Sep 2016 18:20:34 +0000 (14:20 -0400)]
Merge pull request #611 in SNORT/snort3 from ~MIALTIZE/snort3:warnings to master
Squashed commit of the following:
commit
155ad1dfe538abfa6b51a644926c018d40740d33
Author: Michael Altizer <mialtize@cisco.com>
Date: Fri Sep 2 10:50:45 2016 -0400
Clean up compiler warnings.
Shawn Turner (shaturne) [Fri, 2 Sep 2016 18:03:28 +0000 (14:03 -0400)]
Merge pull request #608 in SNORT/snort3 from mpls_encode to master
Squashed commit of the following:
commit
42ccbfaa13ee35556dfde13671aebb74b99ac014
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date: Tue Aug 30 01:13:12 2016 -0400
porting mpls encode changes from 2.x
Russ Combs [Fri, 2 Sep 2016 15:11:32 +0000 (11:11 -0400)]
build 207
Russ Combs (rucombs) [Thu, 1 Sep 2016 17:37:40 +0000 (13:37 -0400)]
Merge pull request #607 in SNORT/snort3 from ha-binder to master
Squashed commit of the following:
commit
34a3a1b3cdadf388af53e94c6e12bcc95660d257
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Wed Aug 24 19:57:54 2016 -0400
Changes to binder.cc for HA
Add Binder::eval(Flow*) to initialize Flow's created via received HA messages.
Fix a failing UT and eliminate build warnings.
Add the missing cmake binder UT support..
Removed the Binder::eval(Flow*) and replaced by overloading the Binder::exec() method.
Create binder.h to house a new enum for the Binder::exec() options.
Refactor the exec() method into three functions,
Russ Combs (rucombs) [Wed, 31 Aug 2016 19:19:36 +0000 (15:19 -0400)]
Merge pull request #606 in SNORT/snort3 from appid_session_refactor to master
Squashed commit of the following:
commit
6569f68ab27d55e78022d9064a573e89037cdde2
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date: Tue Aug 30 18:18:12 2016 -0400
remove extra func ptrs in ServiceApi instance
commit
b9e6eff6d24b74bf75388a1f0dcc5ead5e696024
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date: Tue Aug 30 17:55:34 2016 -0400
fix compile warnings for unused function parameters, dump config options in debug mode
commit
7ca20ec40cada6e9a980e4b6130c7931006eb7c6
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date: Tue Aug 9 09:56:51 2016 -0400
minor source formatting nits
fixes for memory management bugs in lua detectors
don't fatal error is lua package server init function is missing
fix stack buffer overflow due to invalid conversion of ip address string
fixes for memory leaks in appid lua detector management
more memory leak fixes
disable assert for now on lua detectors with no init
use sfip_t for ip addr variables
remove assert that checks for memory allocation that can never fail
disable assert for now on lua detectors with no init
remove assert that checks for memory allocation that can never fail
review/fix/catergorize FIXITs
add allocated DetectorFlow object to the allocatedFlowList when created in Detector_getFlow
add count for total lua detectors, remove bogus log statement
add () around logic expression in if statement
refactoring app id into reasonable classes...
first step toward creating proper appid session object
remove deprecated refs to streamAPI
cleaning up FIXITs, make some const params const
rename util directory to appid_utils
delete references to deprecated #def's
allocate tmp session object with new
updates from code review comments
fix compile errors in unit test due to AppIdSession rename
match up snort_calloc with snort_free for memory allocated for port exclusion lists
code review updates, unused code commented out, function names changed to fit coding style, future sessions create no longer requires session
fix compile warnings for unused function parameters, dump config options in debug mode
Tom Peters (thopeter) [Fri, 26 Aug 2016 18:54:50 +0000 (14:54 -0400)]
Merge pull request #604 in SNORT/snort3 from nhttp53 to master
Squashed commit of the following:
commit
acd74c3b9944b52d1cb1264b32a1f3de2a8d6b83
Author: Tom Peters <thopeter@cisco.com>
Date: Mon Aug 22 17:39:50 2016 -0400
NHI becomes OHI part 2
Tom Peters (thopeter) [Fri, 26 Aug 2016 15:29:20 +0000 (11:29 -0400)]
Merge pull request #605 in SNORT/snort3 from file to master
Squashed commit of the following:
commit
221b3697a6b686189041442fc22e002e5482870f
Author: huica <huica@cisco.com>
Date: Fri Aug 26 10:52:57 2016 -0400
Update dev notes
Tom Peters (thopeter) [Thu, 25 Aug 2016 16:52:05 +0000 (12:52 -0400)]
Merge pull request #603 in SNORT/snort3 from appid_rsync1 to master
Squashed commit of the following:
commit
d9f8bd1751d2deb3e9682a648b0b22c7bfb6c583
Merge:
011b8de 1c9b2e3
Author: Steve Chew <stechew@cisco.com>
Date: Wed Aug 24 12:34:30 2016 -0400
Merge branch 'appid_rsync1' of ssh://bitbucket-eng-rtp1.cisco.com:7999/snort/snort3 into appid_rsync1
commit
011b8de0c61fea1413025d9b8a74c0c9ad823fb3
Author: Steve Chew <stechew@cisco.com>
Date: Wed Aug 24 12:22:31 2016 -0400
Fixed Cmake test build.
commit
e25092d29345716ea5ce491232ee79251ea1727e
Author: Steve Chew <stechew@cisco.com>
Date: Tue Aug 23 09:50:02 2016 -0400
include service_rsync.cc file in tests so we can access private data.
commit
2703075fd0440ceb71c01be91d2ea3a28ba0f0fe
Author: Steve Chew <stechew@cisco.com>
Date: Fri Aug 19 16:36:50 2016 -0400
Added rsync flow counter and rsync_validate unit tests.
commit
1c9b2e3b28f68a488e264b26ea10f5fe23e5073b
Author: Steve Chew <stechew@cisco.com>
Date: Tue Aug 23 09:50:02 2016 -0400
include service_rsync.cc file in tests so we can access private data.
commit
0257acc0f2432d05684f28c4f3efc9b721a84eb2
Author: Steve Chew <stechew@cisco.com>
Date: Fri Aug 19 16:36:50 2016 -0400
Added rsync flow counter and rsync_validate unit tests.
Tom Peters (thopeter) [Tue, 23 Aug 2016 21:18:44 +0000 (17:18 -0400)]
Merge pull request #601 in SNORT/snort3 from appid_lua_modules to master
Squashed commit of the following:
commit
60777e8a0b9fd95648ef1c13d6691515dd19c271
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date: Tue Aug 9 09:56:51 2016 -0400
minor source formatting nits
fixes for memory management bugs in lua detectors
don't fatal error is lua package server init function is missing
fix stack buffer overflow due to invalid conversion of ip address string
fixes for memory leaks in appid lua detector management
more memory leak fixes
disable assert for now on lua detectors with no init
use sfip_t for ip addr variables
remove assert that checks for memory allocation that can never fail
disable assert for now on lua detectors with no init
remove assert that checks for memory allocation that can never fail
review/fix/catergorize FIXITs
add allocated DetectorFlow object to the allocatedFlowList when created in Detector_getFlow
add count for total lua detectors, remove bogus log statement
add () around logic expression in if statement
fix formatting issues from code review comments
Tom Peters (thopeter) [Tue, 23 Aug 2016 17:31:17 +0000 (13:31 -0400)]
Merge pull request #578 in SNORT/snort3 from ha-sc-tcp to master
Squashed commit of the following:
commit
0652444c0ea2a17935c5d82cc2d934e73f19d742
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Fri Aug 19 07:08:28 2016 -0400
Removed reference to POLLRDHUP.
commit
fb39de92698a0162923315b7d314504b64c672fa
Merge:
6bca045 6255c61
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Fri Aug 19 06:49:14 2016 -0400
Merge branch 'ha-sc-tcp' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3 into ha-sc-tcp
commit
6bca045aa2aa55a184bc8f77efeb81ec61f6c402
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Tue Aug 16 19:38:02 2016 -0400
Update target code and UT's to disable receive thread for testing.
commit
248c51ed08280b21dcca61212747f99195633c63
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Mon Aug 15 16:15:17 2016 -0400
UT update.
commit
56bdab304cbf99e5a56337da853f8c50406e54ed
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Mon Aug 15 15:46:29 2016 -0400
Updates from code review.
commit
62b2ab8387c8b395bc2a72cab386070c5a6f9620
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Thu Aug 11 16:41:00 2016 -0400
Disable memory leak detection in CppUtest as it sometimes indicates a false positive under ASAN.
commit
6b7dcac104018dd4643ddde1b1c66cf32a6e573b
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Thu Aug 11 15:29:19 2016 -0400
Additional tcp_connector UT's
commit
9e0c8e9017ab8527d620faf3488215b8cca7c3d9
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Thu Aug 11 08:12:48 2016 -0400
Restore some mods that were reverted, but shouldn't have been..
commit
ad105545bda657e12b6df3af98a6317b45439730
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Wed Aug 10 07:34:26 2016 -0400
Revert "Additional UT's. Fix one memory leak scenario in tcp_connector.cc"
This reverts commit
e590395e2e5e12dc024d860285056ad31ad7c3c8 .
commit
56e5c6fa3463a886a312860c0374e7750ec4990a
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Wed Aug 10 07:34:02 2016 -0400
Revert "Fix an ASAN finding in UT."
