]> git.ipfire.org Git - thirdparty/suricata.git/log
thirdparty/suricata.git
2 years agothreshold: fixed example rules to match description 8858/head
Thomas Norheim [Fri, 3 Sep 2021 09:21:45 +0000 (11:21 +0200)] 
threshold: fixed example rules to match description

2 years agothreading: wait for flow housekeeping at shutdown
Victor Julien [Tue, 9 May 2023 13:54:02 +0000 (15:54 +0200)] 
threading: wait for flow housekeeping at shutdown

Flow house keeping can accumulate work that wasn't taken into account
during shutdown. This could lead to flows still in the flowworker
thread context when being it was freed, leading to missed work and
memory leaks.

This patch adds a new way of checking if a thread module is still
busy.

Bug: #6062.

2 years agoflowworker: flush local work queue on capture timeout
Victor Julien [Wed, 10 May 2023 05:02:27 +0000 (07:02 +0200)] 
flowworker: flush local work queue on capture timeout

Capture timeout means no packets have been received for some
time, so this is a good time to flush out all work.

2 years agoflowworker: rate limit flow queue processing
Victor Julien [Tue, 9 May 2023 12:56:33 +0000 (14:56 +0200)] 
flowworker: rate limit flow queue processing

Until this patch the logic the flow worker flow house keeping used was:
- at most 2 flows are handled per packet
- pseudo packets could flush the entire queue

This patch changes that. Pseudo packets are fairly common, and can lead
to packet stalls / latency spikes if the number of flows in the queue
is large.

It does that by adding a new packet type only used at shutdown, which
flushes out the queues completely. All other packets will now stick
to the 2 flow rate limit.

2 years agodatasets: bugfix to load ip types from yaml 8852/head
Scott Jordan [Tue, 9 May 2023 20:38:55 +0000 (16:38 -0400)] 
datasets: bugfix to load ip types from yaml

2 years agosrc: various comment spelling fixes 8840/head
Victor Julien [Mon, 8 May 2023 09:56:38 +0000 (11:56 +0200)] 
src: various comment spelling fixes

Thanks to Josh Soref.

2 years agodpdk: minor output fixup
Victor Julien [Mon, 8 May 2023 09:56:11 +0000 (11:56 +0200)] 
dpdk: minor output fixup

Thanks to Josh Soref.

2 years agodetect/parse: fix test spelling
Victor Julien [Mon, 8 May 2023 09:48:03 +0000 (11:48 +0200)] 
detect/parse: fix test spelling

Thanks to Josh Soref.

2 years agostream: fix test code spelling
Victor Julien [Mon, 8 May 2023 09:47:09 +0000 (11:47 +0200)] 
stream: fix test code spelling

Thanks to Josh Soref.

2 years agodpdk: fix variable spelling
Victor Julien [Mon, 8 May 2023 09:45:30 +0000 (11:45 +0200)] 
dpdk: fix variable spelling

Thanks to Josh Soref.

2 years agoscripts: fix bundle script spelling
Victor Julien [Mon, 8 May 2023 09:44:10 +0000 (11:44 +0200)] 
scripts: fix bundle script spelling

Thanks to Josh Soref.

2 years agorust: spelling fixes
Victor Julien [Mon, 8 May 2023 09:42:53 +0000 (11:42 +0200)] 
rust: spelling fixes

Thanks to Josh Soref.

2 years agocommandline: fix help output spelling
Victor Julien [Mon, 8 May 2023 09:41:47 +0000 (11:41 +0200)] 
commandline: fix help output spelling

Thanks to Josh Soref.

2 years agosnmp: fix spelling
Victor Julien [Mon, 8 May 2023 09:40:53 +0000 (11:40 +0200)] 
snmp: fix spelling

Thanks to Josh Soref.

2 years agolicense: fixup file headers
Victor Julien [Mon, 8 May 2023 09:38:05 +0000 (11:38 +0200)] 
license: fixup file headers

Thanks to Josh Soref.

2 years agodoc: spelling
Victor Julien [Mon, 8 May 2023 09:36:21 +0000 (11:36 +0200)] 
doc: spelling

Thanks to Josh Soref.

2 years agochangelog: spelling
Victor Julien [Mon, 8 May 2023 09:35:56 +0000 (11:35 +0200)] 
changelog: spelling

Thanks to Josh Soref.

