]> git.ipfire.org Git - thirdparty/snort3.git/log
thirdparty/snort3.git
12 years agorefactoring EncState / encode() functions. Removing ip_hdr and ip_len. Updating ip...
Josh [Thu, 14 Aug 2014 19:15:48 +0000 (15:15 -0400)] 
refactoring EncState / encode() functions. Removing ip_hdr and ip_len. Updating ip header files

12 years agoconfig changes
Russ Combs [Thu, 14 Aug 2014 18:24:56 +0000 (14:24 -0400)] 
config changes

12 years agomods to call process from splitter
Tom Peters [Thu, 14 Aug 2014 18:19:29 +0000 (14:19 -0400)] 
mods to call process from splitter

12 years agoMerge branch 'master' of 10.6.12.29:/nfs/home/jrosenba/codecs
Russ Combs [Thu, 14 Aug 2014 18:17:17 +0000 (14:17 -0400)] 
Merge branch 'master' of 10.6.12.29:/nfs/home/jrosenba/codecs

12 years agosyntax squiffiness
Russ Combs [Thu, 14 Aug 2014 18:14:36 +0000 (14:14 -0400)] 
syntax squiffiness

12 years agobut reference must get a ;
Russ Combs [Thu, 14 Aug 2014 17:47:00 +0000 (13:47 -0400)] 
but reference must get a ;

12 years agotweaked rule parsing
Russ Combs [Thu, 14 Aug 2014 17:09:12 +0000 (13:09 -0400)] 
tweaked rule parsing

12 years agoadding '#if 0' around previously deleted FIXIT in snort.cc
Josh [Thu, 14 Aug 2014 15:19:36 +0000 (11:19 -0400)] 
adding '#if 0' around previously deleted FIXIT in snort.cc

12 years agoMerge branch 'master' of /nfs/home/rucombs/Snort++ into codecs
Josh [Thu, 14 Aug 2014 15:15:12 +0000 (11:15 -0400)] 
Merge branch 'master' of /nfs/home/rucombs/Snort++ into codecs

12 years agoremoving a few more fields from packet
Josh [Wed, 13 Aug 2014 21:07:19 +0000 (17:07 -0400)] 
removing a few more fields from packet

12 years agoupdated change log
Russ Combs [Thu, 14 Aug 2014 13:33:04 +0000 (09:33 -0400)] 
updated change log

12 years agostream workarounds for new packet foo
Russ Combs [Thu, 14 Aug 2014 13:31:28 +0000 (09:31 -0400)] 
stream workarounds for new packet foo

12 years agotweak error msg
Russ Combs [Thu, 14 Aug 2014 12:27:54 +0000 (08:27 -0400)] 
tweak error msg

12 years agoMerge branch 'master' of 10.6.12.29:/nfs/home/jrosenba/codecs
Russ Combs [Thu, 14 Aug 2014 04:02:39 +0000 (00:02 -0400)] 
Merge branch 'master' of 10.6.12.29:/nfs/home/jrosenba/codecs

12 years agoforgot to add act_react.cc
Russ Combs [Thu, 14 Aug 2014 03:28:12 +0000 (23:28 -0400)] 
forgot to add act_react.cc

12 years agoadded parse_byte_code() and converted ips_{resp,react} to actions
Russ Combs [Thu, 14 Aug 2014 03:27:29 +0000 (23:27 -0400)] 
added parse_byte_code() and converted ips_{resp,react} to actions

12 years agoupdating cmake to reflect new Makefile additions
Josh [Wed, 13 Aug 2014 18:16:56 +0000 (14:16 -0400)] 
updating cmake to reflect new Makefile additions

12 years agoinitial FlushBucket implementation
Russ Combs [Wed, 13 Aug 2014 19:02:20 +0000 (15:02 -0400)] 
initial FlushBucket implementation

12 years agoMerging Snort2lua changed -- Fixes Snort2lua warning and adds Attribute Table parser.
Josh [Wed, 13 Aug 2014 18:00:09 +0000 (14:00 -0400)] 
Merging Snort2lua changed -- Fixes Snort2lua warning and adds Attribute Table parser.