This reverts commit
bc8b83c44f9307eba521bb4694d078f88cf9e50e .
commit
373986e3ecae80345d52780344766473e2a190ce
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Wed Aug 10 07:19:16 2016 -0400
Fix an ASAN finding in UT.
commit
03d7bd67e852c2dda9748651f8cf564af085289c
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Wed Aug 10 06:46:45 2016 -0400
Additional UT's. Fix one memory leak scenario in tcp_connector.cc
commit
68f3435ba9025bc210a008c424d379925df6584a
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Fri Aug 5 16:18:29 2016 -0400
Additional UT's
commit
beb32f995e766ff640beb7f47d40c0eef0375398
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Thu Aug 4 14:49:19 2016 -0400
Changed from ConcurrentQueue<> to Ring<> for the TcpConnector receiver.
commit
ca343728fb6f86eeddfb140466bf51054a549cb5
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Thu Aug 4 07:06:31 2016 -0400
Fix error in cmake build.
commit
423f603c0418d845320dfffc9f046ac51fa3a3e6
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Wed Aug 3 17:10:47 2016 -0400
Remove a few remnants of legacy code.
commit
549c4568e04078259a31e73a5f2deaff532730ac
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Wed Aug 3 17:05:56 2016 -0400
Fix a printf format warning ieeue.
commit
c0649eab8e858a1f8a52650e6d1060671207a016
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Tue Aug 2 14:56:37 2016 -0400
Fix memory leak with thread object.
commit
fdf2577b7efd40c0796d3758b6e7bad1f39c36d4
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Tue Aug 2 12:04:04 2016 -0400
Fix a thread shutdown issue.
commit
34b29a0fb66b3802ace70bfa218ab32e7b9a9b34
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Tue Jul 5 10:00:42 2016 -0400
tcp_connector.
Updates for TCP HA. Fixes for functional tests. Refactoring for work on tcp_connector.
Memory leak fix.
Updates for TCP HA. Fixes for functional tests. Refactoring for work on tcp_connector.
tcp_connector
commit
2fb93265418a749fe284d4820a7a3f6e91fcc746
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Tue Jul 5 10:00:42 2016 -0400
Updates for TCP HA. Fixes for functional tests. Refactoring for work on tcp_connector.
Memory leak fix.
commit
6085ac02479156030c8d7921e8a2d00b4f642790
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Tue Jul 5 10:00:42 2016 -0400
Updates for TCP HA. Fixes for functional tests. Refactoring for work on tcp_connector.
commit
6255c610cad1dc554bf36a47711f6ab47e393b6c
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Tue Aug 16 19:38:02 2016 -0400
Update target code and UT's to disable receive thread for testing.
commit
876493c83b38442ed91346bb2ebb46611a727844
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Mon Aug 15 16:15:17 2016 -0400
UT update.
commit
0c7025514146f4d6ece7da1dc94c02da6a50190d
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Mon Aug 15 15:46:29 2016 -0400
Updates from code review.
commit
b4359b6dc39498241faebcd586b5783f90c9b6c3
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Thu Aug 11 16:41:00 2016 -0400
Disable memory leak detection in CppUtest as it sometimes indicates a false positive under ASAN.
commit
dd2b2b4971766d4779d28aefba1403f627f37fb7
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Thu Aug 11 15:29:19 2016 -0400
Additional tcp_connector UT's
commit
2c13c0c3ab1bc369cea2e5632f0d1dd42bf49f79
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Thu Aug 11 08:12:48 2016 -0400
Restore some mods that were reverted, but shouldn't have been..
commit
92b440ff76eddc35352e87f341275671c81ddccf
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Wed Aug 10 07:34:26 2016 -0400
Revert "Additional UT's. Fix one memory leak scenario in tcp_connector.cc"
This reverts commit
e590395e2e5e12dc024d860285056ad31ad7c3c8 .
commit
919da30a29b855159be36967e7aa88ec2c24d997
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Wed Aug 10 07:34:02 2016 -0400
Revert "Fix an ASAN finding in UT."
This reverts commit
bc8b83c44f9307eba521bb4694d078f88cf9e50e .
commit
bc8b83c44f9307eba521bb4694d078f88cf9e50e
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Wed Aug 10 07:19:16 2016 -0400
Fix an ASAN finding in UT.
commit
e590395e2e5e12dc024d860285056ad31ad7c3c8
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Wed Aug 10 06:46:45 2016 -0400
Additional UT's. Fix one memory leak scenario in tcp_connector.cc
commit
1c8e424562402734dc7fa6a28ccdaece6f1c587a
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Fri Aug 5 16:18:29 2016 -0400
Additional UT's
commit
8bd056e9a0890b63a3c4cfc0922259970235c186
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Thu Aug 4 14:49:19 2016 -0400
Changed from ConcurrentQueue<> to Ring<> for the TcpConnector receiver.
commit
14788fdb755badf13bc2f7334ce2643b7e1b19ae
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Thu Aug 4 07:06:31 2016 -0400
Fix error in cmake build.
commit
e811e6f268a6a9c6538ed9cc29ca3f960c6c11d2
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Wed Aug 3 17:10:47 2016 -0400
Remove a few remnants of legacy code.
commit
46e335cacad11e6a96c8e3ec93eb356735b565d3
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Wed Aug 3 17:05:56 2016 -0400
Fix a printf format warning ieeue.
commit
0a7c43c4cfe06ae042c8399208bea915fb274096
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Tue Aug 2 14:56:37 2016 -0400
Fix memory leak with thread object.
commit
71899da94897aff8c25ed49567d0542842178ee7
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Tue Aug 2 12:04:04 2016 -0400
Fix a thread shutdown issue.
commit
56cc2f720c4e77fbb42d9be00c9ccaa7bd118b0a
Merge:
571bc99 4d80af3
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Tue Aug 2 08:58:47 2016 -0400
Merge branch 'ha-sc-tcp' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3 into ha-sc-tcp
commit
571bc99914d0fa3002990a2f58820f6c3f05950f
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Tue Jul 5 10:00:42 2016 -0400
tcp_connector.
Updates for TCP HA. Fixes for functional tests. Refactoring for work on tcp_connector.
Memory leak fix.
Updates for TCP HA. Fixes for functional tests. Refactoring for work on tcp_connector.
tcp_connector
commit
4d80af36f33a30360a5e0ea506feb5e30e61ea8b
Merge:
f61f12c 0f6c19d
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Thu Jul 7 07:35:38 2016 -0400
Merge branch 'ha-sc-tcp' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3 into ha-sc-tcp
commit
f61f12c51c806dc9097ccf4b1afb831a51e6792c
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Tue Jul 5 10:00:42 2016 -0400
Updates for TCP HA. Fixes for functional tests. Refactoring for work on tcp_connector.
Memory leak fix.
commit
0f6c19d80d40de163c4a5c8460c140db836df386
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Tue Jul 5 10:00:42 2016 -0400
Updates for TCP HA. Fixes for functional tests. Refactoring for work on tcp_connector.
