]> git.ipfire.org Git - thirdparty/snort3.git/log
thirdparty/snort3.git
7 years agoMerge pull request #1065 in SNORT/snort3 from file_capture to master
Hui Cao (huica) [Fri, 10 Nov 2017 15:25:36 +0000 (10:25 -0500)] 
Merge pull request #1065 in SNORT/snort3 from file_capture to master

Squashed commit of the following:

commit a60557e4ebd8902d958815437055189045d17045
Author: huica <huica@cisco.com>
Date:   Wed Nov 8 16:36:28 2017 -0500

    Add interface to access file info from file capture

7 years agoMerge pull request #1066 in SNORT/snort3 from arch_build to master
Michael Altizer (mialtize) [Thu, 9 Nov 2017 19:31:56 +0000 (14:31 -0500)] 
Merge pull request #1066 in SNORT/snort3 from arch_build to master

Squashed commit of the following:

commit caee2b742e14c5d9c81ca5905abde232db0248c3
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Thu Nov 9 13:43:44 2017 -0500

    build: fixed missing include

7 years agoMerge pull request #1064 in SNORT/snort3 from data_bus to master
Russ Combs (rucombs) [Thu, 9 Nov 2017 15:14:03 +0000 (10:14 -0500)] 
Merge pull request #1064 in SNORT/snort3 from data_bus to master

Squashed commit of the following:

commit efce000170d14faf340d37e27259766696c6eb43
Author: Russ Combs (rucombs) <rucombs@cisco.com>
Date:   Wed Nov 8 18:00:57 2017 -0500

    data_bus: also publish to default policy

commit 17c3950345166a04012760293ffc601d2feab35c
Author: Russ Combs (rucombs) <rucombs@cisco.com>
Date:   Wed Nov 8 17:10:58 2017 -0500

    data_bus: refactor basic access for pub / sub

7 years agoMerge pull request #1063 in SNORT/snort3 from file_config to master
Hui Cao (huica) [Wed, 8 Nov 2017 19:11:03 +0000 (14:11 -0500)] 
Merge pull request #1063 in SNORT/snort3 from file_config to master

Squashed commit of the following:

commit 44272839902cf52fd831d84d487d564c4a3b534a
Author: huica <huica@cisco.com>
Date:   Wed Nov 8 13:13:39 2017 -0500

    add back the ref count for file config

7 years agobuild: Fix included header breakage from relative parsing merge
Michael Altizer [Wed, 8 Nov 2017 03:10:50 +0000 (22:10 -0500)] 
build: Fix included header breakage from relative parsing merge

7 years agoMerge pull request #1061 in SNORT/snort3 from relative_files to master
Michael Altizer (mialtize) [Tue, 7 Nov 2017 23:43:14 +0000 (18:43 -0500)] 
Merge pull request #1061 in SNORT/snort3 from relative_files to master

Squashed commit of the following:

commit a6c60b9518f79884144a702fdc4b0e5c87f4bb6f
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Wed Nov 1 16:22:31 2017 -0400

    parsing: resolve paths from the current config directory instead of process directory

7 years agoMerge pull request #1062 in SNORT/snort3 from file_api_fw to master
Hui Cao (huica) [Tue, 7 Nov 2017 17:04:14 +0000 (12:04 -0500)] 
Merge pull request #1062 in SNORT/snort3 from file_api_fw to master

Squashed commit of the following:

commit 49a45a058c9a86b51050f4068a5aa5e631a1555b
Author: huica <huica@cisco.com>
Date:   Fri Nov 3 16:49:47 2017 -0400

    File policy and file config update to allow user define customized file
    policy through file api

7 years agoMerge pull request #1059 in SNORT/snort3 from realip to master
Tom Peters (thopeter) [Mon, 6 Nov 2017 22:18:57 +0000 (17:18 -0500)] 
Merge pull request #1059 in SNORT/snort3 from realip to master

Squashed commit of the following:

commit 5bcd29db69fb205855053f36b823131d2a63a372
Author: Steven Baigal <sbaigal@cisco.com>
Date:   Thu Oct 26 16:18:03 2017 -0400

    added reading real IP/Port from DAQ

7 years agoMerge pull request #1060 in SNORT/snort3 from sfrt_unused to master
Russ Combs (rucombs) [Fri, 3 Nov 2017 17:57:47 +0000 (13:57 -0400)] 
Merge pull request #1060 in SNORT/snort3 from sfrt_unused to master

Squashed commit of the following:

commit af2e008e6e63045f2d94f0fc1413806fe9fa02a0
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Nov 3 09:29:13 2017 -0400

    sfrt: remove cruft and reformat header

7 years agoMerge pull request #1057 in SNORT/snort3 from rename_hashs to master
Hui Cao (huica) [Fri, 3 Nov 2017 15:06:28 +0000 (11:06 -0400)] 
Merge pull request #1057 in SNORT/snort3 from rename_hashs to master

