]> git.ipfire.org Git - thirdparty/snort3.git/log
thirdparty/snort3.git
8 years agoMerge pull request #613 in SNORT/snort3 from appid_client_smtp5 to master
Shawn Turner (shaturne) [Wed, 7 Sep 2016 17:13:21 +0000 (13:13 -0400)] 
Merge pull request #613 in SNORT/snort3 from appid_client_smtp5 to master

Squashed commit of the following:

commit 244930cb9245e978861f61ee0387c726fc1974e5
Author: Steve Chew <stechew@cisco.com>
Date:   Tue Sep 6 11:50:55 2016 -0400

    Added smtp client counters and unit tests.

8 years agoMerge pull request #609 in SNORT/snort3 from smbv2 to master
Michael Altizer (mialtize) [Wed, 7 Sep 2016 17:02:57 +0000 (13:02 -0400)] 
Merge pull request #609 in SNORT/snort3 from smbv2 to master

Squashed commit of the following:

commit a35102052f7c311bf47ac68f74fad952c3f79121
Author: mdagon <mdagon@cisco.com>
Date:   Tue Aug 30 14:37:28 2016 -0400

    Smbv2

8 years agoMerge pull request #612 in SNORT/snort3 from ftp_print_remove to master
Michael Altizer (mialtize) [Fri, 2 Sep 2016 21:01:23 +0000 (17:01 -0400)] 
Merge pull request #612 in SNORT/snort3 from ftp_print_remove to master

Squashed commit of the following:

commit 07e889b0cc3417a2d6a4033cd2617e28a6136c91
Author: Tom Peters <thopeter@cisco.com>
Date:   Fri Sep 2 11:27:59 2016 -0400

    Commented out code related to ftp_config::show()

8 years agoMerge pull request #611 in SNORT/snort3 from ~MIALTIZE/snort3:warnings to master
Michael Altizer (mialtize) [Fri, 2 Sep 2016 18:20:34 +0000 (14:20 -0400)] 
Merge pull request #611 in SNORT/snort3 from ~MIALTIZE/snort3:warnings to master

Squashed commit of the following:

commit 155ad1dfe538abfa6b51a644926c018d40740d33
Author: Michael Altizer <mialtize@cisco.com>
Date:   Fri Sep 2 10:50:45 2016 -0400

    Clean up compiler warnings.

8 years agoMerge pull request #608 in SNORT/snort3 from mpls_encode to master
Shawn Turner (shaturne) [Fri, 2 Sep 2016 18:03:28 +0000 (14:03 -0400)] 
Merge pull request #608 in SNORT/snort3 from mpls_encode to master

Squashed commit of the following:

commit 42ccbfaa13ee35556dfde13671aebb74b99ac014
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date:   Tue Aug 30 01:13:12 2016 -0400

    porting mpls encode changes from 2.x

8 years agobuild 207
Russ Combs [Fri, 2 Sep 2016 15:11:32 +0000 (11:11 -0400)] 
build 207

8 years agoMerge pull request #607 in SNORT/snort3 from ha-binder to master
Russ Combs (rucombs) [Thu, 1 Sep 2016 17:37:40 +0000 (13:37 -0400)] 
Merge pull request #607 in SNORT/snort3 from ha-binder to master

Squashed commit of the following:

commit 34a3a1b3cdadf388af53e94c6e12bcc95660d257
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Wed Aug 24 19:57:54 2016 -0400

    Changes to binder.cc for HA

    Add Binder::eval(Flow*) to initialize Flow's created via received HA messages.

    Fix a failing UT and eliminate build warnings.

    Add the missing cmake binder UT support..

    Removed the Binder::eval(Flow*) and replaced by overloading the Binder::exec() method.

    Create binder.h to house a new enum for the Binder::exec() options.

    Refactor the exec() method into three functions,

8 years agoMerge pull request #606 in SNORT/snort3 from appid_session_refactor to master
Russ Combs (rucombs) [Wed, 31 Aug 2016 19:19:36 +0000 (15:19 -0400)] 
Merge pull request #606 in SNORT/snort3 from appid_session_refactor to master

Squashed commit of the following:

commit 6569f68ab27d55e78022d9064a573e89037cdde2
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date:   Tue Aug 30 18:18:12 2016 -0400

    remove extra func ptrs in ServiceApi instance

commit b9e6eff6d24b74bf75388a1f0dcc5ead5e696024
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date:   Tue Aug 30 17:55:34 2016 -0400

    fix compile warnings for unused function parameters, dump config options in debug mode

commit 7ca20ec40cada6e9a980e4b6130c7931006eb7c6
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date:   Tue Aug 9 09:56:51 2016 -0400

    minor source formatting nits

    fixes for memory management bugs in lua detectors

    don't fatal error is lua package server init function is missing

    fix stack buffer overflow due to invalid conversion of ip address string

    fixes for memory leaks in appid lua detector management

    more memory leak fixes

    disable assert for now on lua detectors with no init

    use sfip_t for ip addr variables

    remove assert that checks for memory allocation that can never fail

    disable assert for now on lua detectors with no init

    remove assert that checks for memory allocation that can never fail

    review/fix/catergorize FIXITs

    add allocated DetectorFlow object to the allocatedFlowList when created in Detector_getFlow

    add count for total lua detectors, remove bogus log statement

    add () around logic expression in if statement

    refactoring app id into reasonable classes...

    first step toward creating proper appid session object

    remove deprecated refs to streamAPI

    cleaning up FIXITs, make some const params const

    rename util directory to appid_utils

    delete references to deprecated #def's

    allocate tmp session object with new

    updates from code review comments

    fix compile errors in unit test due to AppIdSession rename

    match up snort_calloc with snort_free for memory allocated for port exclusion lists

    code review updates, unused code commented out, function names changed to fit coding style, future sessions create no longer requires session

    fix compile warnings for unused function parameters, dump config options in debug mode

8 years agoMerge pull request #604 in SNORT/snort3 from nhttp53 to master
Tom Peters (thopeter) [Fri, 26 Aug 2016 18:54:50 +0000 (14:54 -0400)] 
Merge pull request #604 in SNORT/snort3 from nhttp53 to master

Squashed commit of the following:

commit acd74c3b9944b52d1cb1264b32a1f3de2a8d6b83
Author: Tom Peters <thopeter@cisco.com>
Date:   Mon Aug 22 17:39:50 2016 -0400

    NHI becomes OHI part 2

8 years agoMerge pull request #605 in SNORT/snort3 from file to master
Tom Peters (thopeter) [Fri, 26 Aug 2016 15:29:20 +0000 (11:29 -0400)] 
Merge pull request #605 in SNORT/snort3 from file to master

Squashed commit of the following:

commit 221b3697a6b686189041442fc22e002e5482870f
Author: huica <huica@cisco.com>
Date:   Fri Aug 26 10:52:57 2016 -0400

    Update dev notes

8 years agoMerge pull request #603 in SNORT/snort3 from appid_rsync1 to master
Tom Peters (thopeter) [Thu, 25 Aug 2016 16:52:05 +0000 (12:52 -0400)] 
Merge pull request #603 in SNORT/snort3 from appid_rsync1 to master

Squashed commit of the following:

commit d9f8bd1751d2deb3e9682a648b0b22c7bfb6c583
Merge: 011b8de 1c9b2e3
Author: Steve Chew <stechew@cisco.com>
Date:   Wed Aug 24 12:34:30 2016 -0400

    Merge branch 'appid_rsync1' of ssh://bitbucket-eng-rtp1.cisco.com:7999/snort/snort3 into appid_rsync1

commit 011b8de0c61fea1413025d9b8a74c0c9ad823fb3
Author: Steve Chew <stechew@cisco.com>
Date:   Wed Aug 24 12:22:31 2016 -0400

    Fixed Cmake test build.

commit e25092d29345716ea5ce491232ee79251ea1727e
Author: Steve Chew <stechew@cisco.com>
Date:   Tue Aug 23 09:50:02 2016 -0400

    include service_rsync.cc file in tests so we can access private data.

commit 2703075fd0440ceb71c01be91d2ea3a28ba0f0fe
Author: Steve Chew <stechew@cisco.com>
Date:   Fri Aug 19 16:36:50 2016 -0400

    Added rsync flow counter and rsync_validate unit tests.

commit 1c9b2e3b28f68a488e264b26ea10f5fe23e5073b
Author: Steve Chew <stechew@cisco.com>
Date:   Tue Aug 23 09:50:02 2016 -0400

    include service_rsync.cc file in tests so we can access private data.

commit 0257acc0f2432d05684f28c4f3efc9b721a84eb2
Author: Steve Chew <stechew@cisco.com>
Date:   Fri Aug 19 16:36:50 2016 -0400

    Added rsync flow counter and rsync_validate unit tests.