Tom Peters (thopeter) [Tue, 23 Aug 2016 14:45:21 +0000 (10:45 -0400)]
Merge pull request #602 in SNORT/snort3 from ips_fragbits_edit to master
Squashed commit of the following:
commit
9571d405e2dc4b54d2cd97e1106a2cf13f33d591
Author: alewis <albert.l.lewis@gmail.com>
Date: Mon Aug 22 21:19:52 2016 -0400
removed has_*_mode() functions as the logic was changed from if/else ladder to use a switch statement
Tom Peters (thopeter) [Mon, 22 Aug 2016 21:28:26 +0000 (17:28 -0400)]
Merge pull request #600 in SNORT/snort3 from nhttp52 to master
Squashed commit of the following:
commit
af9dc1d130087276d06e6a0083ba1e23ec3a75c7
Author: Tom Peters <thopeter@cisco.com>
Date: Fri Aug 19 12:57:57 2016 -0400
Conversion from NHI to HI
Tom Peters (thopeter) [Mon, 22 Aug 2016 20:58:27 +0000 (16:58 -0400)]
Merge pull request #599 in SNORT/snort3 from ips_fragbits to master
Squashed commit of the following:
commit
60190f6f0526808c8179610ce66e8e81e29cd796
Author: alewis <albert.l.lewis@gmail.com>
Date: Sat Aug 20 16:38:21 2016 -0400
removed empty line
commit
debb157e5077fb43acd1e7b17b5c4aa7c0bee825
Author: alewis <albert.l.lewis@gmail.com>
Date: Sat Aug 20 16:30:43 2016 -0400
updated file added enums and replace if/else ladder
commit
9dd73493258e9687bcd10ce09bd492cc3483e966
Author: alewis <albert.l.lewis@gmail.com>
Date: Sat Aug 20 12:33:37 2016 -0400
changed const values to enum
commit
e1f477039b0d934e629654f2dc7b8bd99511e91e
Author: alewis <albert.l.lewis@gmail.com>
Date: Fri Aug 19 11:19:22 2016 -0400
updated ips_fragbits
Tom Peters (thopeter) [Fri, 19 Aug 2016 18:46:57 +0000 (14:46 -0400)]
Merge pull request #598 in SNORT/snort3 from nhttp51 to master
Squashed commit of the following:
commit
bf01ba0dba8b94d874cd2cb8036efde9a51646f0
Author: Tom Peters <thopeter@cisco.com>
Date: Thu Aug 11 15:25:53 2016 -0400
NHI alerts for Transfer-Encoding and Content-Encoding abuse.
Tom Peters (thopeter) [Wed, 17 Aug 2016 21:51:49 +0000 (17:51 -0400)]
Merge pull request #596 in SNORT/snort3 from ciscometadata to master
Squashed commit of the following:
commit
4133a11225fb77f59c0dba3ffb854dfeea012160
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date: Tue Aug 16 03:09:55 2016 -0400
Porting the ciscometadata codec
Porting the ciscometadata codec
Porting the ciscometadata codec
Porting the ciscometadata codec
updating per review comments
Russ Combs (rucombs) [Wed, 17 Aug 2016 18:38:41 +0000 (14:38 -0400)]
Merge pull request #597 in SNORT/snort3 from double_vlan to master
Squashed commit of the following:
commit
9801a96ba004a74c0424d7eece759f9a4c217d62
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date: Wed Aug 17 13:29:44 2016 -0400
Porting the Double and triple vlan tagging changes
Russ Combs (rucombs) [Tue, 16 Aug 2016 18:18:40 +0000 (14:18 -0400)]
Merge pull request #595 in SNORT/snort3 from regex_fp_fix to master
Squashed commit of the following:
commit
4084e9329da46be546e2d8b2b0fa924d3626663f
Author: Russ Combs <rucombs@cisco.com>
Date: Mon Aug 15 21:36:32 2016 -0400
fix regex as fast pattern with hyperscan mpse
Russ Combs (rucombs) [Mon, 15 Aug 2016 17:47:23 +0000 (13:47 -0400)]
Merge pull request #593 in SNORT/snort3 from ips_rpc_warnings to master
Squashed commit of the following:
commit
7e46c2d9a52823a017f494a6faacc65cf968bc85
Author: alewis <albert.l.lewis@gmail.com>
Date: Mon Aug 15 13:41:33 2016 -0400
changed increment to packet_data +=4
commit
1a6c5588f578fca01ea8952688eca3f7b7d5fb3f
Author: alewis <albert.l.lewis@gmail.com>
Date: Mon Aug 15 12:54:55 2016 -0400
cleaned up blank spaces
commit
a518988789186fb6af679bfd727f9e1951b67fa9
Author: alewis <albert.l.lewis@gmail.com>
Date: Mon Aug 15 12:20:13 2016 -0400
changes to fix variable warnings
Russ Combs (rucombs) [Mon, 15 Aug 2016 16:02:27 +0000 (12:02 -0400)]
Merge pull request #591 in SNORT/snort3 from crc_vg to master
Squashed commit of the following:
commit
a8b860993764c3a950497673c2c9d6912a0deaa1
Author: snorty <snorty@ful1030-pod.cisco.com>
Date: Sat Aug 13 22:24:04 2016 -0400
fix nhi and tcp valgrind errors
Russ Combs (rucombs) [Mon, 15 Aug 2016 15:13:40 +0000 (11:13 -0400)]
Merge pull request #592 in SNORT/snort3 from app_str to master
Squashed commit of the following:
commit
5a81c23e62b9ded08e5a36f4083b2b93136ffb1e
Author: Russ Combs <rucombs@cisco.com>
Date: Mon Aug 15 09:51:29 2016 -0400
convert to snort_strndup for proper tracking
Russ Combs (rucombs) [Mon, 15 Aug 2016 13:37:59 +0000 (09:37 -0400)]
Merge pull request #589 in SNORT/snort3 from rpc_idx_remove to master
Squashed commit of the following:
commit
b0095fe60bce432b89b25b1229c698e8b37b9fce
Author: allewi <allewi@cisco.com>
Date: Sun Aug 14 20:32:58 2016 -0400
updated ips_rpc.cc file
commit
da1c1aac584187eb9dd263652a77ff007035ad0d
Author: allewi <allewi@cisco.com>
Date: Sun Aug 14 20:30:37 2016 -0400
updated ips_rpc.cc file
commit
4e7eaad1af0923551c94c5eb893beb91c7781f17
Author: allewi <allewi@cisco.com>
Date: Sun Aug 14 20:25:43 2016 -0400
updated ips_rpc.cc file
Russ Combs (rucombs) [Sun, 14 Aug 2016 14:10:29 +0000 (10:10 -0400)]
Merge pull request #588 in SNORT/snort3 from smb_file_processing to master
Squashed commit of the following:
commit
cae9cd6edd4e28eedfe6bd9d1820917a377b2ae5
Author: mdagon <mdagon@cisco.com>
Date: Fri Aug 12 16:50:45 2016 -0400
Code review: delete extra space
commit
2050aa70614c6494d0492f302096217d53163384
Author: mdagon <mdagon@cisco.com>
Date: Fri Aug 12 13:47:50 2016 -0400
Smb file processing
Russ Combs (rucombs) [Fri, 12 Aug 2016 21:46:31 +0000 (17:46 -0400)]
Merge pull request #590 in SNORT/snort3 from zero_field_fix to master
Squashed commit of the following:
commit
12bded36668b680fc9ba582eb56d99316c28c22e
Author: Tom Peters <thopeter@cisco.com>
Date: Fri Aug 12 16:25:12 2016 -0400
fix for grind error use of uninitialized pointer
Russ Combs (rucombs) [Fri, 12 Aug 2016 20:12:11 +0000 (16:12 -0400)]
Merge pull request #575 in SNORT/snort3 from utf_decoding to master
Squashed commit of the following:
commit
f6b070405bd84b69aa52df672b7d3b69c484adff
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date: Thu Aug 11 12:05:58 2016 -0400
resolving conflicts
resolving conflicts
resolving conflicts
Updating utf decoding per review comments
resolving conflicts
resolving conflicts
resolving conflicts
Updating utf decoding per review comments
resolving conflicts
resolving conflicts
reverting changes to a norm function in nhi
Russ Combs (rucombs) [Fri, 12 Aug 2016 16:42:15 +0000 (12:42 -0400)]
Merge pull request #587 in SNORT/snort3 from sdf-fast-pattern to master
Squashed commit of the following:
commit
088923ac93ac7890a2e3ff28f6e908d0bfc27093
Author: Victor Roemer <viroemer@cisco.com>
Date: Fri Aug 12 12:21:58 2016 -0400
Remove FIXIT
commit
bad192fd5d6ead40dc3c111cc2cf2f4a08dfa9d9
Author: Victor Roemer <viroemer@cisco.com>
Date: Thu Aug 4 15:50:20 2016 -0400
sd_pattern as a fast-pattern.