12 years agoMerge branch 'master' of /nfs/home/rucombs/Snort++ into codecs
Josh [Wed, 13 Aug 2014 17:59:58 +0000 (13:59 -0400)] 
Merge branch 'master' of /nfs/home/rucombs/Snort++ into codecs

Conflicts:
src/network_inspectors/binder/binder.cc
src/service_inspectors/ftp_telnet/ftp_parse.cc
src/sfip/sf_iph.cc

12 years agofixing new packet ip_api bugs
Josh [Wed, 13 Aug 2014 16:50:39 +0000 (12:50 -0400)] 
fixing new packet ip_api bugs

12 years agoremoving SFIP macros
Josh [Tue, 12 Aug 2014 22:57:03 +0000 (18:57 -0400)] 
removing SFIP macros

12 years agoadded to total to StreamSplitter::reassemble() and removed stream_tcp ports and protos
Russ Combs [Wed, 13 Aug 2014 15:17:45 +0000 (11:17 -0400)] 
added to total to StreamSplitter::reassemble() and removed stream_tcp ports and protos

12 years agobasic reject action plugin working
Russ Combs [Wed, 13 Aug 2014 01:19:39 +0000 (21:19 -0400)] 
basic reject action plugin working

12 years agofixed quiet mode when parsing conf
Russ Combs [Wed, 13 Aug 2014 00:18:20 +0000 (20:18 -0400)] 
fixed quiet mode when parsing conf

12 years agoconvert reject to ips action
Russ Combs [Tue, 12 Aug 2014 22:31:15 +0000 (18:31 -0400)] 
convert reject to ips action

12 years agoPACKET STRUCT DOWNSIZEy untested, functionality likely broken
Josh [Tue, 12 Aug 2014 22:14:00 +0000 (18:14 -0400)] 
PACKET STRUCT DOWNSIZEy  untested, functionality likely broken

12 years agoMerge branch 'master' of /nfs/home/rucombs/Snort++
Josh [Tue, 12 Aug 2014 20:18:49 +0000 (16:18 -0400)] 
Merge branch 'master' of /nfs/home/rucombs/Snort++

12 years agoMerge with Russ
Josh [Mon, 11 Aug 2014 21:13:45 +0000 (17:13 -0400)] 
Merge with Russ

Conflicts:
tools/snort2lua/utils/s2l_util.cc

12 years agomisc cleanup
Russ Combs [Tue, 12 Aug 2014 02:22:09 +0000 (22:22 -0400)] 
misc cleanup

12 years agoreally fix bounce_to
Russ Combs [Tue, 12 Aug 2014 00:31:53 +0000 (20:31 -0400)] 
really fix bounce_to

12 years agoparse errors, ftp_client.bounce_to
Russ Combs [Mon, 11 Aug 2014 21:40:21 +0000 (17:40 -0400)] 
parse errors, ftp_client.bounce_to

12 years agoRemoving dependency on TinyXML. Attribute file parser complete
Josh [Mon, 11 Aug 2014 21:05:38 +0000 (17:05 -0400)] 
Removing dependency on TinyXML.  Attribute file parser complete

12 years agoAdding attribute table parser and Open Source tinyxml XML parser. Updating data interface
Josh [Mon, 11 Aug 2014 17:44:18 +0000 (13:44 -0400)] 
Adding attribute table parser and Open Source tinyxml XML parser. Updating data interface

12 years agofixed stream_tcp.policy range
Russ Combs [Mon, 11 Aug 2014 17:10:29 +0000 (13:10 -0400)] 
fixed stream_tcp.policy range

12 years agofixed --help-module
Russ Combs [Mon, 11 Aug 2014 15:10:20 +0000 (11:10 -0400)] 
fixed --help-module

12 years agoadded pcre jit
Russ Combs [Mon, 11 Aug 2014 14:23:33 +0000 (10:23 -0400)] 
added pcre jit

12 years agofixed author and includes
Russ Combs [Mon, 11 Aug 2014 12:00:06 +0000 (08:00 -0400)] 
fixed author and includes

12 years agoremove silliness to limit strings output in example so
Russ Combs [Mon, 11 Aug 2014 10:41:03 +0000 (06:41 -0400)] 
remove silliness to limit strings output in example so