8 years agoMerge pull request #601 in SNORT/snort3 from appid_lua_modules to master
Tom Peters (thopeter) [Tue, 23 Aug 2016 21:18:44 +0000 (17:18 -0400)] 
Merge pull request #601 in SNORT/snort3 from appid_lua_modules to master

Squashed commit of the following:

commit 60777e8a0b9fd95648ef1c13d6691515dd19c271
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date:   Tue Aug 9 09:56:51 2016 -0400

    minor source formatting nits

    fixes for memory management bugs in lua detectors

    don't fatal error is lua package server init function is missing

    fix stack buffer overflow due to invalid conversion of ip address string

    fixes for memory leaks in appid lua detector management

    more memory leak fixes

    disable assert for now on lua detectors with no init

    use sfip_t for ip addr variables

    remove assert that checks for memory allocation that can never fail

    disable assert for now on lua detectors with no init

    remove assert that checks for memory allocation that can never fail

    review/fix/catergorize FIXITs

    add allocated DetectorFlow object to the allocatedFlowList when created in Detector_getFlow

    add count for total lua detectors, remove bogus log statement

    add () around logic expression in if statement

    fix formatting issues from code review comments

8 years agoMerge pull request #578 in SNORT/snort3 from ha-sc-tcp to master
Tom Peters (thopeter) [Tue, 23 Aug 2016 17:31:17 +0000 (13:31 -0400)] 
Merge pull request #578 in SNORT/snort3 from ha-sc-tcp to master

Squashed commit of the following:

commit 0652444c0ea2a17935c5d82cc2d934e73f19d742
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Fri Aug 19 07:08:28 2016 -0400

    Removed reference to POLLRDHUP.

commit fb39de92698a0162923315b7d314504b64c672fa
Merge: 6bca045 6255c61
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Fri Aug 19 06:49:14 2016 -0400

    Merge branch 'ha-sc-tcp' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3 into ha-sc-tcp

commit 6bca045aa2aa55a184bc8f77efeb81ec61f6c402
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Tue Aug 16 19:38:02 2016 -0400

    Update target code and UT's to disable receive thread for testing.

commit 248c51ed08280b21dcca61212747f99195633c63
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Mon Aug 15 16:15:17 2016 -0400

    UT update.

commit 56bdab304cbf99e5a56337da853f8c50406e54ed
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Mon Aug 15 15:46:29 2016 -0400

    Updates from code review.

commit 62b2ab8387c8b395bc2a72cab386070c5a6f9620
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Thu Aug 11 16:41:00 2016 -0400

    Disable memory leak detection in CppUtest as it sometimes indicates a false positive under ASAN.

commit 6b7dcac104018dd4643ddde1b1c66cf32a6e573b
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Thu Aug 11 15:29:19 2016 -0400

    Additional tcp_connector UT's

commit 9e0c8e9017ab8527d620faf3488215b8cca7c3d9
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Thu Aug 11 08:12:48 2016 -0400

    Restore some mods that were reverted, but shouldn't have been..

commit ad105545bda657e12b6df3af98a6317b45439730
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Wed Aug 10 07:34:26 2016 -0400

    Revert "Additional UT's.  Fix one memory leak scenario in tcp_connector.cc"

    This reverts commit e590395e2e5e12dc024d860285056ad31ad7c3c8.

commit 56e5c6fa3463a886a312860c0374e7750ec4990a
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Wed Aug 10 07:34:02 2016 -0400

    Revert "Fix an ASAN finding in UT."

    This reverts commit bc8b83c44f9307eba521bb4694d078f88cf9e50e.

commit 373986e3ecae80345d52780344766473e2a190ce
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Wed Aug 10 07:19:16 2016 -0400

    Fix an ASAN finding in UT.

commit 03d7bd67e852c2dda9748651f8cf564af085289c
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Wed Aug 10 06:46:45 2016 -0400

    Additional UT's.  Fix one memory leak scenario in tcp_connector.cc

commit 68f3435ba9025bc210a008c424d379925df6584a
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Fri Aug 5 16:18:29 2016 -0400

    Additional UT's

commit beb32f995e766ff640beb7f47d40c0eef0375398
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Thu Aug 4 14:49:19 2016 -0400

    Changed from ConcurrentQueue<> to Ring<> for the TcpConnector receiver.

commit ca343728fb6f86eeddfb140466bf51054a549cb5
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Thu Aug 4 07:06:31 2016 -0400

    Fix error in cmake build.

commit 423f603c0418d845320dfffc9f046ac51fa3a3e6
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Wed Aug 3 17:10:47 2016 -0400

    Remove a few remnants of legacy code.

commit 549c4568e04078259a31e73a5f2deaff532730ac
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Wed Aug 3 17:05:56 2016 -0400

    Fix a printf format warning ieeue.

commit c0649eab8e858a1f8a52650e6d1060671207a016
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Tue Aug 2 14:56:37 2016 -0400

    Fix memory leak with thread object.

commit fdf2577b7efd40c0796d3758b6e7bad1f39c36d4
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Tue Aug 2 12:04:04 2016 -0400

    Fix a thread shutdown issue.

commit 34b29a0fb66b3802ace70bfa218ab32e7b9a9b34
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Tue Jul 5 10:00:42 2016 -0400

    tcp_connector.

    Updates for TCP HA.  Fixes for functional tests. Refactoring for work on tcp_connector.

    Memory leak fix.

    Updates for TCP HA.  Fixes for functional tests. Refactoring for work on tcp_connector.

    tcp_connector

commit 2fb93265418a749fe284d4820a7a3f6e91fcc746
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Tue Jul 5 10:00:42 2016 -0400

    Updates for TCP HA.  Fixes for functional tests. Refactoring for work on tcp_connector.

    Memory leak fix.

commit 6085ac02479156030c8d7921e8a2d00b4f642790
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Tue Jul 5 10:00:42 2016 -0400

    Updates for TCP HA.  Fixes for functional tests. Refactoring for work on tcp_connector.

commit 6255c610cad1dc554bf36a47711f6ab47e393b6c
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Tue Aug 16 19:38:02 2016 -0400

    Update target code and UT's to disable receive thread for testing.

commit 876493c83b38442ed91346bb2ebb46611a727844
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Mon Aug 15 16:15:17 2016 -0400

    UT update.

commit 0c7025514146f4d6ece7da1dc94c02da6a50190d
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Mon Aug 15 15:46:29 2016 -0400

    Updates from code review.

commit b4359b6dc39498241faebcd586b5783f90c9b6c3
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Thu Aug 11 16:41:00 2016 -0400

    Disable memory leak detection in CppUtest as it sometimes indicates a false positive under ASAN.

commit dd2b2b4971766d4779d28aefba1403f627f37fb7
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Thu Aug 11 15:29:19 2016 -0400

    Additional tcp_connector UT's

commit 2c13c0c3ab1bc369cea2e5632f0d1dd42bf49f79
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Thu Aug 11 08:12:48 2016 -0400

    Restore some mods that were reverted, but shouldn't have been..

commit 92b440ff76eddc35352e87f341275671c81ddccf
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Wed Aug 10 07:34:26 2016 -0400

    Revert "Additional UT's.  Fix one memory leak scenario in tcp_connector.cc"

    This reverts commit e590395e2e5e12dc024d860285056ad31ad7c3c8.

commit 919da30a29b855159be36967e7aa88ec2c24d997
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Wed Aug 10 07:34:02 2016 -0400

    Revert "Fix an ASAN finding in UT."

    This reverts commit bc8b83c44f9307eba521bb4694d078f88cf9e50e.

commit bc8b83c44f9307eba521bb4694d078f88cf9e50e
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Wed Aug 10 07:19:16 2016 -0400

    Fix an ASAN finding in UT.

commit e590395e2e5e12dc024d860285056ad31ad7c3c8
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Wed Aug 10 06:46:45 2016 -0400

    Additional UT's.  Fix one memory leak scenario in tcp_connector.cc

commit 1c8e424562402734dc7fa6a28ccdaece6f1c587a
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Fri Aug 5 16:18:29 2016 -0400

    Additional UT's

commit 8bd056e9a0890b63a3c4cfc0922259970235c186
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Thu Aug 4 14:49:19 2016 -0400

    Changed from ConcurrentQueue<> to Ring<> for the TcpConnector receiver.

commit 14788fdb755badf13bc2f7334ce2643b7e1b19ae
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Thu Aug 4 07:06:31 2016 -0400

    Fix error in cmake build.

commit e811e6f268a6a9c6538ed9cc29ca3f960c6c11d2
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Wed Aug 3 17:10:47 2016 -0400

    Remove a few remnants of legacy code.

commit 46e335cacad11e6a96c8e3ec93eb356735b565d3
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Wed Aug 3 17:05:56 2016 -0400

    Fix a printf format warning ieeue.

commit 0a7c43c4cfe06ae042c8399208bea915fb274096
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Tue Aug 2 14:56:37 2016 -0400

    Fix memory leak with thread object.

commit 71899da94897aff8c25ed49567d0542842178ee7
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Tue Aug 2 12:04:04 2016 -0400

    Fix a thread shutdown issue.

commit 56cc2f720c4e77fbb42d9be00c9ccaa7bd118b0a
Merge: 571bc99 4d80af3
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Tue Aug 2 08:58:47 2016 -0400

    Merge branch 'ha-sc-tcp' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3 into ha-sc-tcp

commit 571bc99914d0fa3002990a2f58820f6c3f05950f
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Tue Jul 5 10:00:42 2016 -0400

    tcp_connector.

    Updates for TCP HA.  Fixes for functional tests. Refactoring for work on tcp_connector.

    Memory leak fix.

    Updates for TCP HA.  Fixes for functional tests. Refactoring for work on tcp_connector.

    tcp_connector

commit 4d80af36f33a30360a5e0ea506feb5e30e61ea8b
Merge: f61f12c 0f6c19d
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Thu Jul 7 07:35:38 2016 -0400

    Merge branch 'ha-sc-tcp' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3 into ha-sc-tcp

commit f61f12c51c806dc9097ccf4b1afb831a51e6792c
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Tue Jul 5 10:00:42 2016 -0400

    Updates for TCP HA.  Fixes for functional tests. Refactoring for work on tcp_connector.

    Memory leak fix.

commit 0f6c19d80d40de163c4a5c8460c140db836df386
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Tue Jul 5 10:00:42 2016 -0400

    Updates for TCP HA.  Fixes for functional tests. Refactoring for work on tcp_connector.