Russ Combs (rucombs) [Thu, 11 Aug 2016 19:44:13 +0000 (15:44 -0400)]
Merge pull request #554 in SNORT/snort3 from file_capture_mul to master
Squashed commit of the following:
commit
efc9408cd944f1f9c570f4335950fdd52bdaaf21
Author: huica <huica@cisco.com>
Date: Thu Aug 11 11:52:59 2016 -0400
remove additional header file
commit
c00c3ff16c1fbd3ad9d1025655998e552646f047
Author: huica <huica@cisco.com>
Date: Thu Aug 11 10:20:26 2016 -0400
uncrusify
commit
109afa308a619beb3c9273db8a59ce59c1971fba
Merge:
33dd61d 6481ee3
Author: huica <huica@cisco.com>
Date: Thu Aug 11 08:58:48 2016 -0400
Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_capture_mul
commit
33dd61d83dc2249cd223d2ccd2c08ce0139ffe6f
Author: huica <huica@cisco.com>
Date: Wed Aug 10 17:28:22 2016 -0400
mempool class
commit
acbf8857f6f4d88afe9e7eed5e9ebdba751a5bae
Author: huica <huica@cisco.com>
Date: Wed Aug 10 16:21:35 2016 -0400
update devnotes
commit
a5c98d6b7b894cc62ec01035ba858a735ef666c4
Merge:
5503866 a6b74b3
Author: huica <huica@cisco.com>
Date: Wed Aug 10 15:17:29 2016 -0400
Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_capture_mul
commit
5503866788ad2ee6ddc7bd0b8a46f5c9aa00f0b9
Author: huica <huica@cisco.com>
Date: Wed Aug 10 15:17:08 2016 -0400
address comments
commit
b375a13a0614f949f559cbb223ce788aae115022
Merge:
151ed4f 867b9c6
Author: huica <huica@cisco.com>
Date: Wed Aug 10 10:29:34 2016 -0400
Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_capture_mul
commit
151ed4f94c19867770f238c2c4176e8fbe5f3e52
Merge:
7630daa f67d217
Author: huica <huica@cisco.com>
Date: Tue Aug 9 10:21:15 2016 -0400
Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_capture_mul
commit
7630daa6615e2a7c2b563b29939c26d31d373860
Merge:
534326b 9b4b81e
Author: huica <huica@cisco.com>
Date: Tue Aug 2 14:20:19 2016 -0400
Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_capture_mul
commit
534326b51f8b6803edd3fcf38d4b69e5c6be82eb
Author: huica <huica@cisco.com>
Date: Tue Aug 2 14:20:11 2016 -0400
supports multi-thread safety for file mempool
commit
9a9097a00e340c734c089cb624e70d2e4eff0614
Author: huica <huica@cisco.com>
Date: Tue Aug 2 13:36:02 2016 -0400
refactor the file capture interfaces
commit
c98a98cf0756d015afeb64b1f2ad7acdd8cdc2eb
Merge:
e15ba25 41fcd73
Author: huica <huica@cisco.com>
Date: Fri Jul 29 09:56:12 2016 -0400
Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_capture_mul
commit
e15ba25ba46fb1a0d8df32a0801e3bf3e76f2899
Merge:
9ff6683 6f0c2cf
Author: huica <huica@cisco.com>
Date: Wed Jul 27 12:53:02 2016 -0400
Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_capture_mul
commit
9ff668388fc3d55fea41ac2c4d3c7bdfd22d7602
Merge:
0e65cdb bc4ea3f
Author: huica <huica@cisco.com>
Date: Fri Jul 22 15:42:15 2016 -0400
Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_capture_mul
commit
0e65cdb292300afe65b4411274083c257eb199e9
Author: huica <huica@cisco.com>
Date: Mon Jul 11 14:16:23 2016 -0400
remove debug
commit
771307d62b66ab16c9682ed38e912abf0d33ce97
Author: huica <huica@cisco.com>
Date: Mon Jul 11 14:05:03 2016 -0400
Store and release file in another thread
commit
41692c3fb38972de52fcbabe148103b4fe54bbde
Merge:
4c4103d 65b2801
Author: huica <huica@cisco.com>
Date: Mon Jul 11 11:52:58 2016 -0400
Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_capture_mul
commit
4c4103dadff3543e29dcebda403e6e868b9d570e
Author: huica <huica@cisco.com>
Date: Fri Jul 8 09:52:56 2016 -0400
store file to disk in different thread
snorty [Thu, 11 Aug 2016 14:30:06 +0000 (10:30 -0400)]
work around autoreconf foolishness
Russ Combs (rucombs) [Thu, 11 Aug 2016 06:37:02 +0000 (02:37 -0400)]
fix extra auto build from dist
Russ Combs [Wed, 10 Aug 2016 22:16:33 +0000 (18:16 -0400)]
build 206
Russ Combs (rucombs) [Wed, 10 Aug 2016 21:04:17 +0000 (17:04 -0400)]
Merge pull request #586 in SNORT/snort3 from ohi3 to master
Squashed commit of the following:
commit
ba4b79cd32a18ee9fbf15680efc55fb52fe77d48
Author: snorty <snorty@localhost.localdomain>
Date: Wed Aug 10 13:16:00 2016 -0400
snort2lua updates: http_inspect -> http_server and new_http_inspect -> http_inspect
Russ Combs (rucombs) [Wed, 10 Aug 2016 18:24:29 +0000 (14:24 -0400)]
Merge pull request #584 in SNORT/snort3 from smtp_auth_overflow to master
Squashed commit of the following:
commit
d0562da0307b36867e78604d8f0065c6b4a5ebb0
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date: Tue Aug 9 13:51:38 2016 -0400
SMTP AUTH overflow alert added
reverting the STARTTLS smtp paf change
reverting the STARTTLS smtp paf change
adding snort2lua change for smtp max_auth_command_line_len option
remove the starttls command processing in SMTP splitter
Russ Combs (rucombs) [Wed, 10 Aug 2016 15:04:59 +0000 (11:04 -0400)]
Merge pull request #585 in SNORT/snort3 from asn1 to master
Squashed commit of the following:
commit
dbdda4825dc3478cb5066504ce599f4dfe9eada9
Author: Russ Combs <rucombs@cisco.com>
Date: Tue Aug 9 13:33:44 2016 -0400
fix asn1:print help
snorty [Wed, 10 Aug 2016 00:01:32 +0000 (20:01 -0400)]
ohi updates for cmake
snorty [Sun, 7 Aug 2016 13:15:56 +0000 (09:15 -0400)]
build NHI options statically by default
snorty [Sat, 6 Aug 2016 14:23:40 +0000 (10:23 -0400)]
move ohi to extra/
snorty [Fri, 5 Aug 2016 21:11:19 +0000 (17:11 -0400)]
add dynamic build support to ohi
snorty [Thu, 4 Aug 2016 19:13:30 +0000 (15:13 -0400)]
fix event queue buffer log size
snorty [Wed, 3 Aug 2016 21:16:21 +0000 (17:16 -0400)]
change ohi to http_server with gids 319-320
Russ Combs (rucombs) [Tue, 9 Aug 2016 20:40:45 +0000 (16:40 -0400)]
Merge pull request #583 in SNORT/snort3 from snort2lua_appid_rule_option to master
Squashed commit of the following:
commit
f2bf7513552b2afbed195612419aa288a10d6979
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date: Fri Aug 5 17:49:54 2016 -0400
implement support for convert appid rule option
free memory allocated for appid names loaded from rules with 'appids' rule option
add ability to modifiy rule option name when converting to snort3 format
Russ Combs (rucombs) [Tue, 9 Aug 2016 12:38:09 +0000 (08:38 -0400)]
Merge pull request #582 in SNORT/snort3 from distcheck to master
Squashed commit of the following:
commit
c07d6e17554017afad54459cd66ee331da278528
Author: Russ Combs <rucombs@cisco.com>
Date: Mon Aug 8 14:31:06 2016 -0400
fix make distcheck
Russ Combs (rucombs) [Fri, 5 Aug 2016 20:22:10 +0000 (16:22 -0400)]
Merge pull request #580 in SNORT/snort3 from appid_ws2_rule_keyword2 to master
Squashed commit of the following:
commit
fad89647036423353ff11e50750149e39e6f8d5b
Author: Steve Chew <stechew@cisco.com>
Date: Wed Aug 3 14:06:23 2016 -0400
Implement Module and IpsOption subclasses for appid rule option.