Squashed commit of the following:

commit 7554b9b3f0a0894cb525548436916385b7a95f56
Author: Victor Roemer <viroemer@cisco.com>
Date:   Fri Nov 3 08:14:06 2017 -0400

    fix build

commit 22610f0d5112c6d2d7996712c0f24dff4a8ca87d
Author: Victor Roemer <viroemer@cisco.com>
Date:   Thu Nov 2 12:41:23 2017 -0400

    detection: rename ServiceInfo to SignatureServiceInfo

commit 1b0538ac5321fb801e6710041b8073a830433106
Author: Victor Roemer <viroemer@cisco.com>
Date:   Tue Oct 31 17:10:37 2017 -0400

    hash: Rename SFGHASH, SFXHASH, SFHASHFCN to something resonable

7 years agoMerge pull request #1049 in SNORT/snort3 from norm_test to master
Michael Altizer (mialtize) [Thu, 2 Nov 2017 17:29:28 +0000 (13:29 -0400)] 
Merge pull request #1049 in SNORT/snort3 from norm_test to master

Squashed commit of the following:

commit f090e0dd005bde5fcb6303ae6781426fda3cb44f
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Fri Oct 27 13:13:12 2017 -0400

    fixed build of several dyanmic modules on OSX / clang

commit 62b7ba4bca0c88afe6521a4cf444718125656e86
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Wed Oct 25 15:45:07 2017 -0400

    cd_pbb, alert_json: fixed build issues on OSX with clang

commit 8701c0f859bcba2797d52f2998013ff1ec71896f
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Fri Oct 27 12:18:57 2017 -0400

    snort2lua: added inspection uuid

commit 20c0dba9d13fb1b7d81073bd87605fb61d16ebf6
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Tue Oct 17 11:31:52 2017 -0400

    snort2lua: added na_policy_mode. added ability amend tables if created.

commit 31356c8c8110c618b3d9d469cf0ee3a9963ace50
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Mon Oct 16 15:29:23 2017 -0400

    snort2lua: added normalize_tcp: ftp

commit f11fb08f1c08d72e921274086ba0d8739ac24b83
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Fri Oct 27 10:17:48 2017 -0400

    autoconf: fixed uuid library inclusion on OSX

commit bcbc9f517ab8f2bbefe9ec3e42447160e467964a
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Wed Oct 25 17:12:39 2017 -0400

    policy, cmake: fixed uuid build issues on OSX

commit be8d14bb54f88120e6422421812cf05f3cadf92a
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Fri Oct 13 17:33:18 2017 -0400

    policy, normalizer: added test mode and reorganized policies. added inspection policy config.

7 years agoMerge pull request #1058 in SNORT/snort3 from sfdaq_init to master
Michael Altizer (mialtize) [Thu, 2 Nov 2017 17:28:34 +0000 (13:28 -0400)] 
Merge pull request #1058 in SNORT/snort3 from sfdaq_init to master

Squashed commit of the following:

commit 100e98d49b5fbbea27de362097d5e306f0cfe436
Author: Michael Altizer <mialtize@cisco.com>
Date:   Thu Nov 2 12:51:15 2017 -0400

    sfdaq: Explicitly initialize more fields in SFDAQInstance constructor

7 years agoMerge pull request #1055 in SNORT/snort3 from logger_rename1 to master
Hui Cao (huica) [Thu, 2 Nov 2017 13:47:02 +0000 (09:47 -0400)] 
Merge pull request #1055 in SNORT/snort3 from logger_rename1 to master

Squashed commit of the following:

commit 573911db9fa1578da00da8418d501d025dfeb302
Author: Steve Chew <stechew@cisco.com>
Date:   Mon Oct 30 16:56:05 2017 -0400

    AppId: return false from is_third_party_appid_available when no third party module is available.

7 years agoMerge pull request #1056 in SNORT/snort3 from 240 to master 3.0.0-240 BUILD_240
Russ Combs (rucombs) [Tue, 31 Oct 2017 16:21:15 +0000 (12:21 -0400)] 
Merge pull request #1056 in SNORT/snort3 from 240 to master

Squashed commit of the following:

commit 11ebc4e36ac87df3570355077336b949e432e0b5
Author: Russ Combs <rucombs@cisco.com>
Date:   Tue Oct 31 08:08:58 2017 -0400

    build: bump build to 240

commit af3cdca7657de35e9c3876d4a93dc70522f9f14a
Author: Russ Combs <rucombs@cisco.com>
Date:   Tue Oct 31 09:22:16 2017 -0400

    ChangeLog: update for build 240

commit 938cc37229b52d82b4bb738a53083489f8ce9aad
Author: Russ Combs <rucombs@cisco.com>
Date:   Tue Oct 31 08:20:45 2017 -0400

    doc: update default manuals

commit fa3c6c2b3f2cc982b5f88cb279859b1009caea89
Author: Russ Combs <rucombs@cisco.com>
Date:   Mon Oct 30 21:26:14 2017 -0400

    cppcheck: add missing copy ctor and assignment oper as default or delete

7 years agoMerge pull request #1054 in SNORT/snort3 from crc_cppcheck to master
Russ Combs (rucombs) [Mon, 30 Oct 2017 20:58:46 +0000 (16:58 -0400)] 
Merge pull request #1054 in SNORT/snort3 from crc_cppcheck to master