8 years agoMerge pull request #602 in SNORT/snort3 from ips_fragbits_edit to master
Tom Peters (thopeter) [Tue, 23 Aug 2016 14:45:21 +0000 (10:45 -0400)] 
Merge pull request #602 in SNORT/snort3 from ips_fragbits_edit to master

Squashed commit of the following:

commit 9571d405e2dc4b54d2cd97e1106a2cf13f33d591
Author: alewis <albert.l.lewis@gmail.com>
Date:   Mon Aug 22 21:19:52 2016 -0400

    removed has_*_mode() functions as the logic was changed from if/else ladder to use a switch statement

8 years agoMerge pull request #600 in SNORT/snort3 from nhttp52 to master
Tom Peters (thopeter) [Mon, 22 Aug 2016 21:28:26 +0000 (17:28 -0400)] 
Merge pull request #600 in SNORT/snort3 from nhttp52 to master

Squashed commit of the following:

commit af9dc1d130087276d06e6a0083ba1e23ec3a75c7
Author: Tom Peters <thopeter@cisco.com>
Date:   Fri Aug 19 12:57:57 2016 -0400

    Conversion from NHI to HI

8 years agoMerge pull request #599 in SNORT/snort3 from ips_fragbits to master
Tom Peters (thopeter) [Mon, 22 Aug 2016 20:58:27 +0000 (16:58 -0400)] 
Merge pull request #599 in SNORT/snort3 from ips_fragbits to master

Squashed commit of the following:

commit 60190f6f0526808c8179610ce66e8e81e29cd796
Author: alewis <albert.l.lewis@gmail.com>
Date:   Sat Aug 20 16:38:21 2016 -0400

    removed empty line

commit debb157e5077fb43acd1e7b17b5c4aa7c0bee825
Author: alewis <albert.l.lewis@gmail.com>
Date:   Sat Aug 20 16:30:43 2016 -0400

    updated file added enums and replace if/else ladder

commit 9dd73493258e9687bcd10ce09bd492cc3483e966
Author: alewis <albert.l.lewis@gmail.com>
Date:   Sat Aug 20 12:33:37 2016 -0400

    changed const values to enum

commit e1f477039b0d934e629654f2dc7b8bd99511e91e
Author: alewis <albert.l.lewis@gmail.com>
Date:   Fri Aug 19 11:19:22 2016 -0400

    updated ips_fragbits

8 years agoMerge pull request #598 in SNORT/snort3 from nhttp51 to master
Tom Peters (thopeter) [Fri, 19 Aug 2016 18:46:57 +0000 (14:46 -0400)] 
Merge pull request #598 in SNORT/snort3 from nhttp51 to master

Squashed commit of the following:

commit bf01ba0dba8b94d874cd2cb8036efde9a51646f0
Author: Tom Peters <thopeter@cisco.com>
Date:   Thu Aug 11 15:25:53 2016 -0400

    NHI alerts for Transfer-Encoding and Content-Encoding abuse.

8 years agoMerge pull request #596 in SNORT/snort3 from ciscometadata to master
Tom Peters (thopeter) [Wed, 17 Aug 2016 21:51:49 +0000 (17:51 -0400)] 
Merge pull request #596 in SNORT/snort3 from ciscometadata to master

Squashed commit of the following:

commit 4133a11225fb77f59c0dba3ffb854dfeea012160
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date:   Tue Aug 16 03:09:55 2016 -0400

    Porting the ciscometadata codec

    Porting the ciscometadata codec

    Porting the ciscometadata codec

    Porting the ciscometadata codec

    updating per review comments

8 years agoMerge pull request #597 in SNORT/snort3 from double_vlan to master
Russ Combs (rucombs) [Wed, 17 Aug 2016 18:38:41 +0000 (14:38 -0400)] 
Merge pull request #597 in SNORT/snort3 from double_vlan to master

Squashed commit of the following:

commit 9801a96ba004a74c0424d7eece759f9a4c217d62
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date:   Wed Aug 17 13:29:44 2016 -0400

    Porting the Double and triple vlan tagging changes

9 years agoMerge pull request #595 in SNORT/snort3 from regex_fp_fix to master
Russ Combs (rucombs) [Tue, 16 Aug 2016 18:18:40 +0000 (14:18 -0400)] 
Merge pull request #595 in SNORT/snort3 from regex_fp_fix to master

Squashed commit of the following:

commit 4084e9329da46be546e2d8b2b0fa924d3626663f
Author: Russ Combs <rucombs@cisco.com>
Date:   Mon Aug 15 21:36:32 2016 -0400

    fix regex as fast pattern with hyperscan mpse

9 years agoMerge pull request #593 in SNORT/snort3 from ips_rpc_warnings to master
Russ Combs (rucombs) [Mon, 15 Aug 2016 17:47:23 +0000 (13:47 -0400)] 
Merge pull request #593 in SNORT/snort3 from ips_rpc_warnings to master

Squashed commit of the following:

commit 7e46c2d9a52823a017f494a6faacc65cf968bc85
Author: alewis <albert.l.lewis@gmail.com>
Date:   Mon Aug 15 13:41:33 2016 -0400

    changed increment to packet_data +=4

commit 1a6c5588f578fca01ea8952688eca3f7b7d5fb3f
Author: alewis <albert.l.lewis@gmail.com>
Date:   Mon Aug 15 12:54:55 2016 -0400

    cleaned up blank spaces

commit a518988789186fb6af679bfd727f9e1951b67fa9
Author: alewis <albert.l.lewis@gmail.com>
Date:   Mon Aug 15 12:20:13 2016 -0400

    changes to fix variable warnings

9 years agoMerge pull request #591 in SNORT/snort3 from crc_vg to master
Russ Combs (rucombs) [Mon, 15 Aug 2016 16:02:27 +0000 (12:02 -0400)] 
Merge pull request #591 in SNORT/snort3 from crc_vg to master

Squashed commit of the following:

commit a8b860993764c3a950497673c2c9d6912a0deaa1
Author: snorty <snorty@ful1030-pod.cisco.com>
Date:   Sat Aug 13 22:24:04 2016 -0400

    fix nhi and tcp valgrind errors

9 years agoMerge pull request #592 in SNORT/snort3 from app_str to master
Russ Combs (rucombs) [Mon, 15 Aug 2016 15:13:40 +0000 (11:13 -0400)] 
Merge pull request #592 in SNORT/snort3 from app_str to master

Squashed commit of the following:

commit 5a81c23e62b9ded08e5a36f4083b2b93136ffb1e
Author: Russ Combs <rucombs@cisco.com>
Date:   Mon Aug 15 09:51:29 2016 -0400

    convert to snort_strndup for proper tracking

9 years agoMerge pull request #589 in SNORT/snort3 from rpc_idx_remove to master
Russ Combs (rucombs) [Mon, 15 Aug 2016 13:37:59 +0000 (09:37 -0400)] 
Merge pull request #589 in SNORT/snort3 from rpc_idx_remove to master

Squashed commit of the following:

commit b0095fe60bce432b89b25b1229c698e8b37b9fce
Author: allewi <allewi@cisco.com>
Date:   Sun Aug 14 20:32:58 2016 -0400

    updated ips_rpc.cc file

commit da1c1aac584187eb9dd263652a77ff007035ad0d
Author: allewi <allewi@cisco.com>
Date:   Sun Aug 14 20:30:37 2016 -0400

    updated ips_rpc.cc file

commit 4e7eaad1af0923551c94c5eb893beb91c7781f17
Author: allewi <allewi@cisco.com>
Date:   Sun Aug 14 20:25:43 2016 -0400

    updated ips_rpc.cc file

9 years agoMerge pull request #588 in SNORT/snort3 from smb_file_processing to master
Russ Combs (rucombs) [Sun, 14 Aug 2016 14:10:29 +0000 (10:10 -0400)] 
Merge pull request #588 in SNORT/snort3 from smb_file_processing to master

Squashed commit of the following:

commit cae9cd6edd4e28eedfe6bd9d1820917a377b2ae5
Author: mdagon <mdagon@cisco.com>
Date:   Fri Aug 12 16:50:45 2016 -0400

    Code review: delete extra space

commit 2050aa70614c6494d0492f302096217d53163384
Author: mdagon <mdagon@cisco.com>
Date:   Fri Aug 12 13:47:50 2016 -0400

    Smb file processing

9 years agoMerge pull request #590 in SNORT/snort3 from zero_field_fix to master
Russ Combs (rucombs) [Fri, 12 Aug 2016 21:46:31 +0000 (17:46 -0400)] 
Merge pull request #590 in SNORT/snort3 from zero_field_fix to master

Squashed commit of the following:

commit 12bded36668b680fc9ba582eb56d99316c28c22e
Author: Tom Peters <thopeter@cisco.com>
Date:   Fri Aug 12 16:25:12 2016 -0400

    fix for grind error use of uninitialized pointer

9 years agoMerge pull request #575 in SNORT/snort3 from utf_decoding to master
Russ Combs (rucombs) [Fri, 12 Aug 2016 20:12:11 +0000 (16:12 -0400)] 
Merge pull request #575 in SNORT/snort3 from utf_decoding to master

Squashed commit of the following:

commit f6b070405bd84b69aa52df672b7d3b69c484adff
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date:   Thu Aug 11 12:05:58 2016 -0400

    resolving conflicts

    resolving conflicts

    resolving conflicts

    Updating utf decoding per review comments

    resolving conflicts

    resolving conflicts

    resolving conflicts

    Updating utf decoding per review comments

    resolving conflicts

    resolving conflicts

    reverting changes to a norm function in nhi

9 years agoMerge pull request #587 in SNORT/snort3 from sdf-fast-pattern to master
Russ Combs (rucombs) [Fri, 12 Aug 2016 16:42:15 +0000 (12:42 -0400)] 
Merge pull request #587 in SNORT/snort3 from sdf-fast-pattern to master

Squashed commit of the following:

commit 088923ac93ac7890a2e3ff28f6e908d0bfc27093
Author: Victor Roemer <viroemer@cisco.com>
Date:   Fri Aug 12 12:21:58 2016 -0400

    Remove FIXIT

commit bad192fd5d6ead40dc3c111cc2cf2f4a08dfa9d9
Author: Victor Roemer <viroemer@cisco.com>
Date:   Thu Aug 4 15:50:20 2016 -0400

    sd_pattern as a fast-pattern.