2 years agodetect/csum: test cleanups
Victor Julien [Mon, 8 May 2023 09:16:24 +0000 (11:16 +0200)] 
detect/csum: test cleanups

2 years agodetect/content: test cleanups
Victor Julien [Mon, 8 May 2023 09:09:34 +0000 (11:09 +0200)] 
detect/content: test cleanups

2 years agowindivert: compile fixes 8834/head
Victor Julien [Sun, 7 May 2023 06:17:31 +0000 (08:17 +0200)] 
windivert: compile fixes

2 years agogithub-ci: add windivert build
Victor Julien [Sun, 7 May 2023 05:42:13 +0000 (07:42 +0200)] 
github-ci: add windivert build

2 years agooutput: target keys have port 8829/head
Eric Leblond [Tue, 30 Aug 2022 12:10:53 +0000 (14:10 +0200)] 
output: target keys have port

Update JSON schema to support signature with target keyword

2 years agodoc: explain where tls.store stores certificates
Philippe Antoine [Fri, 5 May 2023 15:00:11 +0000 (17:00 +0200)] 
doc: explain where tls.store stores certificates

By adding a reference/link to the doc about the suricata.yaml
config section pecifying the directory where the certificates
are stored

2 years agoutil/rule-vars: spelling
Victor Julien [Sat, 6 May 2023 05:22:48 +0000 (07:22 +0200)] 
util/rule-vars: spelling

2 years agocommon: spelling
Victor Julien [Sat, 6 May 2023 05:22:21 +0000 (07:22 +0200)] 
common: spelling

2 years agothreshold: spelling
Victor Julien [Sat, 6 May 2023 05:21:48 +0000 (07:21 +0200)] 
threshold: spelling

2 years agodebug: spelling
Victor Julien [Sat, 6 May 2023 05:21:33 +0000 (07:21 +0200)] 
debug: spelling

2 years agoredis: spelling
Victor Julien [Sat, 6 May 2023 05:20:12 +0000 (07:20 +0200)] 
redis: spelling

2 years agomime: spelling
Victor Julien [Sat, 6 May 2023 05:19:43 +0000 (07:19 +0200)] 
mime: spelling

2 years agounix-socket: spelling
Victor Julien [Sat, 6 May 2023 05:19:28 +0000 (07:19 +0200)] 
unix-socket: spelling

2 years agoreputation: spelling
Victor Julien [Sat, 6 May 2023 05:19:08 +0000 (07:19 +0200)] 
reputation: spelling

2 years agoippair: spelling
Victor Julien [Sat, 6 May 2023 05:18:51 +0000 (07:18 +0200)] 
ippair: spelling

2 years agohost: spelling
Victor Julien [Sat, 6 May 2023 05:18:40 +0000 (07:18 +0200)] 
host: spelling

2 years agostats: spelling
Victor Julien [Sat, 6 May 2023 05:18:27 +0000 (07:18 +0200)] 
stats: spelling

2 years agoradix: spelling
Victor Julien [Sat, 6 May 2023 05:18:08 +0000 (07:18 +0200)] 
radix: spelling

2 years agohash: spelling
Victor Julien [Sat, 6 May 2023 05:17:51 +0000 (07:17 +0200)] 
hash: spelling

2 years agofile: spelling
Victor Julien [Sat, 6 May 2023 05:17:21 +0000 (07:17 +0200)] 
file: spelling

2 years agoprofiling: spelling
Victor Julien [Sat, 6 May 2023 05:16:46 +0000 (07:16 +0200)] 
profiling: spelling

2 years agounittests: spelling
Victor Julien [Sat, 6 May 2023 05:15:52 +0000 (07:15 +0200)] 
unittests: spelling

2 years agoreference: spelling
Victor Julien [Sat, 6 May 2023 05:14:30 +0000 (07:14 +0200)] 
reference: spelling

2 years agoclassification: spelling
Victor Julien [Sat, 6 May 2023 05:13:23 +0000 (07:13 +0200)] 
classification: spelling

2 years agoutil/lua: spelling
Victor Julien [Sat, 6 May 2023 05:12:52 +0000 (07:12 +0200)] 
util/lua: spelling

2 years agohash/lookup3: spelling
Victor Julien [Sat, 6 May 2023 05:08:25 +0000 (07:08 +0200)] 
hash/lookup3: spelling

2 years agoutil/misc: spelling
Victor Julien [Sat, 6 May 2023 05:07:37 +0000 (07:07 +0200)] 
util/misc: spelling

2 years agoqueue: spelling
Victor Julien [Sat, 6 May 2023 05:00:22 +0000 (07:00 +0200)] 
queue: spelling

2 years agorunmodes: spelling
Victor Julien [Sat, 6 May 2023 04:59:14 +0000 (06:59 +0200)] 
runmodes: spelling

2 years agoconf: spelling
Victor Julien [Sat, 6 May 2023 04:58:36 +0000 (06:58 +0200)] 
conf: spelling

2 years agostream: spelling
Victor Julien [Sat, 6 May 2023 04:58:16 +0000 (06:58 +0200)] 
stream: spelling