Squashed commit of the following:

commit 80f5dfd68a2315a3d95a5a5b5ba4db3432798181
Author: Russ Combs <rucombs@cisco.com>
Date:   Mon Oct 30 13:35:10 2017 -0400

    cppcheck: more scope reduction

commit d0c67534b4b471c2a6ec74b36a0c98874b4bd0db
Author: Russ Combs <rucombs@cisco.com>
Date:   Sun Oct 29 16:49:43 2017 -0400

    cppcheck: fix a few warnings

commit e25a24bc7f7ae97844e5d08096335168bde7ccff
Author: Russ Combs <rucombs@cisco.com>
Date:   Sun Oct 29 13:34:20 2017 -0400

    warnings: use fallthrough comments

commit 896fd132ca162ded29243968fe12249c7ea45923
Author: Russ Combs <rucombs@cisco.com>
Date:   Sun Oct 29 12:24:34 2017 -0400

    memory: fix xcode print format warning

commit aeb9f6caa227f9e05c2737b07d21689d30359529
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Oct 27 22:36:08 2017 -0400

    content: fix relative loop condition

commit 6f95a732b68652d32ac9aded68e47b4fd8ead55b
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Oct 27 09:01:39 2017 -0400

    cd_icmp6: fix encoded cksum calculation

commit e9e945ca1f37a6274c24cc7cc9e602aa5d0fea58
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Oct 27 07:28:05 2017 -0400

    appid: fix build warning

commit 4b29f5d7702575335a687d2debd023c6bca16990
Author: Russ Combs <rucombs@cisco.com>
Date:   Wed Oct 25 21:26:56 2017 -0400

    active: fix packet modify vs resize handling

commit 79ca752e85edae2d623143b3458ba4ebdfa98f80
Author: Russ Combs <rucombs@cisco.com>
Date:   Wed Oct 25 21:05:31 2017 -0400

    cppcheck: reduce variable scopes

commit 58e172c5fa9c15bcd82ab4a8bedc7755d5e0ecab
Author: Russ Combs <rucombs@cisco.com>
Date:   Wed Oct 25 21:04:47 2017 -0400

    cppcheck: fix non-style issues

commit 1ba4c8614b1dd9701fa817aad1396a8f058ff037
Author: Russ Combs <rucombs@cisco.com>
Date:   Wed Oct 25 12:25:27 2017 -0400

    manual: fix some typos

7 years agoMerge pull request #1053 in SNORT/snort3 from logger_rename1 to master
Hui Cao (huica) [Fri, 27 Oct 2017 13:01:56 +0000 (09:01 -0400)] 
Merge pull request #1053 in SNORT/snort3 from logger_rename1 to master

Squashed commit of the following:

commit 6e84b6c43e6899f03978e982b280e5972b87f15a
Author: Steve Chew <stechew@cisco.com>
Date:   Thu Oct 26 18:29:49 2017 -0400

    snort2lua: changed name of firewall_logging to sfunified2_logger.

7 years agoMerge pull request #1052 in SNORT/snort3 from appid_missed_commit_of_appid_stats_fix...
Russ Combs (rucombs) [Thu, 26 Oct 2017 01:52:10 +0000 (21:52 -0400)] 
Merge pull request #1052 in SNORT/snort3 from appid_missed_commit_of_appid_stats_fix to master

Squashed commit of the following:

commit b9e6ac8a1ffaae7eb038faa64ec868b4a40b3309
Author: davis mcpherson <davmcphe.cisco.com>
Date:   Mon Oct 23 21:51:19 2017 -0400

    fix appid statistics counts to verify id is valid and also add a count for unknown app id (should not happen)

7 years agoMerge pull request #1048 in SNORT/snort3 from appid_get_inspector_no_mas to master
Russ Combs (rucombs) [Tue, 24 Oct 2017 22:00:06 +0000 (18:00 -0400)] 
Merge pull request #1048 in SNORT/snort3 from appid_get_inspector_no_mas to master

Squashed commit of the following:

commit 20c0eab95890d1027e4cc1de348616f21ef6547a
Author: davis mcpherson <davmcphe.cisco.com>
Date:   Mon Oct 23 21:51:19 2017 -0400

    fix appid statistics counts to verify id is valid and also add a count for unknown app id (should not happen)

commit b125a3db7994f7ae59790544e2d235f16b862fbb
Author: davis mcpherson <davmcphe@cisco.com>
Date:   Sat Oct 21 16:34:27 2017 -0400

    refactor Lua app detectors to eliminate need for multipl inheritance

commit 7018a0ea007728f8aa0792e39d8f7491090d96b1
Author: davis mcpherson <davmcphe.cisco.com>
Date:   Wed Oct 18 13:19:24 2017 -0400

    refactor appid to eliminate need to call get_inspector method

    refactor appid so that detectors, discovery handlers, etc. have a pointer to the AppId inspector or config instance when they need it

    refactor unit tests to work with changes to appid inspector handle management

    use static_cast instead of dynamic_cast to cast lua detector object to its correct type

7 years agoMerge pull request #1051 in SNORT/snort3 from open_src to master
Russ Combs (rucombs) [Mon, 23 Oct 2017 21:41:11 +0000 (17:41 -0400)] 
Merge pull request #1051 in SNORT/snort3 from open_src to master