9 years agoMerge pull request #554 in SNORT/snort3 from file_capture_mul to master
Russ Combs (rucombs) [Thu, 11 Aug 2016 19:44:13 +0000 (15:44 -0400)] 
Merge pull request #554 in SNORT/snort3 from file_capture_mul to master

Squashed commit of the following:

commit efc9408cd944f1f9c570f4335950fdd52bdaaf21
Author: huica <huica@cisco.com>
Date:   Thu Aug 11 11:52:59 2016 -0400

    remove additional header file

commit c00c3ff16c1fbd3ad9d1025655998e552646f047
Author: huica <huica@cisco.com>
Date:   Thu Aug 11 10:20:26 2016 -0400

    uncrusify

commit 109afa308a619beb3c9273db8a59ce59c1971fba
Merge: 33dd61d 6481ee3
Author: huica <huica@cisco.com>
Date:   Thu Aug 11 08:58:48 2016 -0400

    Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_capture_mul

commit 33dd61d83dc2249cd223d2ccd2c08ce0139ffe6f
Author: huica <huica@cisco.com>
Date:   Wed Aug 10 17:28:22 2016 -0400

    mempool class

commit acbf8857f6f4d88afe9e7eed5e9ebdba751a5bae
Author: huica <huica@cisco.com>
Date:   Wed Aug 10 16:21:35 2016 -0400

    update devnotes

commit a5c98d6b7b894cc62ec01035ba858a735ef666c4
Merge: 5503866 a6b74b3
Author: huica <huica@cisco.com>
Date:   Wed Aug 10 15:17:29 2016 -0400

    Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_capture_mul

commit 5503866788ad2ee6ddc7bd0b8a46f5c9aa00f0b9
Author: huica <huica@cisco.com>
Date:   Wed Aug 10 15:17:08 2016 -0400

    address comments

commit b375a13a0614f949f559cbb223ce788aae115022
Merge: 151ed4f 867b9c6
Author: huica <huica@cisco.com>
Date:   Wed Aug 10 10:29:34 2016 -0400

    Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_capture_mul

commit 151ed4f94c19867770f238c2c4176e8fbe5f3e52
Merge: 7630daa f67d217
Author: huica <huica@cisco.com>
Date:   Tue Aug 9 10:21:15 2016 -0400

    Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_capture_mul

commit 7630daa6615e2a7c2b563b29939c26d31d373860
Merge: 534326b 9b4b81e
Author: huica <huica@cisco.com>
Date:   Tue Aug 2 14:20:19 2016 -0400

    Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_capture_mul

commit 534326b51f8b6803edd3fcf38d4b69e5c6be82eb
Author: huica <huica@cisco.com>
Date:   Tue Aug 2 14:20:11 2016 -0400

    supports multi-thread safety for file mempool

commit 9a9097a00e340c734c089cb624e70d2e4eff0614
Author: huica <huica@cisco.com>
Date:   Tue Aug 2 13:36:02 2016 -0400

    refactor the file capture interfaces

commit c98a98cf0756d015afeb64b1f2ad7acdd8cdc2eb
Merge: e15ba25 41fcd73
Author: huica <huica@cisco.com>
Date:   Fri Jul 29 09:56:12 2016 -0400

    Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_capture_mul

commit e15ba25ba46fb1a0d8df32a0801e3bf3e76f2899
Merge: 9ff6683 6f0c2cf
Author: huica <huica@cisco.com>
Date:   Wed Jul 27 12:53:02 2016 -0400

    Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_capture_mul

commit 9ff668388fc3d55fea41ac2c4d3c7bdfd22d7602
Merge: 0e65cdb bc4ea3f
Author: huica <huica@cisco.com>
Date:   Fri Jul 22 15:42:15 2016 -0400

    Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_capture_mul

commit 0e65cdb292300afe65b4411274083c257eb199e9
Author: huica <huica@cisco.com>
Date:   Mon Jul 11 14:16:23 2016 -0400

    remove debug

commit 771307d62b66ab16c9682ed38e912abf0d33ce97
Author: huica <huica@cisco.com>
Date:   Mon Jul 11 14:05:03 2016 -0400

    Store and release file in another thread

commit 41692c3fb38972de52fcbabe148103b4fe54bbde
Merge: 4c4103d 65b2801
Author: huica <huica@cisco.com>
Date:   Mon Jul 11 11:52:58 2016 -0400

    Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_capture_mul

commit 4c4103dadff3543e29dcebda403e6e868b9d570e
Author: huica <huica@cisco.com>
Date:   Fri Jul 8 09:52:56 2016 -0400

    store file to disk in different thread

9 years agowork around autoreconf foolishness
snorty [Thu, 11 Aug 2016 14:30:06 +0000 (10:30 -0400)] 
work around autoreconf foolishness

9 years agofix extra auto build from dist
Russ Combs (rucombs) [Thu, 11 Aug 2016 06:37:02 +0000 (02:37 -0400)] 
fix extra auto build from dist

9 years agobuild 206
Russ Combs [Wed, 10 Aug 2016 22:16:33 +0000 (18:16 -0400)] 
build 206

9 years agoMerge pull request #586 in SNORT/snort3 from ohi3 to master
Russ Combs (rucombs) [Wed, 10 Aug 2016 21:04:17 +0000 (17:04 -0400)] 
Merge pull request #586 in SNORT/snort3 from ohi3 to master

Squashed commit of the following:

commit ba4b79cd32a18ee9fbf15680efc55fb52fe77d48
Author: snorty <snorty@localhost.localdomain>
Date:   Wed Aug 10 13:16:00 2016 -0400

    snort2lua updates: http_inspect -> http_server and new_http_inspect -> http_inspect

9 years agoMerge pull request #584 in SNORT/snort3 from smtp_auth_overflow to master
Russ Combs (rucombs) [Wed, 10 Aug 2016 18:24:29 +0000 (14:24 -0400)] 
Merge pull request #584 in SNORT/snort3 from smtp_auth_overflow to master

Squashed commit of the following:

commit d0562da0307b36867e78604d8f0065c6b4a5ebb0
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date:   Tue Aug 9 13:51:38 2016 -0400

    SMTP AUTH overflow alert added

    reverting the STARTTLS smtp paf change

    reverting the STARTTLS smtp paf change

    adding snort2lua change for smtp max_auth_command_line_len option

    remove the starttls command processing in SMTP splitter

9 years agoMerge pull request #585 in SNORT/snort3 from asn1 to master
Russ Combs (rucombs) [Wed, 10 Aug 2016 15:04:59 +0000 (11:04 -0400)] 
Merge pull request #585 in SNORT/snort3 from asn1 to master

Squashed commit of the following:

commit dbdda4825dc3478cb5066504ce599f4dfe9eada9
Author: Russ Combs <rucombs@cisco.com>
Date:   Tue Aug 9 13:33:44 2016 -0400

    fix asn1:print help

9 years agoohi updates for cmake
snorty [Wed, 10 Aug 2016 00:01:32 +0000 (20:01 -0400)] 
ohi updates for cmake

9 years agobuild NHI options statically by default
snorty [Sun, 7 Aug 2016 13:15:56 +0000 (09:15 -0400)] 
build NHI options statically by default

9 years agomove ohi to extra/
snorty [Sat, 6 Aug 2016 14:23:40 +0000 (10:23 -0400)] 
move ohi to extra/

9 years agoadd dynamic build support to ohi
snorty [Fri, 5 Aug 2016 21:11:19 +0000 (17:11 -0400)] 
add dynamic build support to ohi

9 years agofix event queue buffer log size
snorty [Thu, 4 Aug 2016 19:13:30 +0000 (15:13 -0400)] 
fix event queue buffer log size

9 years agochange ohi to http_server with gids 319-320
snorty [Wed, 3 Aug 2016 21:16:21 +0000 (17:16 -0400)] 
change ohi to http_server with gids 319-320

9 years agoMerge pull request #583 in SNORT/snort3 from snort2lua_appid_rule_option to master
Russ Combs (rucombs) [Tue, 9 Aug 2016 20:40:45 +0000 (16:40 -0400)] 
Merge pull request #583 in SNORT/snort3 from snort2lua_appid_rule_option to master

Squashed commit of the following:

commit f2bf7513552b2afbed195612419aa288a10d6979
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date:   Fri Aug 5 17:49:54 2016 -0400

    implement support for convert appid rule option

    free memory allocated for appid names loaded from rules with 'appids' rule option

    add ability to modifiy rule option name when converting to snort3 format

9 years agoMerge pull request #582 in SNORT/snort3 from distcheck to master
Russ Combs (rucombs) [Tue, 9 Aug 2016 12:38:09 +0000 (08:38 -0400)] 
Merge pull request #582 in SNORT/snort3 from distcheck to master

Squashed commit of the following:

commit c07d6e17554017afad54459cd66ee331da278528
Author: Russ Combs <rucombs@cisco.com>
Date:   Mon Aug 8 14:31:06 2016 -0400

    fix make distcheck

9 years agoMerge pull request #580 in SNORT/snort3 from appid_ws2_rule_keyword2 to master
Russ Combs (rucombs) [Fri, 5 Aug 2016 20:22:10 +0000 (16:22 -0400)] 
Merge pull request #580 in SNORT/snort3 from appid_ws2_rule_keyword2 to master

Squashed commit of the following:

commit fad89647036423353ff11e50750149e39e6f8d5b
Author: Steve Chew <stechew@cisco.com>
Date:   Wed Aug 3 14:06:23 2016 -0400