12 years agofix so rule parsing
Russ Combs [Mon, 11 Aug 2014 00:33:14 +0000 (20:33 -0400)] 
fix so rule parsing

12 years agobump to 111
Russ Combs [Sun, 10 Aug 2014 15:17:01 +0000 (11:17 -0400)] 
bump to 111

12 years agofixed luajit option
Russ Combs [Sun, 10 Aug 2014 15:16:05 +0000 (11:16 -0400)] 
fixed luajit option

12 years agofixup rules / options
Russ Combs [Sat, 9 Aug 2014 00:07:14 +0000 (20:07 -0400)] 
fixup rules / options

12 years agofixup luajit
Russ Combs [Fri, 8 Aug 2014 21:35:39 +0000 (17:35 -0400)] 
fixup luajit

12 years agoremoving warnings from Snort2Lua
Josh [Fri, 8 Aug 2014 15:57:02 +0000 (11:57 -0400)] 
removing warnings from Snort2Lua

12 years agorule parsing rewrite
Russ Combs [Fri, 8 Aug 2014 16:07:04 +0000 (12:07 -0400)] 
rule parsing rewrite

12 years agoconverted "general" rule options to ips options; rewrote rule parsing
Russ Combs [Fri, 8 Aug 2014 02:58:57 +0000 (22:58 -0400)] 
converted "general" rule options to ips options; rewrote rule parsing

12 years agoUNTESTED - Removing All ICMP embedded IP/TCP/UDP/ICMP data from Paket
Josh [Wed, 6 Aug 2014 17:57:48 +0000 (13:57 -0400)] 
UNTESTED - Removing All ICMP embedded IP/TCP/UDP/ICMP data from Paket

12 years agosnort2lua update. Adding binders. Fixed some warnings.
Josh [Wed, 6 Aug 2014 19:41:47 +0000 (15:41 -0400)] 
snort2lua update.  Adding binders.  Fixed some warnings.

12 years agoMerge branch 'master' of /nfs/home/rucombs/Snort++
Tom Peters [Tue, 5 Aug 2014 17:56:20 +0000 (13:56 -0400)] 
Merge branch 'master' of /nfs/home/rucombs/Snort++

12 years ago109
Russ Combs [Tue, 5 Aug 2014 17:55:35 +0000 (13:55 -0400)] 
109

12 years agomerge with baseline
Tom Peters [Tue, 5 Aug 2014 17:47:04 +0000 (13:47 -0400)] 
merge with baseline

12 years agocheckpoint prior to pulling latest with flow in reassemble
Tom Peters [Tue, 5 Aug 2014 17:38:43 +0000 (13:38 -0400)] 
checkpoint prior to pulling latest with flow in reassemble

12 years agoremoving individual uint8_t booleans for frag_flag and co
Josh [Mon, 4 Aug 2014 17:22:16 +0000 (13:22 -0400)] 
removing individual uint8_t booleans for frag_flag and co

12 years agoupdated help
Russ Combs [Mon, 4 Aug 2014 04:04:53 +0000 (00:04 -0400)] 
updated help

12 years agoMerge branch 'master' of 10.6.12.29:/nfs/home/jrosenba/codecs
Russ Combs [Fri, 1 Aug 2014 20:01:04 +0000 (16:01 -0400)] 
Merge branch 'master' of 10.6.12.29:/nfs/home/jrosenba/codecs

12 years agomade ParseInclude() static in parse_conf.cc
Russ Combs [Fri, 1 Aug 2014 20:00:52 +0000 (16:00 -0400)] 
made ParseInclude() static in parse_conf.cc

12 years agoMerge branch 'master' of /nfs/home/rucombs/Snort++ into master
Josh [Fri, 1 Aug 2014 18:38:46 +0000 (14:38 -0400)] 
Merge branch 'master' of /nfs/home/rucombs/Snort++ into master

Conflicts:
tools/snort2lua/utils/snort2lua_util.cc
tools/snort2lua/utils/snort2lua_util.h

12 years agofinal commit before major sfip changes
Josh [Fri, 1 Aug 2014 17:48:53 +0000 (13:48 -0400)] 
final commit before major sfip changes

12 years agoupdating packet. Still minor updates
Josh [Fri, 1 Aug 2014 17:30:05 +0000 (13:30 -0400)] 
updating packet. Still minor updates