Squashed commit of the following:

commit eb56254894817a715032fc9161c3a0285b4cfaba
Author: Russ Combs <rucombs@cisco.com>
Date:   Mon Oct 23 13:15:11 2017 -0400

    snort2lua: fix null char in -? output

commit a84fbd68b2082f6818966abea6aca43ad91823bf
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Oct 21 19:32:56 2017 -0400

    target: add rule option to indicate target of attack

commit ad7589ba1442c93a86e1e2b133af82799ae52337
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Oct 21 16:31:28 2017 -0400

    snort_defaults.lua: update default servers and ports

commit f80268f92c24bbed9e21bb03fbcd0519400f9b92
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Oct 21 16:00:04 2017 -0400

    configure: disable stdlog by default

commit e14ea8392862c32b5a5012fca03e617e6de48ccc
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Oct 21 13:07:58 2017 -0400

    http_inspect: handle borked reassembly gracefully; thanks to João Soares <joaopsys@gmail.com> for reporting the issue

commit cc1c3402063f12600bffd4be3297c020e8fca334
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Oct 21 10:52:56 2017 -0400

    ips_option: remove legacy detection_defines.h

commit 80b7f8bb66362195acc1c04157e49f86c8945c20
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Oct 21 10:43:05 2017 -0400

    ips_option: eval returns enum

commit 55f92ae1a3aa2da984a00eb5b37bdfaafcde3367
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Oct 21 08:53:03 2017 -0400

    sfxhash: cleanup keyops decl

commit 24f8c897db1be10d8eaec8d1f5b5243ead89bc11
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Oct 21 08:20:22 2017 -0400

    pcre: fix relative search with ^

commit dca57bb73a7e20b280e1518d6636daa371026c0b
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Oct 20 18:13:10 2017 -0400

    cd_pflog: fix comments; thanks to Markus Lude <markus.lude@gmx.de> for the 2X patch

commit a10d3dff7e897e0e16ba2a7934b4e1bfab0ae096
Author: Russ Combs <rucombs@cisco.com>
Date:   Thu Oct 19 11:46:10 2017 -0400

    alert_json: initial json event logger

commit 06b91c5c14911368269261a95f75c600a5b0a2fb
Author: Russ Combs <rucombs@cisco.com>
Date:   Thu Oct 19 10:02:32 2017 -0400

    cd_pbb: initial version of codec for 802.1ah; thanks to jan hugo prins
    <jhp@jhprins.org> for reporting the issue.

commit 6df4f9f712512c434926befee43b7105bca551d3
Author: Russ Combs <rucombs@cisco.com>
Date:   Tue Oct 17 22:10:20 2017 -0400

    style: remove leading and trailing underscores from header guards

commit 53c13fa1d9213269130ed25ceeb1ea80e84fcfaf
Author: Russ Combs <rucombs@cisco.com>
Date:   Tue Oct 17 22:06:19 2017 -0400

    snort2lua: cleanup up message formats

commit f629a90bec0879188ff81e80d92bc347321298e1
Author: Russ Combs <rucombs@cisco.com>
Date:   Tue Oct 17 22:01:43 2017 -0400

    snort2lua: logto is not supported

commit 971a38879cb51a0e80737f760b65fea4943e3ce4
Author: Russ Combs <rucombs@cisco.com>
Date:   Tue Oct 17 09:49:45 2017 -0400

    wscale: add extra rule option to check tcp window scaling

commit 63d26b54802a9fcffb7714944bd5ada610b27de6
Author: Russ Combs <rucombs@cisco.com>
Date:   Tue Oct 17 09:48:20 2017 -0400

    mss: add extra rule option to check mss

7 years agoMerge pull request #1050 in SNORT/snort3 from firewall_cleanup4 to master
Hui Cao (huica) [Fri, 20 Oct 2017 15:01:15 +0000 (11:01 -0400)] 
Merge pull request #1050 in SNORT/snort3 from firewall_cleanup4 to master

Squashed commit of the following:

commit 93989353af61ea25e9b36c9e7a658d5d1b8b2275
Author: Steve Chew <stechew@cisco.com>
Date:   Fri Oct 20 00:48:32 2017 -0400

    Snort2lua: No longer allow vlan or mpls logging to be turned off.

7 years agoMerge pull request #1042 in SNORT/snort3 from policy_version1 to master
Hui Cao (huica) [Fri, 20 Oct 2017 14:46:07 +0000 (10:46 -0400)] 
Merge pull request #1042 in SNORT/snort3 from policy_version1 to master

Squashed commit of the following:

commit 88e9d5b60af1c6599fb396810255b4e92a932873
Author: Steve Chew <stechew@cisco.com>
Date:   Fri Oct 13 20:54:59 2017 -0400

    IpsPolicy: added uuid field to IPS policy for firewall usage.

7 years agoMerge pull request #1047 in SNORT/snort3 from missing-commit to master
Hui Cao (huica) [Wed, 18 Oct 2017 18:56:41 +0000 (14:56 -0400)] 
Merge pull request #1047 in SNORT/snort3 from missing-commit to master

Squashed commit of the following:

commit 5700aa850f41f735105b3c3a8bc6c10796796059
Author: Victor Roemer (viroemer) <viroemer@cisco.com>
Date:   Tue Oct 17 14:11:47 2017 -0400

    snort: prevent linker from optimizing out code used by external users

7 years agoMerge pull request #1039 in SNORT/snort3 from it_control to master
Russ Combs (rucombs) [Wed, 18 Oct 2017 18:40:12 +0000 (14:40 -0400)] 
Merge pull request #1039 in SNORT/snort3 from it_control to master