2 years agothreading: spelling
Victor Julien [Sat, 6 May 2023 04:57:42 +0000 (06:57 +0200)] 
threading: spelling

2 years agofuzz: spelling
Victor Julien [Sat, 6 May 2023 05:28:00 +0000 (07:28 +0200)] 
fuzz: spelling

2 years agotests: spelling
Victor Julien [Sat, 6 May 2023 04:55:58 +0000 (06:55 +0200)] 
tests: spelling

2 years agoeve: spelling
Victor Julien [Sat, 6 May 2023 04:55:19 +0000 (06:55 +0200)] 
eve: spelling

2 years agooutput: spelling
Victor Julien [Sat, 6 May 2023 04:55:03 +0000 (06:55 +0200)] 
output: spelling

2 years agolog: spelling
Victor Julien [Sat, 6 May 2023 04:54:32 +0000 (06:54 +0200)] 
log: spelling

2 years agoflow: spelling
Victor Julien [Sat, 6 May 2023 04:53:20 +0000 (06:53 +0200)] 
flow: spelling

2 years agocapture: spelling
Victor Julien [Fri, 5 May 2023 19:11:20 +0000 (21:11 +0200)] 
capture: spelling

2 years agodetect: spelling
Victor Julien [Sat, 6 May 2023 06:29:38 +0000 (08:29 +0200)] 
detect: spelling

2 years agodefrag: spelling
Victor Julien [Fri, 5 May 2023 18:46:05 +0000 (20:46 +0200)] 
defrag: spelling

2 years agodecode: spelling
Victor Julien [Fri, 5 May 2023 18:45:48 +0000 (20:45 +0200)] 
decode: spelling

2 years agoapp-layer: spelling
Victor Julien [Sat, 6 May 2023 06:51:41 +0000 (08:51 +0200)] 
app-layer: spelling

2 years agooutput/alert: spelling
Victor Julien [Fri, 5 May 2023 18:44:14 +0000 (20:44 +0200)] 
output/alert: spelling

2 years agoscripts: spelling
Victor Julien [Fri, 5 May 2023 18:41:17 +0000 (20:41 +0200)] 
scripts: spelling

2 years agorust: spelling
Victor Julien [Fri, 5 May 2023 18:40:54 +0000 (20:40 +0200)] 
rust: spelling

2 years agompm/spm: spelling
Victor Julien [Fri, 5 May 2023 18:39:56 +0000 (20:39 +0200)] 
mpm/spm: spelling

2 years agoyaml: spelling
Victor Julien [Fri, 5 May 2023 18:39:05 +0000 (20:39 +0200)] 
yaml: spelling

2 years agorules: spelling
Victor Julien [Fri, 5 May 2023 18:37:48 +0000 (20:37 +0200)] 
rules: spelling

2 years agoqa: spelling
Victor Julien [Fri, 5 May 2023 18:37:26 +0000 (20:37 +0200)] 
qa: spelling

2 years agolua: spelling
Victor Julien [Fri, 5 May 2023 18:35:15 +0000 (20:35 +0200)] 
lua: spelling

2 years agoeve/schema: spelling
Victor Julien [Fri, 5 May 2023 18:34:55 +0000 (20:34 +0200)] 
eve/schema: spelling

2 years agoebpf: spelling
Victor Julien [Fri, 5 May 2023 18:30:35 +0000 (20:30 +0200)] 
ebpf: spelling

2 years agodoxygen: spelling
Victor Julien [Fri, 5 May 2023 18:29:54 +0000 (20:29 +0200)] 
doxygen: spelling

2 years agodoc/userguide: spelling
Victor Julien [Fri, 5 May 2023 18:29:40 +0000 (20:29 +0200)] 
doc/userguide: spelling

2 years agodoc/readme: spelling
Victor Julien [Fri, 5 May 2023 18:28:12 +0000 (20:28 +0200)] 
doc/readme: spelling

2 years agoconfigure: spelling
Victor Julien [Sat, 6 May 2023 05:26:11 +0000 (07:26 +0200)] 
configure: spelling

2 years agochangelog: spelling
Victor Julien [Fri, 5 May 2023 18:26:54 +0000 (20:26 +0200)] 
changelog: spelling

2 years agogithub-ci: spelling
Victor Julien [Fri, 5 May 2023 18:17:09 +0000 (20:17 +0200)] 
github-ci: spelling

2 years agoftp: rename enum to fix spelling
Victor Julien [Sat, 6 May 2023 06:50:58 +0000 (08:50 +0200)] 
ftp: rename enum to fix spelling

2 years agoenip: rename struct to fix spelling
Victor Julien [Sat, 6 May 2023 06:50:17 +0000 (08:50 +0200)] 
enip: rename struct to fix spelling