    Implement Module and IpsOption subclasses for appid rule option.
    Add appid support to flow for caching application ids, implement eval function of appid rule option
    implement operator== for appid ips option

    fix hash & operator== methods to use appid option data correctly, add assert and change parameters to ref on stream api application id methods

    fix sort compare to only return true when lhs<rhs, refactor appids option eval function to streamline matching algorithm, make name->id mapping a helper function

    move get/set_application_ids methods from Stream to Flow

    use AppId type on get/set application ids parameters

9 years agobuild 205
Russ Combs [Fri, 5 Aug 2016 12:40:25 +0000 (08:40 -0400)] 
build 205

9 years agoMerge pull request #581 in SNORT/snort3 from ips_options_HAVE_HYPERSCAN to master
Russ Combs (rucombs) [Thu, 4 Aug 2016 20:13:32 +0000 (16:13 -0400)] 
Merge pull request #581 in SNORT/snort3 from ips_options_HAVE_HYPERSCAN to master

Squashed commit of the following:

commit b7c2b223ae2dce7883dd8d10b1d247d3bf72f227
Author: Victor Roemer <viroemer@cisco.com>
Date:   Thu Aug 4 15:49:02 2016 -0400

    Missing symbol without hyperscan

9 years agoMerge pull request #577 in SNORT/snort3 from hyper-sensitive to master
Russ Combs (rucombs) [Thu, 4 Aug 2016 17:48:47 +0000 (13:48 -0400)] 
Merge pull request #577 in SNORT/snort3 from hyper-sensitive to master

Squashed commit of the following:

commit 45bc7d00bcde706a4df09ec5ba416892a79f7b09
Author: Victor Roemer <viroemer@cisco.com>
Date:   Fri Jul 29 00:06:55 2016 -0400

    Convert sd_pattern to Hyperscan engine.

9 years agoMerge pull request #579 in SNORT/snort3 from session_define_swap to master
Russ Combs (rucombs) [Wed, 3 Aug 2016 20:39:08 +0000 (16:39 -0400)] 
Merge pull request #579 in SNORT/snort3 from session_define_swap to master

Squashed commit of the following:

commit 9e14c40db95cd02e8c9754e598be9efb7b7c011f
Author: alewis <albert.l.lewis@gmail.com>
Date:   Wed Aug 3 16:33:02 2016 -0400

    swapped session defines SESSION_BINARY and SESSION_ALL

commit b386f018ae5182cdcc6d6b9b26a5b1551ee4dc86
Author: alewis <albert.l.lewis@gmail.com>
Date:   Wed Aug 3 16:29:45 2016 -0400

    swapped session defines SESSION_BINARY and SESSION_ALL

commit 4c43efaa2532e77be1a21be7e410f912d20226f3
Author: alewis <albert.l.lewis@gmail.com>
Date:   Wed Aug 3 16:24:42 2016 -0400

    swapped session defines SESSION_BINARY and SESSION_ALL

9 years agoMerge pull request #573 in SNORT/snort3 from smb_segmentation to master
Russ Combs (rucombs) [Tue, 2 Aug 2016 17:42:47 +0000 (13:42 -0400)] 
Merge pull request #573 in SNORT/snort3 from smb_segmentation to master

Squashed commit of the following:

commit 3b5cd0bd44a3a79c0c55dca9a3aee990deb1f3f6
Author: mdagon <mdagon@cisco.com>
Date:   Mon Aug 1 13:48:37 2016 -0400

    Smb segmentation port

    Code review: delete space before **, replace comment with assert

9 years agoMerge pull request #576 in SNORT/snort3 from ips_options_window to master
Russ Combs (rucombs) [Tue, 2 Aug 2016 17:31:50 +0000 (13:31 -0400)] 
Merge pull request #576 in SNORT/snort3 from ips_options_window to master

Squashed commit of the following:

commit dabe4fb2cd7e4409a0cdefbd6f872169ef88f126
Author: alewis <albert.l.lewis@gmail.com>
Date:   Tue Aug 2 13:11:17 2016 -0400

    fixed endian problem with ips option window test

9 years agoMerge pull request #572 in SNORT/snort3 from ips_options-tcp_seq to master
Russ Combs (rucombs) [Tue, 2 Aug 2016 14:11:05 +0000 (10:11 -0400)] 
Merge pull request #572 in SNORT/snort3 from ips_options-tcp_seq to master

Squashed commit of the following:

commit 8bef0a2a1dcbbc63491496142b249cbc736a8150
Author: allewi <allewi@cisco.com>
Date:   Sat Jul 30 12:32:10 2016 -0400

    fixed ips_options tcp sequence number comparison (endian)

commit 212c6aa1336aec06272ee8978c5f45400bb612fa
Author: allewi <allewi@cisco.com>
Date:   Sat Jul 30 11:57:28 2016 -0400

    fixed ips_options tcp sequence number comparison (endian)

9 years agoMerge pull request #574 in SNORT/snort3 from documentation_error to master
Russ Combs (rucombs) [Tue, 2 Aug 2016 14:05:32 +0000 (10:05 -0400)] 
Merge pull request #574 in SNORT/snort3 from documentation_error to master

Squashed commit of the following:

commit 85376a42339fd01d6fcc5ec99a68474006adea7f
Author: allewi <allewi@cisco.com>
Date:   Mon Aug 1 12:42:54 2016 -0400

    updated documentation for ips_option files

9 years agobuild 204
Russ Combs [Fri, 29 Jul 2016 13:14:46 +0000 (09:14 -0400)] 
build 204

9 years agoMerge pull request #571 in SNORT/snort3 from ips_options_update to master
Russ Combs (rucombs) [Thu, 28 Jul 2016 21:00:46 +0000 (17:00 -0400)] 
Merge pull request #571 in SNORT/snort3 from ips_options_update to master

Squashed commit of the following:

commit 84eae81aa133c86913677f6a3e79bd3778912dee
Author: alewis <albert.l.lewis@gmail.com>
Date:   Thu Jul 28 16:27:47 2016 -0400

    updated ips_options endian problem with icmp_id and icmp_seq rule keywords

commit e735c60e6161c58b62765b9f7141198fefefa0a4
Author: alewis <albert.l.lewis@gmail.com>
Date:   Thu Jul 28 15:49:28 2016 -0400

    fixed an ntohs (endian) issue with icmp_seq and icmp_id field matching

commit 46eca1d12a0142e68877c8e4c94b024f6b8795ae
Author: alewis <albert.l.lewis@gmail.com>
Date:   Thu Jul 28 12:35:09 2016 -0400

    endian fix for ips_options icmp_id field

9 years agoMerge pull request #569 in SNORT/snort3 from linez to master
Russ Combs (rucombs) [Thu, 28 Jul 2016 16:37:13 +0000 (12:37 -0400)] 
Merge pull request #569 in SNORT/snort3 from linez to master

Squashed commit of the following:

commit b15f074d2d03ba332b386eb7571a9bf2afdb4dfe
Author: Russ Combs <rucombs@cisco.com>
Date:   Thu Jul 28 12:08:37 2016 -0400

    refactor, comments

commit e877c882772db117208bd60286db5b4a4feb6eb9
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Jul 22 14:33:03 2016 -0400

    fix line number in rule parsing errors
    no line numbers for lua messages

9 years agoMerge pull request #568 in SNORT/snort3 from nhttp50 to master
Russ Combs (rucombs) [Wed, 27 Jul 2016 15:14:10 +0000 (11:14 -0400)] 
Merge pull request #568 in SNORT/snort3 from nhttp50 to master

Squashed commit of the following:

commit d3a67eb2a549d929917a8f4b42ac9c5b4b00c0c8
Author: Tom Peters <thopeter@cisco.com>
Date:   Tue Jul 26 16:11:06 2016 -0400

    Unbounded POST alert

9 years agoMerge pull request #567 in SNORT/snort3 from nhttp49 to master
Russ Combs (rucombs) [Mon, 25 Jul 2016 21:43:37 +0000 (17:43 -0400)] 
Merge pull request #567 in SNORT/snort3 from nhttp49 to master

Squashed commit of the following:

commit 854e1772985651c65737046469e4cea33fbcfb54
Author: Tom Peters <thopeter@cisco.com>
Date:   Mon Jul 25 16:35:16 2016 -0400

    cmake check fix

9 years agoMerge pull request #566 in SNORT/snort3 from 203 to master
Russ Combs (rucombs) [Fri, 22 Jul 2016 15:25:30 +0000 (11:25 -0400)] 
Merge pull request #566 in SNORT/snort3 from 203 to master

Squashed commit of the following:

commit f2bbfd30862eda17647f842d31b4d4e595fbd9da
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Jul 22 10:08:22 2016 -0400

    bump to build 203, update change log
    warn on duplicate ports in list
    allow multiple ip_proto and stream_size per rule

9 years agoMerge pull request #565 in SNORT/snort3 from smb_dead_store to master
Russ Combs (rucombs) [Fri, 22 Jul 2016 14:46:42 +0000 (10:46 -0400)] 
Merge pull request #565 in SNORT/snort3 from smb_dead_store to master

Squashed commit of the following:

commit f896f4d01ef8b25ec2b1822cc2366edca433e2da
Author: mdagon <mdagon@cisco.com>
Date:   Fri Jul 22 10:08:06 2016 -0400

    Smb static analysis dead store fix

9 years agoMerge pull request #564 in SNORT/snort3 from nhi_oversize_dir to master
Russ Combs (rucombs) [Thu, 21 Jul 2016 21:13:37 +0000 (17:13 -0400)] 
Merge pull request #564 in SNORT/snort3 from nhi_oversize_dir to master