Squashed commit of the following:

commit 3add48e8026be96032f8d257729c84de0adfe42d
Author: Russ Combs <rucombs@cisco.com>
Date:   Tue Oct 17 07:15:54 2017 -0400

    inspector_manager: cleanup

commit ccc7243718c0945517b2abed3904e6c8d0ea332d
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Oct 14 09:47:47 2017 -0400

    inspectors: tweak dispatch logic for optimal control

commit 9e8396d8937a5875a3a299e118ab8b2efc393d1a
Author: Russ Combs <rucombs@cisco.com>
Date:   Tue Oct 10 11:43:52 2017 -0400

    appid: handle sip events before packets

commit 8be99056f8be259392ec72cf57050658c5db4580
Author: Russ Combs <rucombs@cisco.com>
Date:   Tue Oct 10 07:38:24 2017 -0400

    inspectors: remove cruft

commit 2245f6c55f243fa04c44273a3aa283f16a322381
Author: Russ Combs <rucombs@cisco.com>
Date:   Mon Oct 9 21:20:21 2017 -0400

    inspectors: packet types do not eval defragged packets

commit a0635f1279f99ba1cb27626a1df7c516da470487
Author: Russ Combs <rucombs@cisco.com>
Date:   Sun Oct 8 10:00:50 2017 -0400

    inspectors: add control type and ensure appid is run ahead of other controls

7 years agoMerge pull request #1046 in SNORT/snort3 from nhttp93 to master
Tom Peters (thopeter) [Wed, 18 Oct 2017 17:50:56 +0000 (13:50 -0400)] 
Merge pull request #1046 in SNORT/snort3 from nhttp93 to master

Squashed commit of the following:

commit 8964af3ce07990e4f30562a64ddc4ba0bc9303d7
Author: Tom Peters <thopeter@cisco.com>
Date:   Tue Oct 10 12:10:01 2017 -0400

    http_inspect: true IP enhancements

7 years agoMerge pull request #1044 in SNORT/snort3 from catch-update to master
Michael Altizer (mialtize) [Tue, 17 Oct 2017 23:21:10 +0000 (19:21 -0400)] 
Merge pull request #1044 in SNORT/snort3 from catch-update to master

Squashed commit of the following:

commit bea7c6f4b881ee359e4b6ec3723da079fd85fe2b
Author: Michael Altizer <mialtize@cisco.com>
Date:   Mon Oct 16 21:41:37 2017 -0400

    catch: Clean up some more test REQUIREs

commit 391feec2e8da530dda0df8d107595d0e28c8f3c3
Author: Michael Altizer <mialtize@cisco.com>
Date:   Mon Oct 16 21:07:16 2017 -0400

    lua: Add missing REQUIREs in LuaStack Catch tests

commit 695b07072bc7c5651632d31bb58107613e113f88
Author: Michael Altizer <mialtize@cisco.com>
Date:   Mon Oct 16 21:03:10 2017 -0400

    framework: Add default initializers to Range

    This silences some Clang analyzer uninitialized memory warnings.

commit 1c692642f05d55cc2d6e222b31b646e31103d99e
Author: Michael Altizer <mialtize@cisco.com>
Date:   Mon Oct 16 21:00:04 2017 -0400

    build: Emit compile_commands.json in CMake builds for clang-tidy

commit fe3c96d92ee52b8b501b6b18e001510e8eedc50d
Author: Michael Altizer <mialtize@cisco.com>
Date:   Mon Oct 16 20:14:09 2017 -0400

    appid: Reorganize AppIdHttpSession to minimize padding

commit a7795211e32e43cf3b549df5f2285c8eabe17cbc
Author: Michael Altizer <mialtize@cisco.com>
Date:   Mon Oct 16 20:06:17 2017 -0400

    main: Fix potential memory leak when queuing Analyzer Commands

commit 3e3ced83ca69936b0c839a1004aa305634cfc552
Author: Michael Altizer <mialtize@cisco.com>
Date:   Mon Oct 16 15:17:47 2017 -0400

    flow: Use an empty SfIp for the fixed ICMP router address

commit bd8e9ba61b6c17f451edf9a8cdb843655bc648c2
Author: Michael Altizer <mialtize@cisco.com>
Date:   Mon Oct 16 13:48:07 2017 -0400

    build: Include clang diagnostics and analyzer in clang-tidy config

commit e4cffedfaa87295373969582dbc8448b8f7e5b03
Author: Michael Altizer <mialtize@cisco.com>
Date:   Mon Oct 16 13:47:47 2017 -0400

    build: clang-tidy pass against extras

commit 1731e7832aa86862e3a9dff03b79809f728c866b
Author: Michael Altizer <mialtize@cisco.com>
Date:   Mon Oct 16 13:33:10 2017 -0400

    build: Fix 'make dist' in extras

commit 8599d95c1f769dfa58079b7776eda26d7d95564c
Author: Michael Altizer <mialtize@cisco.com>
Date:   Mon Oct 16 13:18:14 2017 -0400

    build: Another pass to clean up some more clang-tidy warnings

commit d2882ff72e02c581da8748e0e1ed6529a0bfd22d
Author: Michael Altizer <mialtize@cisco.com>
Date:   Sat Oct 14 13:26:24 2017 -0400

    u2spewfoo: Fix build on FreeBSD

commit 9f5cc9882c61d782d7a4948d67bb4828f6832ad5
Author: Michael Altizer <mialtize@cisco.com>
Date:   Sat Oct 14 13:25:21 2017 -0400

    catch: Update to Catch v1.10.0

7 years agoMerge pull request #1041 in SNORT/snort3 from appid_expected_flags to master
Tom Peters (thopeter) [Tue, 17 Oct 2017 19:02:20 +0000 (15:02 -0400)] 
Merge pull request #1041 in SNORT/snort3 from appid_expected_flags to master