12 years agoupdated help
Russ Combs [Fri, 1 Aug 2014 17:05:02 +0000 (13:05 -0400)] 
updated help

12 years agotweaking errors. Fixing some problems
Josh [Fri, 1 Aug 2014 15:38:03 +0000 (11:38 -0400)] 
tweaking errors. Fixing some problems

12 years ago108
Russ Combs [Fri, 1 Aug 2014 12:16:00 +0000 (08:16 -0400)] 
108

12 years agorefactored various api for consistency wrt *init() and *term() naming (p* for plugin...
Russ Combs [Thu, 31 Jul 2014 17:53:01 +0000 (13:53 -0400)] 
refactored various api for consistency wrt *init() and *term() naming (p* for plugin (global) and t* for thread local)

12 years agofix up build of extra example plugins
Russ Combs [Thu, 31 Jul 2014 17:15:04 +0000 (13:15 -0400)] 
fix up build of extra example plugins

12 years agoclean up unneeded NHttpEnums prefix
Tom Peters [Wed, 30 Jul 2014 21:18:59 +0000 (17:18 -0400)] 
clean up unneeded NHttpEnums prefix

12 years agomerge with russ
Josh [Wed, 30 Jul 2014 21:17:59 +0000 (17:17 -0400)] 
merge with russ

12 years agoadd nhttp params to snort.lua
Tom Peters [Wed, 30 Jul 2014 21:02:44 +0000 (17:02 -0400)] 
add nhttp params to snort.lua

12 years agoupdating build system to reflect autoconf
Josh [Wed, 30 Jul 2014 20:54:25 +0000 (16:54 -0400)] 
updating build system to reflect autoconf

12 years agoMerge branch 'master' of /nfs/home/rucombs/Snort++
Tom Peters [Wed, 30 Jul 2014 20:08:46 +0000 (16:08 -0400)] 
Merge branch 'master' of /nfs/home/rucombs/Snort++

12 years agosection object management
Tom Peters [Wed, 30 Jul 2014 20:03:35 +0000 (16:03 -0400)] 
section object management

12 years ago107
Russ Combs [Wed, 30 Jul 2014 15:37:16 +0000 (11:37 -0400)] 
107

12 years agovarious fixes for dynamic builds
Russ Combs [Wed, 30 Jul 2014 15:36:46 +0000 (11:36 -0400)] 
various fixes for dynamic builds

12 years agoStreamSplitter::reassemble() and Xcode fixes, etc.
Russ Combs [Wed, 30 Jul 2014 02:14:11 +0000 (22:14 -0400)] 
StreamSplitter::reassemble() and Xcode fixes, etc.

12 years agoupdating snort2lua. config_changes.txt, and minor tweaks
Josh [Tue, 29 Jul 2014 16:01:21 +0000 (12:01 -0400)] 
updating snort2lua. config_changes.txt, and minor tweaks

12 years agoMerge branch 'master' of /nfs/home/rucombs/Snort++
Tom Peters [Mon, 28 Jul 2014 21:13:33 +0000 (17:13 -0400)] 
Merge branch 'master' of /nfs/home/rucombs/Snort++

12 years agosmall step toward transaction processing
Tom Peters [Mon, 28 Jul 2014 21:11:07 +0000 (17:11 -0400)] 
small step toward transaction processing

12 years agoMerge branch 'master' of /nfs/home/rucombs/Snort++
Josh [Mon, 28 Jul 2014 17:55:49 +0000 (13:55 -0400)] 
Merge branch 'master' of /nfs/home/rucombs/Snort++

12 years agoUpgrading Snort2lua. rule suboptions are space seperated. Parses variable names...
Josh [Mon, 28 Jul 2014 17:48:35 +0000 (13:48 -0400)] 
Upgrading Snort2lua. rule suboptions are space seperated.  Parses variable names when 'including'.  automaticcally add binder struct

12 years agofixed stats output
Russ Combs [Mon, 28 Jul 2014 14:17:10 +0000 (10:17 -0400)] 
fixed stats output

12 years ago106 - fpdetect uses gadget buffers for mpse
Russ Combs [Sat, 26 Jul 2014 03:19:46 +0000 (23:19 -0400)] 
106 - fpdetect uses gadget buffers for mpse