Squashed commit of the following:

commit 9841cd294d4598dea4c74deb6dae545858101733
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date:   Tue Jul 19 15:15:15 2016 -0400

    adding oversize directory alert to nhi

    adding oversize directory alert to nhi

    adding oversize directory alert to nhi

9 years agoMerge pull request #563 in SNORT/snort3 from appid_ws2_plugins_104 to master
Russ Combs (rucombs) [Wed, 20 Jul 2016 11:43:49 +0000 (07:43 -0400)] 
Merge pull request #563 in SNORT/snort3 from appid_ws2_plugins_104 to master

Squashed commit of the following:

commit 441baf1b5a602430abf2e23fa893bf9e2b94c0a6
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date:   Wed Jul 13 15:43:15 2016 -0400

    add stats counters and regression tests for mdns, timbuktu, battlefield, bgp & netbios services

9 years agoMerge pull request #562 in SNORT/snort3 from smb_writeandclose to master
Russ Combs (rucombs) [Tue, 19 Jul 2016 15:39:08 +0000 (11:39 -0400)] 
Merge pull request #562 in SNORT/snort3 from smb_writeandclose to master

Squashed commit of the following:

commit 6a473ff7dfce7e44fe6fbd20262f396d8340d8bf
Author: mdagon <mdagon@cisco.com>
Date:   Mon Jul 18 13:57:52 2016 -0400

    Smb WriteAndClose port

9 years agoMerge pull request #560 in SNORT/snort3 from smb_dialect to master
Russ Combs (rucombs) [Fri, 15 Jul 2016 21:03:21 +0000 (17:03 -0400)] 
Merge pull request #560 in SNORT/snort3 from smb_dialect to master

Squashed commit of the following:

commit de5ae8e8737762b7cf24930409dfa6a32693662f
Author: mdagon <mdagon@cisco.com>
Date:   Fri Jul 15 15:10:06 2016 -0400

    Code reivew: dialect_index should  be const

commit 05bd0f3a241e58fd5aae1a6d05c770b927895986
Author: mdagon <mdagon@cisco.com>
Date:   Fri Jul 15 12:16:22 2016 -0400

    Code review: remove unsed defines for various smb dialects

commit 3fd9da22b3958bc327987c64abab060aa70ee1ab
Author: mdagon <mdagon@cisco.com>
Date:   Thu Jul 14 11:44:54 2016 -0400

    Smb deprecated dialect check

9 years agoMerge pull request #561 in SNORT/snort3 from crc_strndup to master
Russ Combs (rucombs) [Fri, 15 Jul 2016 16:27:23 +0000 (12:27 -0400)] 
Merge pull request #561 in SNORT/snort3 from crc_strndup to master

Squashed commit of the following:

commit 0abd29e8ca7bf26bfd4a406e83605541fbb18580
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Jul 15 10:32:21 2016 -0400

    convert to snort_strndup

9 years agoMerge pull request #555 in SNORT/snort3 from smb_fingerprint to master
Russ Combs (rucombs) [Fri, 15 Jul 2016 15:46:47 +0000 (11:46 -0400)] 
Merge pull request #555 in SNORT/snort3 from smb_fingerprint to master

Squashed commit of the following:

commit aeb7837a43a60bf561eef02240eb988c22156670
Author: mdagon <mdagon@cisco.com>
Date:   Wed Jul 13 08:48:36 2016 -0400

    uncrustify dce_common.h

commit 9645a6a01bb929ebcab1b6f0d7d8dbca95777229
Author: mdagon <mdagon@cisco.com>
Date:   Tue Jul 12 16:47:14 2016 -0400

    Code review: change DEBUG to DEBUG_MSGS

commit 1e2eaa5818028b34789579b2a934b2c8fbff6ef5
Author: mdagon <mdagon@cisco.com>
Date:   Tue Jul 12 13:25:55 2016 -0400

    smb fingerprint

9 years agobuild 202
Russ Combs [Fri, 15 Jul 2016 11:03:52 +0000 (07:03 -0400)] 
build 202

9 years agoMerge pull request #559 in SNORT/snort3 from sflist_cant_fail to master
Russ Combs (rucombs) [Thu, 14 Jul 2016 19:12:30 +0000 (15:12 -0400)] 
Merge pull request #559 in SNORT/snort3 from sflist_cant_fail to master

Squashed commit of the following:

commit d141b83a304bfe9e8ac28bf9b5e01f89465bb56e
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date:   Thu Jul 14 10:49:00 2016 -0400

    fix double count of adding node with sflist_add_before

commit 42d5618ae9b876fc14f529ab27e51f5fd46b7b72
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date:   Thu Jul 14 07:42:32 2016 -0400

    change sflist_* calls that can't fail to void return

    remove check of return code for sflist_* functions that cannot fail

9 years agoMerge pull request #557 in SNORT/snort3 from nhttp48 to master
Russ Combs (rucombs) [Thu, 14 Jul 2016 16:05:04 +0000 (12:05 -0400)] 
Merge pull request #557 in SNORT/snort3 from nhttp48 to master

Squashed commit of the following:

commit db70bdf6d576cd0a24d3a65b8ae5b96e237eba4e
Author: Tom Peters <thopeter@cisco.com>
Date:   Thu Jul 14 11:41:25 2016 -0400

    added comments to makefiles

commit 193fc5b925bbf2536ea1499a69c7510940f109ac
Author: Tom Peters <thopeter@cisco.com>
Date:   Tue Jul 12 15:10:05 2016 -0400

    NHI dynamic build fix

9 years agoMerge pull request #558 in SNORT/snort3 from crc_dead_store to master
Russ Combs (rucombs) [Thu, 14 Jul 2016 14:34:54 +0000 (10:34 -0400)] 
Merge pull request #558 in SNORT/snort3 from crc_dead_store to master

Squashed commit of the following:

commit ecdab1a9816767ab2ff2ee3fba77ca178de0b284
Author: Russ Combs <rucombs@cisco.com>
Date:   Wed Jul 13 18:19:06 2016 -0400

    fix static analysis dead store

9 years agoMerge pull request #556 in SNORT/snort3 from appid_ws2_plugins_103 to master
Russ Combs (rucombs) [Wed, 13 Jul 2016 22:00:23 +0000 (18:00 -0400)] 
Merge pull request #556 in SNORT/snort3 from appid_ws2_plugins_103 to master

Squashed commit of the following:

commit dea995d287e9457ffc1958999f9abe47c27f031b
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date:   Tue Jul 5 11:28:45 2016 -0400

    enabled kerberos detection plugin

    add stats counter for irc service detection plugin

    add appid stats for kerberos & lpr detection

    replace DEBUG_KERBEROS with DEBUG_MSGS

    when parsing client key exchange init payload, mark as success if the first key exchange init packet is good, ignore DH key exchange for now, support will come later

    add description of issue on FIXIT for syn/ack seen after ack that completes 3whs

    fix compiler warnings on debug messages

9 years agoMerge pull request #552 in SNORT/snort3 from nhi_snort2lua to master
Russ Combs (rucombs) [Wed, 13 Jul 2016 21:18:15 +0000 (17:18 -0400)] 
Merge pull request #552 in SNORT/snort3 from nhi_snort2lua to master

Squashed commit of the following:

commit 9e3da270b428d201e0cad2eb4f774c813420d692
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date:   Mon Jul 11 00:41:52 2016 -0400

    snort2lua update for nhi

    update to the protocol config option of stream5

    snort2lua update for nhi

    snort2lua update for nhi

    snort2lua update for nhi request and response depths

9 years agoMerge pull request #553 in SNORT/snort3 from smb_raw to master
Russ Combs (rucombs) [Mon, 11 Jul 2016 21:04:26 +0000 (17:04 -0400)] 
Merge pull request #553 in SNORT/snort3 from smb_raw to master

Squashed commit of the following:

commit 02cf0a83ae52c9b747ee001d923760ab1f2094ec
Author: mdagon <mdagon@cisco.com>
Date:   Fri Jul 8 12:55:45 2016 -0400

    Comment update

commit 1e880bb7c34c3abf0c706403147d83141f3f19b6
Author: mdagon <mdagon@cisco.com>
Date:   Thu Jul 7 09:50:34 2016 -0400

    Smb raw mode, raw commands processing port

9 years agoMerge pull request #551 in SNORT/snort3 from nhttp47 to master
Russ Combs (rucombs) [Mon, 11 Jul 2016 12:36:54 +0000 (08:36 -0400)] 
Merge pull request #551 in SNORT/snort3 from nhttp47 to master

Squashed commit of the following:

commit 3b1af0f2fb6abc2680f63916e6e6dcba9a355187
Author: Tom Peters <thopeter@cisco.com>
Date:   Fri Jun 17 17:22:02 2016 -0400

    Properly track transactions that include 100 status code

9 years agoMerge pull request #549 in SNORT/snort3 from smb_reassembly to master
Hui Cao (huica) [Wed, 6 Jul 2016 18:25:59 +0000 (14:25 -0400)] 
Merge pull request #549 in SNORT/snort3 from smb_reassembly to master

Squashed commit of the following:

commit e7dae9120e13a4d520376c24aa2ec1a1950b34dd
Author: mdagon <mdagon@cisco.com>
Date:   Fri Jul 1 03:04:07 2016 -0400

    Smb ressaembly

9 years agoMerge pull request #550 in SNORT/snort3 from appid_ws2_plugins11 to master
Hui Cao (huica) [Wed, 6 Jul 2016 13:06:02 +0000 (09:06 -0400)] 
Merge pull request #550 in SNORT/snort3 from appid_ws2_plugins11 to master

Squashed commit of the following:

commit 7b9befec7e74c17d5d6670b59311df91eb560a80
Author: Steve Chew <stechew@cisco.com>
Date:   Tue Jul 5 13:54:01 2016 -0400

    Add count of mysql flows.