Squashed commit of the following:

commit 9a864d715e10135267025197ab618414ac03ce5f
Author: snorty <mdagon@cisco.com>
Date:   Tue Oct 3 12:19:27 2017 -0400

    Appid: take into account the direction of the parent flow when setting expected flow flags

7 years agoMerge pull request #1043 in SNORT/snort3 from daq_tunnel to master
Tom Peters (thopeter) [Tue, 17 Oct 2017 19:02:03 +0000 (15:02 -0400)] 
Merge pull request #1043 in SNORT/snort3 from daq_tunnel to master

Squashed commit of the following:

commit 940e83dcc968adf1ea4cd29c745a4dbff35b1993
Author: Steven Baigal <sbaigal@cisco.com>
Date:   Wed Oct 11 15:36:37 2017 -0400

    US131276 allow DAQ to set the tunnel bypass flags

7 years agoMerge pull request #1045 in SNORT/snort3 from missing-commit to master
Hui Cao (huica) [Tue, 17 Oct 2017 17:52:59 +0000 (13:52 -0400)] 
Merge pull request #1045 in SNORT/snort3 from missing-commit to master

Squashed commit of the following:

commit ecb69d6b1314c8cab5964f878158ebda893c1372
Author: Victor Roemer (viroemer) <viroemer@cisco.com>
Date:   Tue Oct 17 11:39:54 2017 -0400

    logger: u2_packet.c was moved to log

7 years agoMerge pull request #1040 in SNORT/snort3 from expose-u2_packet to master
Hui Cao (huica) [Tue, 17 Oct 2017 13:53:59 +0000 (09:53 -0400)] 
Merge pull request #1040 in SNORT/snort3 from expose-u2_packet to master

Squashed commit of the following:

commit 2439da6fc82c8876a4fe846b19a673689fc905d2
Author: Victor Roemer (viroemer) <viroemer@cisco.com>
Date:   Mon Oct 16 13:26:24 2017 +0000

    cleanup

commit 6f8aa06a3e92190ba72613f0b61a31371322484a
Author: Victor Roemer (viroemer) <viroemer@cisco.com>
Date:   Fri Oct 13 09:23:14 2017 -0400

    Move u2_packet.cc

commit c30de3bca9f2f70dcdc43e10b8a0324976b2b16c
Author: Victor Roemer (viroemer) <viroemer@cisco.com>
Date:   Wed Oct 11 10:17:13 2017 -0400

    build: remove u2_packet.h from loggers/Makefile.am

commit 504f0e68d6d929e0991bf1a16d03347d247237fa
Author: Victor Roemer (viroemer) <viroemer@cisco.com>
Date:   Wed Oct 11 08:28:39 2017 -0400

    log: Make U2PseudoHeader a public interface

7 years agoMerge pull request #1028 in SNORT/snort3 from doc_portscan_copy to master
Tom Peters (thopeter) [Thu, 12 Oct 2017 14:54:53 +0000 (10:54 -0400)] 
Merge pull request #1028 in SNORT/snort3 from doc_portscan_copy to master

Squashed commit of the following:

commit 49b104835f5288b70832e12277bebd8025660510
Author: Steven Baigal <sbaigal@cisco.com>
Date:   Tue Sep 26 15:54:31 2017 -0400

    adding port scan to manual

7 years agoMerge pull request #1038 in SNORT/snort3 from unsupported_rule_opts to master
Michael Altizer (mialtize) [Tue, 10 Oct 2017 23:06:08 +0000 (19:06 -0400)] 
Merge pull request #1038 in SNORT/snort3 from unsupported_rule_opts to master

Squashed commit of the following:

commit 65bf747af341c6deb9ed4ddb3f6b9389bbb4e23f
Author: Michael Altizer <mialtize@cisco.com>
Date:   Mon Oct 9 19:43:24 2017 -0400

    snort2lua: Some header cleanups

commit d783df2741b7e75287432c52a3fc18be7822de59
Author: Michael Altizer <mialtize@cisco.com>
Date:   Mon Oct 9 19:42:24 2017 -0400

    snort2lua: Correctly identify ftpbounce and sameip as unsupported rule options

7 years agoMerge pull request #1032 in SNORT/snort3 from firewall_policy1 to master
Hui Cao (huica) [Tue, 10 Oct 2017 20:09:10 +0000 (16:09 -0400)] 
Merge pull request #1032 in SNORT/snort3 from firewall_policy1 to master

Squashed commit of the following:

commit 12ad32c9eb5c099ca86c6a149c1b4ae0e6872dfb
Author: Steve Chew <stechew@cisco.com>
Date:   Wed Oct 4 02:08:55 2017 -0400

    Added public APIs to set and check IPS policies based on user_id.