Add appid support to flow for caching application ids, implement eval function of appid rule option
implement operator== for appid ips option
fix hash & operator== methods to use appid option data correctly, add assert and change parameters to ref on stream api application id methods
fix sort compare to only return true when lhs<rhs, refactor appids option eval function to streamline matching algorithm, make name->id mapping a helper function
move get/set_application_ids methods from Stream to Flow
use AppId type on get/set application ids parameters
Russ Combs [Fri, 5 Aug 2016 12:40:25 +0000 (08:40 -0400)]
build 205
Russ Combs (rucombs) [Thu, 4 Aug 2016 20:13:32 +0000 (16:13 -0400)]
Merge pull request #581 in SNORT/snort3 from ips_options_HAVE_HYPERSCAN to master
Squashed commit of the following:
commit
b7c2b223ae2dce7883dd8d10b1d247d3bf72f227
Author: Victor Roemer <viroemer@cisco.com>
Date: Thu Aug 4 15:49:02 2016 -0400
Missing symbol without hyperscan
Russ Combs (rucombs) [Thu, 4 Aug 2016 17:48:47 +0000 (13:48 -0400)]
Merge pull request #577 in SNORT/snort3 from hyper-sensitive to master
Squashed commit of the following:
commit
45bc7d00bcde706a4df09ec5ba416892a79f7b09
Author: Victor Roemer <viroemer@cisco.com>
Date: Fri Jul 29 00:06:55 2016 -0400
Convert sd_pattern to Hyperscan engine.
Russ Combs (rucombs) [Wed, 3 Aug 2016 20:39:08 +0000 (16:39 -0400)]
Merge pull request #579 in SNORT/snort3 from session_define_swap to master
Squashed commit of the following:
commit
9e14c40db95cd02e8c9754e598be9efb7b7c011f
Author: alewis <albert.l.lewis@gmail.com>
Date: Wed Aug 3 16:33:02 2016 -0400
swapped session defines SESSION_BINARY and SESSION_ALL
commit
b386f018ae5182cdcc6d6b9b26a5b1551ee4dc86
Author: alewis <albert.l.lewis@gmail.com>
Date: Wed Aug 3 16:29:45 2016 -0400
swapped session defines SESSION_BINARY and SESSION_ALL
commit
4c43efaa2532e77be1a21be7e410f912d20226f3
Author: alewis <albert.l.lewis@gmail.com>
Date: Wed Aug 3 16:24:42 2016 -0400
swapped session defines SESSION_BINARY and SESSION_ALL
Russ Combs (rucombs) [Tue, 2 Aug 2016 17:42:47 +0000 (13:42 -0400)]
Merge pull request #573 in SNORT/snort3 from smb_segmentation to master
Squashed commit of the following:
commit
3b5cd0bd44a3a79c0c55dca9a3aee990deb1f3f6
Author: mdagon <mdagon@cisco.com>
Date: Mon Aug 1 13:48:37 2016 -0400
Smb segmentation port
Code review: delete space before **, replace comment with assert
Russ Combs (rucombs) [Tue, 2 Aug 2016 17:31:50 +0000 (13:31 -0400)]
Merge pull request #576 in SNORT/snort3 from ips_options_window to master
Squashed commit of the following:
commit
dabe4fb2cd7e4409a0cdefbd6f872169ef88f126
Author: alewis <albert.l.lewis@gmail.com>
Date: Tue Aug 2 13:11:17 2016 -0400
fixed endian problem with ips option window test
Russ Combs (rucombs) [Tue, 2 Aug 2016 14:11:05 +0000 (10:11 -0400)]
Merge pull request #572 in SNORT/snort3 from ips_options-tcp_seq to master
Squashed commit of the following:
commit
8bef0a2a1dcbbc63491496142b249cbc736a8150
Author: allewi <allewi@cisco.com>
Date: Sat Jul 30 12:32:10 2016 -0400
fixed ips_options tcp sequence number comparison (endian)
commit
212c6aa1336aec06272ee8978c5f45400bb612fa
Author: allewi <allewi@cisco.com>
Date: Sat Jul 30 11:57:28 2016 -0400
fixed ips_options tcp sequence number comparison (endian)
Russ Combs (rucombs) [Tue, 2 Aug 2016 14:05:32 +0000 (10:05 -0400)]
Merge pull request #574 in SNORT/snort3 from documentation_error to master
Squashed commit of the following:
commit
85376a42339fd01d6fcc5ec99a68474006adea7f
Author: allewi <allewi@cisco.com>
Date: Mon Aug 1 12:42:54 2016 -0400
updated documentation for ips_option files
Russ Combs [Fri, 29 Jul 2016 13:14:46 +0000 (09:14 -0400)]
build 204
Russ Combs (rucombs) [Thu, 28 Jul 2016 21:00:46 +0000 (17:00 -0400)]
Merge pull request #571 in SNORT/snort3 from ips_options_update to master
Squashed commit of the following:
commit
84eae81aa133c86913677f6a3e79bd3778912dee
Author: alewis <albert.l.lewis@gmail.com>
Date: Thu Jul 28 16:27:47 2016 -0400
updated ips_options endian problem with icmp_id and icmp_seq rule keywords
commit
e735c60e6161c58b62765b9f7141198fefefa0a4
Author: alewis <albert.l.lewis@gmail.com>
Date: Thu Jul 28 15:49:28 2016 -0400
fixed an ntohs (endian) issue with icmp_seq and icmp_id field matching
commit
46eca1d12a0142e68877c8e4c94b024f6b8795ae
Author: alewis <albert.l.lewis@gmail.com>
Date: Thu Jul 28 12:35:09 2016 -0400
endian fix for ips_options icmp_id field
Russ Combs (rucombs) [Thu, 28 Jul 2016 16:37:13 +0000 (12:37 -0400)]
Merge pull request #569 in SNORT/snort3 from linez to master
Squashed commit of the following:
commit
b15f074d2d03ba332b386eb7571a9bf2afdb4dfe
Author: Russ Combs <rucombs@cisco.com>
Date: Thu Jul 28 12:08:37 2016 -0400
refactor, comments
commit
e877c882772db117208bd60286db5b4a4feb6eb9
Author: Russ Combs <rucombs@cisco.com>
Date: Fri Jul 22 14:33:03 2016 -0400
fix line number in rule parsing errors
no line numbers for lua messages
Russ Combs (rucombs) [Wed, 27 Jul 2016 15:14:10 +0000 (11:14 -0400)]
Merge pull request #568 in SNORT/snort3 from nhttp50 to master
Squashed commit of the following:
commit
d3a67eb2a549d929917a8f4b42ac9c5b4b00c0c8
Author: Tom Peters <thopeter@cisco.com>
Date: Tue Jul 26 16:11:06 2016 -0400
Unbounded POST alert
Russ Combs (rucombs) [Mon, 25 Jul 2016 21:43:37 +0000 (17:43 -0400)]
Merge pull request #567 in SNORT/snort3 from nhttp49 to master
Squashed commit of the following:
commit
854e1772985651c65737046469e4cea33fbcfb54
Author: Tom Peters <thopeter@cisco.com>
Date: Mon Jul 25 16:35:16 2016 -0400
cmake check fix
Russ Combs (rucombs) [Fri, 22 Jul 2016 15:25:30 +0000 (11:25 -0400)]
Merge pull request #566 in SNORT/snort3 from 203 to master
Squashed commit of the following:
commit
f2bbfd30862eda17647f842d31b4d4e595fbd9da
Author: Russ Combs <rucombs@cisco.com>
Date: Fri Jul 22 10:08:22 2016 -0400
bump to build 203, update change log
warn on duplicate ports in list
allow multiple ip_proto and stream_size per rule
Russ Combs (rucombs) [Fri, 22 Jul 2016 14:46:42 +0000 (10:46 -0400)]
Merge pull request #565 in SNORT/snort3 from smb_dead_store to master
Squashed commit of the following:
commit
f896f4d01ef8b25ec2b1822cc2366edca433e2da
Author: mdagon <mdagon@cisco.com>
Date: Fri Jul 22 10:08:06 2016 -0400
Smb static analysis dead store fix
Russ Combs (rucombs) [Thu, 21 Jul 2016 21:13:37 +0000 (17:13 -0400)]
Merge pull request #564 in SNORT/snort3 from nhi_oversize_dir to master
Squashed commit of the following:
commit
9841cd294d4598dea4c74deb6dae545858101733
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date: Tue Jul 19 15:15:15 2016 -0400