9 years agoMerge pull request #548 in SNORT/snort3 from appid_ws2_plugins_101 to master
Hui Cao (huica) [Fri, 1 Jul 2016 15:49:12 +0000 (11:49 -0400)] 
Merge pull request #548 in SNORT/snort3 from appid_ws2_plugins_101 to master

Squashed commit of the following:

commit 72cc1d3181ddb17e6ee58fd50c17da7b2bde1971
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date:   Tue Jun 28 16:27:10 2016 -0400

    enable bit torrent client & service detectors

    Added count of SSH clients detected.

    fix appid usage of SearchTool match callback position parameter to ignore for ssh clients

    bit torrent client pattern check should be don't care on pattern position in the payload

    add statistics for bittorrent clients/services, fix imap stats counting

    remove old comment, use #def for banner string length

9 years agoMerge pull request #547 in SNORT/snort3 from appid_ws2_plugins_100_fix to master
Hui Cao (huica) [Thu, 30 Jun 2016 19:23:54 +0000 (15:23 -0400)] 
Merge pull request #547 in SNORT/snort3 from appid_ws2_plugins_100_fix to master

Squashed commit of the following:

commit b47198c720d7f370c304de4303e3b6597518a066
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date:   Mon Jun 20 19:49:16 2016 -0400

    enabled code for imap & pop3 detectors

    enable tcp/upd pattern plugins

    enable clean up of resources allocated for client plugins

    keep statistics counters in alphabetical order

    fix issue freeing AppId config twice

    use actual length of string for memcpy to stats record buffer

    remove #ifdef that had disabled code to cleanup resources allocated for service plugins

    asan fixes...use delete with new...

    asan fixes...chp_req_body_matcher was not freed

    asan fixes...disable kerberos until we need it

9 years agoMerge pull request #538 in SNORT/snort3 from appid_ws2_plugins_100 to master
Hui Cao (huica) [Wed, 29 Jun 2016 18:58:22 +0000 (14:58 -0400)] 
Merge pull request #538 in SNORT/snort3 from appid_ws2_plugins_100 to master

Squashed commit of the following:

commit a8caef2e1c11b9d9cf90ef44dc3c5ebdace88ef9
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date:   Mon Jun 20 19:49:16 2016 -0400

    enabled code for imap & pop3 detectors

    enable clean up of resources allocated for client plugins

    keep statistics counters in alphabetical order

    use actual length of string for memcpy to stats record buffer

    remove #ifdef that had disabled code to cleanup resources allocated for service plugins

    asan fixes...use delete with new...

9 years agoMerge pull request #545 in SNORT/snort3 from crc_tweaks to master
Russ Combs (rucombs) [Fri, 24 Jun 2016 19:12:42 +0000 (15:12 -0400)] 
Merge pull request #545 in SNORT/snort3 from crc_tweaks to master

Squashed commit of the following:

commit d8b3caa746501a51675a359c41c6eff857eee4c7
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Jun 24 07:24:55 2016 -0400

    update bugs and dependencies

commit e600575f738128ec461106f7e22c26522c548192
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Jun 24 07:15:27 2016 -0400

    remove unused default visibility from convenience libs

commit 844eb59007429c69e108b249d7e877d98fad3445
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Jun 24 07:01:13 2016 -0400

    eliminate SafeMemcpy and friends

commit 1e3479e4263a1d3d014b55b9ae77f75475ede43b
Author: Russ Combs <rucombs@cisco.com>
Date:   Thu Jun 23 19:22:11 2016 -0400

    remove unused util_math

9 years agoMerge pull request #543 in SNORT/snort3 from appid_ws2_plugins6 to master
Russ Combs (rucombs) [Fri, 24 Jun 2016 13:00:52 +0000 (09:00 -0400)] 
Merge pull request #543 in SNORT/snort3 from appid_ws2_plugins6 to master

Squashed commit of the following:

commit 1b10f4b032bd73cac3921906eeaf6a04507054a3
Author: Steve Chew <stechew@cisco.com>
Date:   Tue Jun 21 10:24:48 2016 -0400

    Added appid flow count for SSH.

9 years agoMerge pull request #539 in SNORT/snort3 from smb_refactor to master
Russ Combs (rucombs) [Fri, 24 Jun 2016 13:00:24 +0000 (09:00 -0400)] 
Merge pull request #539 in SNORT/snort3 from smb_refactor to master

Squashed commit of the following:

commit b2da22e057dc477df4b8fd3c66a54d36408e0e45
Author: mdagon <mdagon@cisco.com>
Date:   Fri Jun 24 08:45:32 2016 -0400

    Code review: add parameter name to all function declerations in dce_smb_transaction_utils.h

commit f2d51500a5741c27032108b467213f2081db51d8
Author: mdagon <mdagon@cisco.com>
Date:   Fri Jun 24 08:30:48 2016 -0400

    Code review comments

commit e9833223281fb3772730f4b40ec31280e81c3533
Author: mdagon <mdagon@cisco.com>
Date:   Tue Jun 21 14:06:56 2016 -0400

    Refactor dce_smb_commands.Move transaction related to a new file.

9 years agoMerge pull request #544 in SNORT/snort3 from build_fix to master
Russ Combs (rucombs) [Thu, 23 Jun 2016 22:34:36 +0000 (18:34 -0400)] 
Merge pull request #544 in SNORT/snort3 from build_fix to master

Squashed commit of the following:

commit 71e677856bfa8576d69e667e5eec5e4cc0898727
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Wed Jun 22 13:15:08 2016 -0400

    fixed missing include

9 years agobuild 201
Russ Combs [Wed, 22 Jun 2016 23:57:54 +0000 (19:57 -0400)] 
build 201

9 years agoMerge pull request #536 in SNORT/snort3 from safec to master
Russ Combs (rucombs) [Wed, 22 Jun 2016 14:45:26 +0000 (10:45 -0400)] 
Merge pull request #536 in SNORT/snort3 from safec to master

Squashed commit of the following:

commit 13e33f59cb08f444cc53a4acc4ef7101b1b0fcea
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Wed Jun 22 10:39:24 2016 -0400

    unclobbered appid

commit 599f9ca56339b18df9095a06d2173aad734f510e
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Thu Jun 16 10:57:39 2016 -0400

    implemented safec functions

    added header for substituting safec foo when not present

    added cmake foo

    added missing header

    added missing search lib

    fixed safec include

    some cmake work

    added cmake build foo

    added autotools foo

    fixed builds where safec isn't present for cmake

    reverted clobbered appid changes

    fixed clobbered dnet changes

    Fixed spaces and warning message in FindSafeC.cmake

    fixed clobbered CMakeLists

    added fixit for future build updates

    reverted unnecessary build foo change

    ammended fixit

    rearranged configure.ac

9 years agoMerge pull request #542 in SNORT/snort3 from file_stream to master
Russ Combs (rucombs) [Wed, 22 Jun 2016 14:25:09 +0000 (10:25 -0400)] 
Merge pull request #542 in SNORT/snort3 from file_stream to master

Squashed commit of the following:

commit 4593c48983c4b78df58585e1bb9bccfdb9ceb509
Author: huica <huica@cisco.com>
Date:   Mon Jun 20 22:50:41 2016 -0400

    Add file name support for file daq

9 years agoMerge pull request #540 in SNORT/snort3 from ha-sc2 to master
Russ Combs (rucombs) [Tue, 21 Jun 2016 23:35:44 +0000 (19:35 -0400)] 
Merge pull request #540 in SNORT/snort3 from ha-sc2 to master

Squashed commit of the following:

commit 1f7e88116e4556455eb7c5c732f953a78f39316c
Author: Ed Borgoyn <eborgoyn@cisco.com>
Date:   Tue Jun 21 13:55:00 2016 -0400

    HA-SC functionality increment. US's: 33603, 39724, 39725

9 years agoMerge pull request #541 in SNORT/snort3 from sanifix to master
Russ Combs (rucombs) [Tue, 21 Jun 2016 22:51:00 +0000 (18:51 -0400)] 
Merge pull request #541 in SNORT/snort3 from sanifix to master

Squashed commit of the following:

commit 7a5a7e8ccb7515535ce37c6659ba22f7d58bf775
Author: Tom Peters <thopeter@cisco.com>
Date:   Tue Jun 21 17:17:04 2016 -0400

    array boundary fix

9 years agoMerge pull request #533 in SNORT/snort3 from ~MIALTIZE/snort3:icc to master
Russ Combs (rucombs) [Mon, 20 Jun 2016 23:04:47 +0000 (19:04 -0400)] 
Merge pull request #533 in SNORT/snort3 from ~MIALTIZE/snort3:icc to master

Squashed commit of the following:

commit 87abb8ece0c1d4c6df6e48ec009b11d77a8c777f
Author: Michael Altizer <mialtize@cisco.com>
Date:   Mon Jun 20 12:45:45 2016 -0400

    Clean up some ICC remarks.

commit 5ed9ca766e264bca1fff2435121b1ee172ef160c
Author: Michael Altizer <mialtize@cisco.com>
Date:   Sat Jun 18 10:15:12 2016 -0400

    cmake: Remove unused FindCHECK.cmake

commit 79eb7287f635f918fdc5845dc37b139220006d6d
Author: Michael Altizer <mialtize@cisco.com>
Date:   Sat Jun 18 01:14:48 2016 -0400

    unit-tests: Improve Catch behavior with ICC

commit 69b9de9e9ba10f5633c3f4d93fa7e2526b38eb2f
Author: Michael Altizer <mialtize@cisco.com>
Date:   Fri Jun 17 20:09:52 2016 -0400

    unit-tests: Update Catch to v1.5.6

9 years agoMerge pull request #535 in SNORT/snort3 from sdf-pegs to master
Russ Combs (rucombs) [Mon, 20 Jun 2016 22:01:52 +0000 (18:01 -0400)] 
Merge pull request #535 in SNORT/snort3 from sdf-pegs to master