7 years agoMerge pull request #1035 in SNORT/snort3 from binder_network to master
Michael Altizer (mialtize) [Mon, 9 Oct 2017 23:41:13 +0000 (19:41 -0400)] 
Merge pull request #1035 in SNORT/snort3 from binder_network to master

Squashed commit of the following:

commit 041547dffaf5917fe101a9a810e88ded96169ea6
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Mon Oct 9 10:39:04 2017 -0400

    ftp_server: changed ftp_server usage to INSPECT

commit 856b3a7fcce40f00db1d46e0a275f5d67dc4ba1d
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Fri Oct 6 14:52:57 2017 -0400

    binder: fixed nets check falling through on failure

commit cbaa8d55b0bb4951de69b3ac09e787854719ce4c
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Thu Oct 5 17:29:10 2017 -0400

    ModuleManager: don't let context modules be configured if a network policy does not exist

commit 23abcc667ce19e27074c2e63edf830c2652b3f7a
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Thu Oct 5 17:05:12 2017 -0400

    snort2lua: added ips-policy-pattern. config binding adds ips and network for ips policy matches.

commit a072c09b513b2674e5c40ec4263e75e85d51e410
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Wed Oct 4 16:45:16 2017 -0400

    binder: added network policy selection

7 years agoMerge pull request #1036 in SNORT/snort3 from tunnel_225582 to master
Tom Peters (thopeter) [Mon, 9 Oct 2017 15:13:21 +0000 (11:13 -0400)] 
Merge pull request #1036 in SNORT/snort3 from tunnel_225582 to master

Squashed commit of the following:

commit e9cc0d0af2059cb6aa589d8818bf4cac54738620
Author: Steven Baigal <sbaigal@cisco.com>
Date:   Tue Oct 3 14:59:25 2017 -0400

    updated DAQ stats to include retry verdict  peg count

commit 37cf28a584f43f093fbeec23baa9429257427304
Author: Steven Baigal <sbaigal@cisco.com>
Date:   Mon Sep 25 15:14:23 2017 -0400

    added tunnel bypass for IP 4IN4, IP 6IN6, GRE and MPLS

7 years agoMerge pull request #1037 in SNORT/snort3 from nhttp92 to master
Tom Peters (thopeter) [Mon, 9 Oct 2017 14:32:51 +0000 (10:32 -0400)] 
Merge pull request #1037 in SNORT/snort3 from nhttp92 to master

Squashed commit of the following:

commit e4eedc6d287ad3a66e5e47f5bf2144fb417669d1
Author: Tom Peters <thopeter@cisco.com>
Date:   Wed Oct 4 14:15:14 2017 -0400

    http_inspect: add random increment to message body division points

    stream: random increment fix

7 years agoMerge pull request #1031 in SNORT/snort3 from binder_zones to master
Michael Altizer (mialtize) [Fri, 6 Oct 2017 21:00:39 +0000 (17:00 -0400)] 
Merge pull request #1031 in SNORT/snort3 from binder_zones to master

Squashed commit of the following:

commit 08bd025019ff9a61a035fc9f8faa99d48bc6f132
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Fri Oct 6 10:46:02 2017 -0400

    fixed build issues on OSX

commit 5bb5412170ab5c01714a71fd01b762883899e71d
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Tue Oct 3 15:47:59 2017 -0400

    snort2lua: removed port dce proxy bindings to fix http_inspect conflicts

commit 54a5be5daf20ce10fc404b92d897b3a4c700dd1d
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Fri Sep 29 12:12:55 2017 -0400

    snort2lua: added nap.rules zone translation

commit c09df9d2a008f0e319f697de41dd86cc14396657
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Thu Oct 5 08:56:05 2017 -0400

    binder: check interface on packet instead of flow

commit b6f365f960d42b97ebf7b396508699e0c2670b09
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Thu Sep 28 15:37:13 2017 -0400

    binder: added zones

7 years agoMerge pull request #1034 in SNORT/snort3 from if2assert_251800 to master
Tom Peters (thopeter) [Fri, 6 Oct 2017 16:12:59 +0000 (12:12 -0400)] 
Merge pull request #1034 in SNORT/snort3 from if2assert_251800 to master

Squashed commit of the following:

commit d1f2850d339775f8277838e434ca3d2c515c2e1f
Author: Steven Baigal <sbaigal@cisco.com>
Date:   Wed Oct 4 12:43:25 2017 -0400

    changed if(> 0) to assert(> 0) for all concurrent_sessions peg counts

7 years agoMerge pull request #1030 in SNORT/snort3 from cleanup to master
Michael Altizer (mialtize) [Thu, 5 Oct 2017 19:25:18 +0000 (15:25 -0400)] 
Merge pull request #1030 in SNORT/snort3 from cleanup to master

Squashed commit of the following:

commit f35eaf6b9fc5d654dd428ca0ea99a0e17eddb8b1
Author: Michael Altizer <mialtize@cisco.com>
Date:   Thu Oct 5 13:53:35 2017 -0400

    build: Add an initial clang-tidy configuration

commit 9a07c7fcdd9b3dfeffb0c34eecd870c1b073b51d
Author: Michael Altizer <mialtize@cisco.com>
Date:   Thu Oct 5 14:01:10 2017 -0400

    build: Second pass of clang-tidy's modernize-use-equals-default

commit 36d9894e859ce7d7fb5ffdaebd3848d1f934f960
Author: Michael Altizer <mialtize@cisco.com>
Date:   Wed Oct 4 10:45:16 2017 -0400

    build: Remove all default destructor declarations

commit e6d34a254be93625da190a5909a7d0a01c4ecabb
Author: Michael Altizer <mialtize@cisco.com>
Date:   Mon Oct 2 19:55:24 2017 -0400

    build: Fix linking against external libiconv with autotools

commit 1eed9487c95085deba42c18dd093f9796d6c6131
Author: Michael Altizer <mialtize@cisco.com>
Date:   Sun Oct 1 12:40:26 2017 -0400

    build: More redundancy cleanups

    Generated automatically with run-clang-tidy.py
    -header-filter="$(realpath ..)" -checks='-*,readability-redundant-*'
    -fix.