12 years ago105
Russ Combs [Fri, 25 Jul 2014 21:41:45 +0000 (17:41 -0400)] 
105

12 years agoadded optional selector to http_header
Russ Combs [Fri, 25 Jul 2014 21:36:40 +0000 (17:36 -0400)] 
added optional selector to http_header

12 years agorefactored markup, added --list-modules
Russ Combs [Fri, 25 Jul 2014 12:07:20 +0000 (08:07 -0400)] 
refactored markup, added --list-modules

12 years agocleaned up ignores
Russ Combs [Thu, 24 Jul 2014 16:41:54 +0000 (12:41 -0400)] 
cleaned up ignores

12 years agoMerge branch 'master' of /nfs/home/rucombs/Snort++
Tom Peters [Thu, 24 Jul 2014 14:54:24 +0000 (10:54 -0400)] 
Merge branch 'master' of /nfs/home/rucombs/Snort++

12 years agotweaked --rule help
Russ Combs [Thu, 24 Jul 2014 12:22:55 +0000 (08:22 -0400)] 
tweaked --rule help

12 years agoadded snort --rule <rule>
Russ Combs [Thu, 24 Jul 2014 03:32:18 +0000 (23:32 -0400)] 
added snort --rule <rule>

12 years agochanged all PREPROC profiling macros to MODULE
Russ Combs [Wed, 23 Jul 2014 22:02:29 +0000 (18:02 -0400)] 
changed all PREPROC profiling macros to MODULE

12 years ago104
Russ Combs [Wed, 23 Jul 2014 21:06:05 +0000 (17:06 -0400)] 
104

12 years agofixed building w/o perfprofiling
Russ Combs [Wed, 23 Jul 2014 21:05:32 +0000 (17:05 -0400)] 
fixed building w/o perfprofiling

12 years agoMerge branch 'master' of 10.6.12.29:/nfs/home/jrosenba/codecs
Russ Combs [Wed, 23 Jul 2014 20:14:30 +0000 (16:14 -0400)] 
Merge branch 'master' of 10.6.12.29:/nfs/home/jrosenba/codecs

12 years ago104
Russ Combs [Wed, 23 Jul 2014 19:25:06 +0000 (15:25 -0400)] 
104

12 years agoMerge branch 'master' of /nfs/home/rucombs/Snort++
Tom Peters [Wed, 23 Jul 2014 16:26:54 +0000 (12:26 -0400)] 
Merge branch 'master' of /nfs/home/rucombs/Snort++

12 years agoMerge branch 'codecs'
Josh [Wed, 23 Jul 2014 13:40:47 +0000 (09:40 -0400)] 
Merge branch 'codecs'

Conflicts:
cmake/includePredefinedPackages.cmake
src/codecs/ip/cd_esp.cc
src/codecs/ip/cd_ipv4.cc
src/codecs/ip/cd_ipv6.cc
src/codecs/template.cc
src/managers/packet_manager.cc
tools/snort2lua/config_states/config_one_string_option.cc

12 years agoMerge branch 'snort2lua' into codecs
Josh [Wed, 23 Jul 2014 13:32:19 +0000 (09:32 -0400)] 
Merge branch 'snort2lua' into codecs

12 years agoMerge branch 'snort2lua' of /nfs/home/jrosenba/mac into snort2lua
Josh [Wed, 23 Jul 2014 13:27:25 +0000 (09:27 -0400)] 
Merge branch 'snort2lua' of /nfs/home/jrosenba/mac into snort2lua

Conflicts:
tools/snort2lua/data/dt_comment.h

12 years agoremoving regression tests
Josh [Wed, 23 Jul 2014 13:18:21 +0000 (09:18 -0400)] 
removing regression tests

12 years agofixed http buffer rule options
Russ Combs [Wed, 23 Jul 2014 03:13:43 +0000 (23:13 -0400)] 
fixed http buffer rule options

12 years agoMerge remote-tracking branch 'mac_repo/snort2lua' into codecs
Josh [Tue, 22 Jul 2014 22:12:50 +0000 (18:12 -0400)] 
Merge remote-tracking branch 'mac_repo/snort2lua' into codecs