Squashed commit of the following:

commit f13df8d70300e1d09d501f41736d73cee2f117bb
Merge: 131823a 9ca3fe1
Author: Victor Roemer <viroemer@cisco.com>
Date:   Mon Jun 20 13:46:58 2016 -0400

    Merge branch 'master' into sdf-pegs

commit 131823a75e89d2e13afb64b4364e1425a9a2fe07
Merge: a6c55e8 bd5d03a
Author: Victor Roemer <viroemer@cisco.com>
Date:   Fri Jun 17 16:27:53 2016 -0400

    Merge branch 'master' into sdf-pegs

commit a6c55e80d9f82ff5a35d57dbbfce59689d4eb515
Merge: 68f8389 df81d32
Author: Victor Roemer <viroemer@cisco.com>
Date:   Wed Jun 15 17:34:16 2016 -0400

    Merge branch 'master' into sdf-pegs

commit 68f838922f0da119fa0e08b0bbb5ce920a35ed6f
Merge: 6ce2f1b 35da82b
Author: Victor Roemer <viroemer@cisco.com>
Date:   Tue Jun 14 16:39:12 2016 -0400

    Merge branch 'master' into sdf-pegs

commit 6ce2f1b6ade46a0e292aa67b70fa000e384f9599
Author: Victor Roemer <viroemer@Mac.local>
Date:   Fri Jun 10 14:28:37 2016 -0400

    Add perfmon counters for the "sd_pattern" rule opt

9 years agoMerge pull request #537 in SNORT/snort3 from snort2lua_obfuscate to master
Russ Combs (rucombs) [Mon, 20 Jun 2016 22:00:45 +0000 (18:00 -0400)] 
Merge pull request #537 in SNORT/snort3 from snort2lua_obfuscate to master

Squashed commit of the following:

commit 507f534052fe3d6bfadc217a2e731bbc679b1698
Author: Victor Roemer <viroemer@cisco.com>
Date:   Mon Jun 20 15:12:26 2016 -0400

    Convert mask_output to obfuscate_pii in the output config

9 years agoMerge pull request #530 in SNORT/snort3 from appid_port_crunch_patch to master
Russ Combs (rucombs) [Mon, 20 Jun 2016 21:59:52 +0000 (17:59 -0400)] 
Merge pull request #530 in SNORT/snort3 from appid_port_crunch_patch to master

Squashed commit of the following:

commit 738bfb8164a14dc4f3d8c5ff82aefd18d693551d
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date:   Thu Jun 16 09:16:39 2016 -0400

    enable subdir for autotools build

    resolve all issues with sfaddr/sf_ip macros not ported from 2.9

    add fixit for service validator lookup failures, how can they happen?

    miscellaneous fixes for code issue flagged by crunch/analyze

    updates from review comments

9 years agoMerge pull request #534 in SNORT/snort3 from crc_primes to master
Russ Combs (rucombs) [Mon, 20 Jun 2016 17:03:46 +0000 (13:03 -0400)] 
Merge pull request #534 in SNORT/snort3 from crc_primes to master

Squashed commit of the following:

commit 4284e0e3811618f60ad9833d55a0e89d334787f5
Author: Russ Combs <rucombs@cisco.com>
Date:   Mon Jun 20 12:38:46 2016 -0400

    fix typos

commit 511f6a943ab208c20df9f115c849d31e332ce108
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Jun 18 18:48:43 2016 -0400

    update style guide

commit b19843eeec56d464cd01266526ace717a86712d1
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Jun 18 10:43:05 2016 -0400

    add missing primes, reformat

9 years agoMerge pull request #526 in SNORT/snort3 from nhi_alert to master
Russ Combs (rucombs) [Mon, 20 Jun 2016 16:09:55 +0000 (12:09 -0400)] 
Merge pull request #526 in SNORT/snort3 from nhi_alert to master

Squashed commit of the following:

commit 94885423c56b802ebce03bb6ae59013a4cf4e4c9
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date:   Thu Jun 16 17:01:34 2016 -0400

    check if HTTP/ present when loss of sync occurs

commit 559674afe9acbb9004857bf34b4cae39678453ad
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date:   Thu Jun 16 16:37:49 2016 -0400

    check if HTTP/ present when loss of sync occurs

9 years agoMerge pull request #528 in SNORT/snort3 from smb_transaction_secondary to master
Russ Combs (rucombs) [Mon, 20 Jun 2016 16:03:07 +0000 (12:03 -0400)] 
Merge pull request #528 in SNORT/snort3 from smb_transaction_secondary to master

Squashed commit of the following:

commit a20ef7cd26f3d9479fc4ec6a0984aa5f8887e270
Author: mdagon <mdagon@cisco.com>
Date:   Thu Jun 16 17:02:16 2016 -0400

    Smb transact secondary port

9 years agoMerge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort...
Russ Combs [Sat, 18 Jun 2016 13:59:04 +0000 (09:59 -0400)] 
Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3

9 years agoMerge pull request #532 in SNORT/snort3 from appid_ws2_plugins4 to master
Russ Combs (rucombs) [Fri, 17 Jun 2016 22:46:28 +0000 (18:46 -0400)] 
Merge pull request #532 in SNORT/snort3 from appid_ws2_plugins4 to master

Squashed commit of the following:

commit f4a3688aba9dbf3adf39b0adcd64ea9753260aca
Author: Steve Chew <stechew@cisco.com>
Date:   Fri Jun 17 15:49:17 2016 -0400

    Added SSL count. Updated count variable names.

9 years agoMerge pull request #529 in SNORT/snort3 from file_dynamic to master
Russ Combs (rucombs) [Fri, 17 Jun 2016 19:44:41 +0000 (15:44 -0400)] 
Merge pull request #529 in SNORT/snort3 from file_dynamic to master

Squashed commit of the following:

commit 129312ffe89459131eea4e6293a762dbcc6dad7c
Author: huica <huica@cisco.com>
Date:   Fri Jun 17 10:30:50 2016 -0400

    fix dynamic build

9 years agoMerge pull request #522 in SNORT/snort3 from file_log to master
Russ Combs (rucombs) [Fri, 17 Jun 2016 13:09:42 +0000 (09:09 -0400)] 
Merge pull request #522 in SNORT/snort3 from file_log to master

Squashed commit of the following:

commit 5ba4f767d3e2eb7f9216f4f7ce88c1223bd6d607
Author: huica <huica@cisco.com>
Date:   Thu Jun 16 14:55:29 2016 -0400

    address comments

commit 0ec81ee399da560a40aeaf938df79c95dfdebbd7
Author: huica <huica@cisco.com>
Date:   Thu Jun 16 10:36:41 2016 -0400

    update file policy

commit e2b85016b1b8ae8f17f8dbd1b6ec529f8241cf16
Merge: 5b25a24 206c522
Author: huica <huica@cisco.com>
Date:   Thu Jun 16 09:47:08 2016 -0400

    Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_log2

commit 5b25a24608625d227e067d94d9fbc995237555f6
Merge: a771ddb 92a8b16
Author: huica <huica@cisco.com>
Date:   Wed Jun 15 09:29:55 2016 -0400

    Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_log2

commit a771ddb5968eb538e4e28759310b6bb7df824f48
Merge: 80058fa 35da82b
Author: huica <huica@cisco.com>
Date:   Tue Jun 14 16:52:27 2016 -0400

    Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_log2

commit 80058fa7cbbd66911f957b3cb23a18bec46d1548
Author: huica <huica@cisco.com>
Date:   Tue Jun 14 15:58:16 2016 -0400

    Add configuration

commit d85227b16550d12aab98ed5b343843b121ad416b
Author: huica <huica@cisco.com>
Date:   Mon Jun 13 15:57:59 2016 -0400

    File log update

commit 1a814332a17fa321eff700c685b0e29509157cdb
Merge: 80dbbf1 f62ebed
Author: huica <huica@cisco.com>
Date:   Mon Jun 13 12:56:07 2016 -0400

    Merge branch 'master' of https://bitbucket-eng-rtp1.cisco.com/bitbucket/scm/snort/snort3.git into file_log2

commit 80dbbf12aec43887b6a641c9c7883b4dea6a65e5
Author: huica <huica@cisco.com>
Date:   Wed Jun 8 16:48:15 2016 -0400

    add more logs

commit 1fc92f763861b71f099ac143d13cd50643c3dd65
Author: huica <huica@cisco.com>
Date:   Wed Jun 8 16:27:16 2016 -0400

    file log support

9 years agoMerge pull request #523 in SNORT/snort3 from appid_dyn_build_patch to master
Russ Combs (rucombs) [Fri, 17 Jun 2016 12:31:50 +0000 (08:31 -0400)] 
Merge pull request #523 in SNORT/snort3 from appid_dyn_build_patch to master

Squashed commit of the following:

commit de8565b5deeb46f4c479daa500d9d62f7db96f30
Author: davis mcpherson <davis.mcpherson@gmail.com>
Date:   Thu Jun 16 09:16:39 2016 -0400

    add FIXIT to note that appid stats management needs improvement

    fix issues with build appid as static and dynamic inspector

    add support for shared lib build of appid

    make symbols SO_PUBLIC that are referenced from appid shared lib

9 years agoMerge pull request #525 in SNORT/snort3 from ~MIALTIZE/snort3:for-russ-trivial to...
Russ Combs (rucombs) [Fri, 17 Jun 2016 00:27:07 +0000 (20:27 -0400)] 
Merge pull request #525 in SNORT/snort3 from ~MIALTIZE/snort3:for-russ-trivial to master

Squashed commit of the following:

commit d524062497f08573b6c35fe9ffb7971af31a8478
Author: Michael Altizer <mialtize@cisco.com>
Date:   Thu Jun 16 20:03:00 2016 -0400

    cmake: Let SFBPF be found in the system library paths