2 years agodnp3: rename flag to fix spelling
Victor Julien [Sat, 6 May 2023 06:49:35 +0000 (08:49 +0200)] 
dnp3: rename flag to fix spelling

2 years agoclassification: spelling
Victor Julien [Sat, 6 May 2023 05:56:55 +0000 (07:56 +0200)] 
classification: spelling

2 years agoexception/policy: spelling
Victor Julien [Sat, 6 May 2023 05:14:01 +0000 (07:14 +0200)] 
exception/policy: spelling

2 years agodetect/threshold: reword alloc failure message
Victor Julien [Sat, 6 May 2023 06:27:53 +0000 (08:27 +0200)] 
detect/threshold: reword alloc failure message

2 years agodetect: spelling: DetectBufferMpmRegistry
Victor Julien [Sat, 6 May 2023 06:24:23 +0000 (08:24 +0200)] 
detect: spelling: DetectBufferMpmRegistry

2 years agodetect: spelling: SIG_FLAG_INIT_PRIO_EXPLICIT
Victor Julien [Sat, 6 May 2023 06:20:17 +0000 (08:20 +0200)] 
detect: spelling: SIG_FLAG_INIT_PRIO_EXPLICIT

2 years agodetect: spelling: update SigTableApplyStrictCommandLineOption
Victor Julien [Sat, 6 May 2023 06:18:51 +0000 (08:18 +0200)] 
detect: spelling: update SigTableApplyStrictCommandLineOption

2 years agodetect: spelling: multi-tenancy fixes
Victor Julien [Sat, 6 May 2023 06:01:03 +0000 (08:01 +0200)] 
detect: spelling: multi-tenancy fixes

2 years agofuzz: spelling: AFLFUZZ_PERSISTENT_MODE
Victor Julien [Sat, 6 May 2023 05:26:35 +0000 (07:26 +0200)] 
fuzz: spelling: AFLFUZZ_PERSISTENT_MODE

2 years agodoc/install: point to userguide
Victor Julien [Sat, 6 May 2023 05:33:49 +0000 (07:33 +0200)] 
doc/install: point to userguide

2 years agodoc: remove legacy windows install guide
Victor Julien [Sat, 6 May 2023 05:36:26 +0000 (07:36 +0200)] 
doc: remove legacy windows install guide

2 years agodoc: remove legacy pfring install guide
Victor Julien [Sat, 6 May 2023 05:36:12 +0000 (07:36 +0200)] 
doc: remove legacy pfring install guide

2 years agoprscript: remove as it is obsolete
Victor Julien [Fri, 5 May 2023 18:35:51 +0000 (20:35 +0200)] 
prscript: remove as it is obsolete

2 years agodoc: add docutils.conf to disable smart quotes
Wes Hurd [Wed, 3 Mar 2021 11:10:29 +0000 (06:10 -0500)] 
doc: add docutils.conf to disable smart quotes

2 years agorunmode/unix-socket: don't lead http range memory 8817/head
Victor Julien [Fri, 5 May 2023 15:01:51 +0000 (17:01 +0200)] 
runmode/unix-socket: don't lead http range memory

Init was per run, Deinit global, so Init overwrote memory if multiple
pcaps were processed.

Bug: #6046.

2 years agodetect/loader: set proper thread flags
Victor Julien [Fri, 5 May 2023 12:54:09 +0000 (14:54 +0200)] 
detect/loader: set proper thread flags

Fixes: 13beba141c98 ("source: add THV_RUNNING flag to notify of running state")
Bug: #6043.

2 years agorust: rustfmt files with recent new tests 8815/head
Victor Julien [Fri, 5 May 2023 11:42:34 +0000 (13:42 +0200)] 
rust: rustfmt files with recent new tests

2 years agorust: fix new clippy warnings
Victor Julien [Fri, 5 May 2023 11:40:30 +0000 (13:40 +0200)] 
rust: fix new clippy warnings

2 years agodoc: add note on the hashsize recommendation for datasets
Andreas Herz [Thu, 20 Apr 2023 14:24:18 +0000 (16:24 +0200)] 
doc: add note on the hashsize recommendation for datasets

2 years agosmb: add unit tests
Lancer Cheng [Tue, 4 Apr 2023 15:29:10 +0000 (15:29 +0000)] 
smb: add unit tests

Issue: 4865

2 years agodoc: fix description of iptables rules
Victor Julien [Fri, 5 May 2023 09:30:15 +0000 (11:30 +0200)] 
doc: fix description of iptables rules

2 years agosmb/ntlmssp: fix parsing of negotiate flags
tianjinshan [Wed, 8 Mar 2023 07:38:55 +0000 (15:38 +0800)] 
smb/ntlmssp: fix parsing of negotiate flags

Ticket: #5783