adding oversize directory alert to nhi
adding oversize directory alert to nhi
adding oversize directory alert to nhi
Russ Combs (rucombs) [Wed, 20 Jul 2016 11:43:49 +0000 (07:43 -0400)]
Merge pull request #563 in SNORT/snort3 from appid_ws2_plugins_104 to master
Squashed commit of the following:
commit
441baf1b5a602430abf2e23fa893bf9e2b94c0a6
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date: Wed Jul 13 15:43:15 2016 -0400
add stats counters and regression tests for mdns, timbuktu, battlefield, bgp & netbios services
Russ Combs (rucombs) [Tue, 19 Jul 2016 15:39:08 +0000 (11:39 -0400)]
Merge pull request #562 in SNORT/snort3 from smb_writeandclose to master
Squashed commit of the following:
commit
6a473ff7dfce7e44fe6fbd20262f396d8340d8bf
Author: mdagon <mdagon@cisco.com>
Date: Mon Jul 18 13:57:52 2016 -0400
Smb WriteAndClose port
Russ Combs (rucombs) [Fri, 15 Jul 2016 21:03:21 +0000 (17:03 -0400)]
Merge pull request #560 in SNORT/snort3 from smb_dialect to master
Squashed commit of the following:
commit
de5ae8e8737762b7cf24930409dfa6a32693662f
Author: mdagon <mdagon@cisco.com>
Date: Fri Jul 15 15:10:06 2016 -0400
Code reivew: dialect_index should be const
commit
05bd0f3a241e58fd5aae1a6d05c770b927895986
Author: mdagon <mdagon@cisco.com>
Date: Fri Jul 15 12:16:22 2016 -0400
Code review: remove unsed defines for various smb dialects
commit
3fd9da22b3958bc327987c64abab060aa70ee1ab
Author: mdagon <mdagon@cisco.com>
Date: Thu Jul 14 11:44:54 2016 -0400
Smb deprecated dialect check
Russ Combs (rucombs) [Fri, 15 Jul 2016 16:27:23 +0000 (12:27 -0400)]
Merge pull request #561 in SNORT/snort3 from crc_strndup to master
Squashed commit of the following:
commit
0abd29e8ca7bf26bfd4a406e83605541fbb18580
Author: Russ Combs <rucombs@cisco.com>
Date: Fri Jul 15 10:32:21 2016 -0400
convert to snort_strndup
Russ Combs (rucombs) [Fri, 15 Jul 2016 15:46:47 +0000 (11:46 -0400)]
Merge pull request #555 in SNORT/snort3 from smb_fingerprint to master
Squashed commit of the following:
commit
aeb7837a43a60bf561eef02240eb988c22156670
Author: mdagon <mdagon@cisco.com>
Date: Wed Jul 13 08:48:36 2016 -0400
uncrustify dce_common.h
commit
9645a6a01bb929ebcab1b6f0d7d8dbca95777229
Author: mdagon <mdagon@cisco.com>
Date: Tue Jul 12 16:47:14 2016 -0400
Code review: change DEBUG to DEBUG_MSGS
commit
1e2eaa5818028b34789579b2a934b2c8fbff6ef5
Author: mdagon <mdagon@cisco.com>
Date: Tue Jul 12 13:25:55 2016 -0400
smb fingerprint
Russ Combs [Fri, 15 Jul 2016 11:03:52 +0000 (07:03 -0400)]
build 202
Russ Combs (rucombs) [Thu, 14 Jul 2016 19:12:30 +0000 (15:12 -0400)]
Merge pull request #559 in SNORT/snort3 from sflist_cant_fail to master
Squashed commit of the following:
commit
d141b83a304bfe9e8ac28bf9b5e01f89465bb56e
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date: Thu Jul 14 10:49:00 2016 -0400
fix double count of adding node with sflist_add_before
commit
42d5618ae9b876fc14f529ab27e51f5fd46b7b72
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date: Thu Jul 14 07:42:32 2016 -0400
change sflist_* calls that can't fail to void return
remove check of return code for sflist_* functions that cannot fail
Russ Combs (rucombs) [Thu, 14 Jul 2016 16:05:04 +0000 (12:05 -0400)]
Merge pull request #557 in SNORT/snort3 from nhttp48 to master
Squashed commit of the following:
commit
db70bdf6d576cd0a24d3a65b8ae5b96e237eba4e
Author: Tom Peters <thopeter@cisco.com>
Date: Thu Jul 14 11:41:25 2016 -0400
added comments to makefiles
commit
193fc5b925bbf2536ea1499a69c7510940f109ac
Author: Tom Peters <thopeter@cisco.com>
Date: Tue Jul 12 15:10:05 2016 -0400
NHI dynamic build fix
Russ Combs (rucombs) [Thu, 14 Jul 2016 14:34:54 +0000 (10:34 -0400)]
Merge pull request #558 in SNORT/snort3 from crc_dead_store to master
Squashed commit of the following:
commit
ecdab1a9816767ab2ff2ee3fba77ca178de0b284
Author: Russ Combs <rucombs@cisco.com>
Date: Wed Jul 13 18:19:06 2016 -0400
fix static analysis dead store
Russ Combs (rucombs) [Wed, 13 Jul 2016 22:00:23 +0000 (18:00 -0400)]
Merge pull request #556 in SNORT/snort3 from appid_ws2_plugins_103 to master
Squashed commit of the following:
commit
dea995d287e9457ffc1958999f9abe47c27f031b
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date: Tue Jul 5 11:28:45 2016 -0400
enabled kerberos detection plugin
add stats counter for irc service detection plugin
add appid stats for kerberos & lpr detection
replace DEBUG_KERBEROS with DEBUG_MSGS
when parsing client key exchange init payload, mark as success if the first key exchange init packet is good, ignore DH key exchange for now, support will come later
add description of issue on FIXIT for syn/ack seen after ack that completes 3whs
fix compiler warnings on debug messages
Russ Combs (rucombs) [Wed, 13 Jul 2016 21:18:15 +0000 (17:18 -0400)]
Merge pull request #552 in SNORT/snort3 from nhi_snort2lua to master
Squashed commit of the following:
commit
9e3da270b428d201e0cad2eb4f774c813420d692
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date: Mon Jul 11 00:41:52 2016 -0400
snort2lua update for nhi
update to the protocol config option of stream5
snort2lua update for nhi
snort2lua update for nhi
snort2lua update for nhi request and response depths
Russ Combs (rucombs) [Mon, 11 Jul 2016 21:04:26 +0000 (17:04 -0400)]
Merge pull request #553 in SNORT/snort3 from smb_raw to master
Squashed commit of the following:
commit
02cf0a83ae52c9b747ee001d923760ab1f2094ec
Author: mdagon <mdagon@cisco.com>
Date: Fri Jul 8 12:55:45 2016 -0400
Comment update
commit
1e880bb7c34c3abf0c706403147d83141f3f19b6
Author: mdagon <mdagon@cisco.com>
Date: Thu Jul 7 09:50:34 2016 -0400
Smb raw mode, raw commands processing port
Russ Combs (rucombs) [Mon, 11 Jul 2016 12:36:54 +0000 (08:36 -0400)]
Merge pull request #551 in SNORT/snort3 from nhttp47 to master
Squashed commit of the following:
commit
3b1af0f2fb6abc2680f63916e6e6dcba9a355187
Author: Tom Peters <thopeter@cisco.com>
Date: Fri Jun 17 17:22:02 2016 -0400
Properly track transactions that include 100 status code
Hui Cao (huica) [Wed, 6 Jul 2016 18:25:59 +0000 (14:25 -0400)]
Merge pull request #549 in SNORT/snort3 from smb_reassembly to master
Squashed commit of the following:
commit
e7dae9120e13a4d520376c24aa2ec1a1950b34dd
Author: mdagon <mdagon@cisco.com>
Date: Fri Jul 1 03:04:07 2016 -0400
Smb ressaembly
Hui Cao (huica) [Wed, 6 Jul 2016 13:06:02 +0000 (09:06 -0400)]
Merge pull request #550 in SNORT/snort3 from appid_ws2_plugins11 to master
Squashed commit of the following:
commit
7b9befec7e74c17d5d6670b59311df91eb560a80
Author: Steve Chew <stechew@cisco.com>
Date: Tue Jul 5 13:54:01 2016 -0400
Add count of mysql flows.
Hui Cao (huica) [Fri, 1 Jul 2016 15:49:12 +0000 (11:49 -0400)]
Merge pull request #548 in SNORT/snort3 from appid_ws2_plugins_101 to master
Squashed commit of the following:
commit
72cc1d3181ddb17e6ee58fd50c17da7b2bde1971
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date: Tue Jun 28 16:27:10 2016 -0400
enable bit torrent client & service detectors
Added count of SSH clients detected.
fix appid usage of SearchTool match callback position parameter to ignore for ssh clients
bit torrent client pattern check should be don't care on pattern position in the payload
add statistics for bittorrent clients/services, fix imap stats counting
remove old comment, use #def for banner string length
Hui Cao (huica) [Thu, 30 Jun 2016 19:23:54 +0000 (15:23 -0400)]
Merge pull request #547 in SNORT/snort3 from appid_ws2_plugins_100_fix to master
Squashed commit of the following:
commit
b47198c720d7f370c304de4303e3b6597518a066
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date: Mon Jun 20 19:49:16 2016 -0400
enabled code for imap & pop3 detectors
enable tcp/upd pattern plugins
enable clean up of resources allocated for client plugins
keep statistics counters in alphabetical order
fix issue freeing AppId config twice
use actual length of string for memcpy to stats record buffer
remove #ifdef that had disabled code to cleanup resources allocated for service plugins
asan fixes...use delete with new...
asan fixes...chp_req_body_matcher was not freed
asan fixes...disable kerberos until we need it
Hui Cao (huica) [Wed, 29 Jun 2016 18:58:22 +0000 (14:58 -0400)]
Merge pull request #538 in SNORT/snort3 from appid_ws2_plugins_100 to master
Squashed commit of the following:
commit
a8caef2e1c11b9d9cf90ef44dc3c5ebdace88ef9
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date: Mon Jun 20 19:49:16 2016 -0400
enabled code for imap & pop3 detectors
enable clean up of resources allocated for client plugins
keep statistics counters in alphabetical order
use actual length of string for memcpy to stats record buffer
remove #ifdef that had disabled code to cleanup resources allocated for service plugins
asan fixes...use delete with new...
Russ Combs (rucombs) [Fri, 24 Jun 2016 19:12:42 +0000 (15:12 -0400)]
Merge pull request #545 in SNORT/snort3 from crc_tweaks to master
Squashed commit of the following:
commit
d8b3caa746501a51675a359c41c6eff857eee4c7
Author: Russ Combs <rucombs@cisco.com>
Date: Fri Jun 24 07:24:55 2016 -0400
update bugs and dependencies
commit
e600575f738128ec461106f7e22c26522c548192
Author: Russ Combs <rucombs@cisco.com>
Date: Fri Jun 24 07:15:27 2016 -0400
remove unused default visibility from convenience libs
commit
844eb59007429c69e108b249d7e877d98fad3445
Author: Russ Combs <rucombs@cisco.com>
Date: Fri Jun 24 07:01:13 2016 -0400
eliminate SafeMemcpy and friends
commit
1e3479e4263a1d3d014b55b9ae77f75475ede43b
Author: Russ Combs <rucombs@cisco.com>
Date: Thu Jun 23 19:22:11 2016 -0400
remove unused util_math
Russ Combs (rucombs) [Fri, 24 Jun 2016 13:00:52 +0000 (09:00 -0400)]
Merge pull request #543 in SNORT/snort3 from appid_ws2_plugins6 to master
Squashed commit of the following:
commit
1b10f4b032bd73cac3921906eeaf6a04507054a3
Author: Steve Chew <stechew@cisco.com>
Date: Tue Jun 21 10:24:48 2016 -0400
Added appid flow count for SSH.
Russ Combs (rucombs) [Fri, 24 Jun 2016 13:00:24 +0000 (09:00 -0400)]
Merge pull request #539 in SNORT/snort3 from smb_refactor to master
Squashed commit of the following:
commit
b2da22e057dc477df4b8fd3c66a54d36408e0e45
Author: mdagon <mdagon@cisco.com>
Date: Fri Jun 24 08:45:32 2016 -0400
Code review: add parameter name to all function declerations in dce_smb_transaction_utils.h
commit
f2d51500a5741c27032108b467213f2081db51d8
Author: mdagon <mdagon@cisco.com>
Date: Fri Jun 24 08:30:48 2016 -0400
Code review comments
commit
e9833223281fb3772730f4b40ec31280e81c3533
Author: mdagon <mdagon@cisco.com>
Date: Tue Jun 21 14:06:56 2016 -0400
Refactor dce_smb_commands.Move transaction related to a new file.
Russ Combs (rucombs) [Thu, 23 Jun 2016 22:34:36 +0000 (18:34 -0400)]
Merge pull request #544 in SNORT/snort3 from build_fix to master
Squashed commit of the following:
commit
71e677856bfa8576d69e667e5eec5e4cc0898727
Author: Carter Waxman <cwaxman@cisco.com>
Date: Wed Jun 22 13:15:08 2016 -0400
fixed missing include
Russ Combs [Wed, 22 Jun 2016 23:57:54 +0000 (19:57 -0400)]
build 201
Russ Combs (rucombs) [Wed, 22 Jun 2016 14:45:26 +0000 (10:45 -0400)]
Merge pull request #536 in SNORT/snort3 from safec to master
Squashed commit of the following:
commit
13e33f59cb08f444cc53a4acc4ef7101b1b0fcea
Author: Carter Waxman <cwaxman@cisco.com>
Date: Wed Jun 22 10:39:24 2016 -0400
unclobbered appid
commit
599f9ca56339b18df9095a06d2173aad734f510e
Author: Carter Waxman <cwaxman@cisco.com>
Date: Thu Jun 16 10:57:39 2016 -0400
implemented safec functions
added header for substituting safec foo when not present
added cmake foo
added missing header
added missing search lib
fixed safec include
some cmake work
added cmake build foo
added autotools foo
fixed builds where safec isn't present for cmake
reverted clobbered appid changes
fixed clobbered dnet changes
Fixed spaces and warning message in FindSafeC.cmake
fixed clobbered CMakeLists
added fixit for future build updates
reverted unnecessary build foo change
ammended fixit
rearranged configure.ac
Russ Combs (rucombs) [Wed, 22 Jun 2016 14:25:09 +0000 (10:25 -0400)]
Merge pull request #542 in SNORT/snort3 from file_stream to master
Squashed commit of the following:
commit
4593c48983c4b78df58585e1bb9bccfdb9ceb509
Author: huica <huica@cisco.com>
Date: Mon Jun 20 22:50:41 2016 -0400
Add file name support for file daq
Russ Combs (rucombs) [Tue, 21 Jun 2016 23:35:44 +0000 (19:35 -0400)]
Merge pull request #540 in SNORT/snort3 from ha-sc2 to master
Squashed commit of the following:
commit
1f7e88116e4556455eb7c5c732f953a78f39316c
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date: Tue Jun 21 13:55:00 2016 -0400
HA-SC functionality increment. US's: 33603, 39724, 39725
Russ Combs (rucombs) [Tue, 21 Jun 2016 22:51:00 +0000 (18:51 -0400)]
Merge pull request #541 in SNORT/snort3 from sanifix to master
Squashed commit of the following:
commit
7a5a7e8ccb7515535ce37c6659ba22f7d58bf775
Author: Tom Peters <thopeter@cisco.com>
Date: Tue Jun 21 17:17:04 2016 -0400
array boundary fix
Russ Combs (rucombs) [Mon, 20 Jun 2016 23:04:47 +0000 (19:04 -0400)]
Merge pull request #533 in SNORT/snort3 from ~MIALTIZE/snort3:icc to master
Squashed commit of the following:
commit
87abb8ece0c1d4c6df6e48ec009b11d77a8c777f
Author: Michael Altizer <mialtize@cisco.com>
Date: Mon Jun 20 12:45:45 2016 -0400
Clean up some ICC remarks.
commit
5ed9ca766e264bca1fff2435121b1ee172ef160c
Author: Michael Altizer <mialtize@cisco.com>
Date: Sat Jun 18 10:15:12 2016 -0400
cmake: Remove unused FindCHECK.cmake
commit
79eb7287f635f918fdc5845dc37b139220006d6d
Author: Michael Altizer <mialtize@cisco.com>
Date: Sat Jun 18 01:14:48 2016 -0400
unit-tests: Improve Catch behavior with ICC
commit
69b9de9e9ba10f5633c3f4d93fa7e2526b38eb2f
Author: Michael Altizer <mialtize@cisco.com>
Date: Fri Jun 17 20:09:52 2016 -0400
unit-tests: Update Catch to v1.5.6
Russ Combs (rucombs) [Mon, 20 Jun 2016 22:01:52 +0000 (18:01 -0400)]
Merge pull request #535 in SNORT/snort3 from sdf-pegs to master
Squashed commit of the following:
commit
f13df8d70300e1d09d501f41736d73cee2f117bb
Merge:
131823a 9ca3fe1
Author: Victor Roemer <viroemer@cisco.com>
Date: Mon Jun 20 13:46:58 2016 -0400
Merge branch 'master' into sdf-pegs
commit
131823a75e89d2e13afb64b4364e1425a9a2fe07
Merge:
a6c55e8 bd5d03a
Author: Victor Roemer <viroemer@cisco.com>
Date: Fri Jun 17 16:27:53 2016 -0400
Merge branch 'master' into sdf-pegs
commit
a6c55e80d9f82ff5a35d57dbbfce59689d4eb515
Merge:
68f8389 df81d32
Author: Victor Roemer <viroemer@cisco.com>
Date: Wed Jun 15 17:34:16 2016 -0400
Merge branch 'master' into sdf-pegs
commit
68f838922f0da119fa0e08b0bbb5ce920a35ed6f
Merge:
6ce2f1b 35da82b
Author: Victor Roemer <viroemer@cisco.com>
Date: Tue Jun 14 16:39:12 2016 -0400
Merge branch 'master' into sdf-pegs
commit
6ce2f1b6ade46a0e292aa67b70fa000e384f9599
Author: Victor Roemer <viroemer@Mac.local>
Date: Fri Jun 10 14:28:37 2016 -0400
Add perfmon counters for the "sd_pattern" rule opt
Russ Combs (rucombs) [Mon, 20 Jun 2016 22:00:45 +0000 (18:00 -0400)]
Merge pull request #537 in SNORT/snort3 from snort2lua_obfuscate to master
Squashed commit of the following:
commit
507f534052fe3d6bfadc217a2e731bbc679b1698
Author: Victor Roemer <viroemer@cisco.com>
Date: Mon Jun 20 15:12:26 2016 -0400
Convert mask_output to obfuscate_pii in the output config
Russ Combs (rucombs) [Mon, 20 Jun 2016 21:59:52 +0000 (17:59 -0400)]
Merge pull request #530 in SNORT/snort3 from appid_port_crunch_patch to master
Squashed commit of the following:
commit
738bfb8164a14dc4f3d8c5ff82aefd18d693551d
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date: Thu Jun 16 09:16:39 2016 -0400
enable subdir for autotools build
resolve all issues with sfaddr/sf_ip macros not ported from 2.9
add fixit for service validator lookup failures, how can they happen?
miscellaneous fixes for code issue flagged by crunch/analyze
updates from review comments
Russ Combs (rucombs) [Mon, 20 Jun 2016 17:03:46 +0000 (13:03 -0400)]
Merge pull request #534 in SNORT/snort3 from crc_primes to master
Squashed commit of the following:
commit
4284e0e3811618f60ad9833d55a0e89d334787f5
Author: Russ Combs <rucombs@cisco.com>
Date: Mon Jun 20 12:38:46 2016 -0400
fix typos
commit
511f6a943ab208c20df9f115c849d31e332ce108
Author: Russ Combs <rucombs@cisco.com>
Date: Sat Jun 18 18:48:43 2016 -0400
update style guide
commit
b19843eeec56d464cd01266526ace717a86712d1
Author: Russ Combs <rucombs@cisco.com>
Date: Sat Jun 18 10:43:05 2016 -0400
add missing primes, reformat
Russ Combs (rucombs) [Mon, 20 Jun 2016 16:09:55 +0000 (12:09 -0400)]
Merge pull request #526 in SNORT/snort3 from nhi_alert to master
Squashed commit of the following:
commit
94885423c56b802ebce03bb6ae59013a4cf4e4c9
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date: Thu Jun 16 17:01:34 2016 -0400
check if HTTP/ present when loss of sync occurs
commit
559674afe9acbb9004857bf34b4cae39678453ad
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date: Thu Jun 16 16:37:49 2016 -0400
check if HTTP/ present when loss of sync occurs
Russ Combs (rucombs) [Mon, 20 Jun 2016 16:03:07 +0000 (12:03 -0400)]
Merge pull request #528 in SNORT/snort3 from smb_transaction_secondary to master
Squashed commit of the following:
commit
a20ef7cd26f3d9479fc4ec6a0984aa5f8887e270
Author: mdagon <mdagon@cisco.com>
Date: Thu Jun 16 17:02:16 2016 -0400
Smb transact secondary port
Russ Combs [Sat, 18 Jun 2016 13:59:04 +0000 (09:59 -0400)]
Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3
Russ Combs (rucombs) [Fri, 17 Jun 2016 22:46:28 +0000 (18:46 -0400)]
Merge pull request #532 in SNORT/snort3 from appid_ws2_plugins4 to master
Squashed commit of the following:
commit
f4a3688aba9dbf3adf39b0adcd64ea9753260aca
Author: Steve Chew <stechew@cisco.com>
Date: Fri Jun 17 15:49:17 2016 -0400
Added SSL count. Updated count variable names.
Russ Combs (rucombs) [Fri, 17 Jun 2016 19:44:41 +0000 (15:44 -0400)]
Merge pull request #529 in SNORT/snort3 from file_dynamic to master
Squashed commit of the following:
commit
129312ffe89459131eea4e6293a762dbcc6dad7c
Author: huica <huica@cisco.com>
Date: Fri Jun 17 10:30:50 2016 -0400
fix dynamic build
Russ Combs (rucombs) [Fri, 17 Jun 2016 13:09:42 +0000 (09:09 -0400)]
Merge pull request #522 in SNORT/snort3 from file_log to master
Squashed commit of the following:
commit
5ba4f767d3e2eb7f9216f4f7ce88c1223bd6d607
Author: huica <huica@cisco.com>
Date: Thu Jun 16 14:55:29 2016 -0400
address comments
commit
0ec81ee399da560a40aeaf938df79c95dfdebbd7
Author: huica <huica@cisco.com>
Date: Thu Jun 16 10:36:41 2016 -0400
update file policy
commit
e2b85016b1b8ae8f17f8dbd1b6ec529f8241cf16
Merge:
5b25a24 206c522
Author: huica <huica@cisco.com>
Date: Thu Jun 16 09:47:08 2016 -0400
Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_log2
commit
5b25a24608625d227e067d94d9fbc995237555f6
Merge:
a771ddb 92a8b16
Author: huica <huica@cisco.com>
Date: Wed Jun 15 09:29:55 2016 -0400
Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_log2
commit
a771ddb5968eb538e4e28759310b6bb7df824f48
Merge:
80058fa 35da82b
Author: huica <huica@cisco.com>
Date: Tue Jun 14 16:52:27 2016 -0400
Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_log2
commit
80058fa7cbbd66911f957b3cb23a18bec46d1548
Author: huica <huica@cisco.com>
Date: Tue Jun 14 15:58:16 2016 -0400
Add configuration
commit
d85227b16550d12aab98ed5b343843b121ad416b
Author: huica <huica@cisco.com>
Date: Mon Jun 13 15:57:59 2016 -0400
File log update
commit
1a814332a17fa321eff700c685b0e29509157cdb
Merge:
80dbbf1 f62ebed
Author: huica <huica@cisco.com>
Date: Mon Jun 13 12:56:07 2016 -0400
Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_log2
commit
80dbbf12aec43887b6a641c9c7883b4dea6a65e5
Author: huica <huica@cisco.com>
Date: Wed Jun 8 16:48:15 2016 -0400
add more logs
commit
1fc92f763861b71f099ac143d13cd50643c3dd65
Author: huica <huica@cisco.com>
Date: Wed Jun 8 16:27:16 2016 -0400
file log support
Russ Combs (rucombs) [Fri, 17 Jun 2016 12:31:50 +0000 (08:31 -0400)]
Merge pull request #523 in SNORT/snort3 from appid_dyn_build_patch to master
Squashed commit of the following:
commit
de8565b5deeb46f4c479daa500d9d62f7db96f30
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date: Thu Jun 16 09:16:39 2016 -0400
add FIXIT to note that appid stats management needs improvement
fix issues with build appid as static and dynamic inspector
add support for shared lib build of appid
make symbols SO_PUBLIC that are referenced from appid shared lib
Russ Combs (rucombs) [Fri, 17 Jun 2016 00:27:07 +0000 (20:27 -0400)]
Merge pull request #525 in SNORT/snort3 from ~MIALTIZE/snort3:for-russ-trivial to master
Squashed commit of the following:
commit
d524062497f08573b6c35fe9ffb7971af31a8478
Author: Michael Altizer <mialtize@cisco.com>
Date: Thu Jun 16 20:03:00 2016 -0400
cmake: Let SFBPF be found in the system library paths