commit 6b73e322fba1e252770fd9dc4e4d62f5b71c0642
Author: Michael Altizer <mialtize@cisco.com>
Date:   Sun Oct 1 12:28:35 2017 -0400

    build: Remove redundant declarations

    Generated automatically with run-clang-tidy.py
    -header-filter="$(realpath ..)"
    -checks='-*,readability-redundant-declaration' -fix.

commit 09715d923afad0592f23dea741cca11a1a1fbf78
Author: Michael Altizer <mialtize@cisco.com>
Date:   Sun Oct 1 12:23:56 2017 -0400

    build: Remove redundant flow control statements

    Generated automatically with run-clang-tidy.py
    -header-filter="$(realpath ..)"
    -checks='-*,readability-redundant-control-flow' -fix.

commit 37c2e606b84aef1f765657b6bd1405ce96c124e6
Author: Michael Altizer <mialtize@cisco.com>
Date:   Sun Oct 1 12:19:38 2017 -0400

    build: Make some more function parameters const

    Informed by un-clang-tidy.py -header-filter="$(realpath ..)"
    -checks='-*,readability-non-const-parameter'.

commit 92b7fd10c4d0ddd521df092592bfc18e9044d4d6
Author: Michael Altizer <mialtize@cisco.com>
Date:   Sun Oct 1 11:52:38 2017 -0400

    build: Do not use size() to check containers for emptiness

    Generated automatically with run-clang-tidy.py
    -header-filter="$(realpath ..)"
    -checks='-*,readability-container-size-empty' -fix.

commit 198636c4663f59bbdae5e5624a0c802fa2b3c8db
Author: Michael Altizer <mialtize@cisco.com>
Date:   Sun Oct 1 11:43:12 2017 -0400

    build: Do not use compare() for pure string equality tests

    Informed by run-clang-tidy.py -header-filter="$(realpath ..)"
    -checks='-*,misc-string-compare'.

commit 497609441dd1f626434f6f039b57730bc2a3a7b4
Author: Michael Altizer <mialtize@cisco.com>
Date:   Sat Sep 30 17:08:47 2017 -0400

    build: Improve macro safety with parentheses

    Generated automatically with run-clang-tidy.py
    -header-filter="$(realpath ..)" -checks='-*,misc-macro-parentheses'
    -fix.

commit a44cdadf99bcb6ee0b12641ddb16d9ab04451629
Author: Michael Altizer <mialtize@cisco.com>
Date:   Sat Sep 30 16:48:30 2017 -0400

    build: Fix a couple instances of undefined memset behavior

    Reported by run-clang-tidy.py -header-filter="$(realpath ..)"
    -checks='-*,bugprone-*'.

commit cae0cc697d7a4614ad24c9f253193a6cbd37f4e1
Author: Michael Altizer <mialtize@cisco.com>
Date:   Sat Sep 30 16:26:05 2017 -0400

    build: Some language performance cleanups suggested by Clang

    Informed by run-clang-tidy.py -header-filter="$(realpath ..)"
    -checks='-*,performance-*' -fix

commit 79c3b608e997e440de2c22e6d9ef1e1189994f8b
Author: Michael Altizer <mialtize@cisco.com>
Date:   Sat Sep 30 16:17:30 2017 -0400

    build: Make more string arguments into const references

commit b20e1e7ed64757efde9711c2c773915f749714ec
Author: Michael Altizer <mialtize@cisco.com>
Date:   Sat Sep 30 15:24:57 2017 -0400

    build: Modernize code with =default for special member functions

    Generated automatically with run-clang-tidy.py
    -header-filter="$(realpath ..)" -checks='-*,modernize-use-equals-default
    -fix

commit cf3d5440d22465b26b33ef15777bc1fa9d01dbc5
Author: Michael Altizer <mialtize@cisco.com>
Date:   Sat Sep 30 14:27:49 2017 -0400

    build: Modernize code with boolean literals

    Generated automatically with run-clang-tidy.py
    -header-filter="$(realpath ..)" -checks='-*,modernize-use-bool-literals'
    -fix

commit 63ba30a1d8e17a8296078931a0ae6980ac09204b
Author: Michael Altizer <mialtize@cisco.com>
Date:   Sat Sep 30 14:21:18 2017 -0400

    build: Modernize code by removing redundant void args

    Generated automatically with run-clang-tidy.py
    -header-filter="$(realpath ..)"
    -checks='-*,modernize-redundant-void-arg'

commit 8b011f9ac133492facc66223f6b9ad8b07bd7943
Author: Michael Altizer <mialtize@cisco.com>
Date:   Sat Sep 30 14:16:11 2017 -0400

    build: Modernize code with make_shared conversion

    Generated automatically with run-clang-tidy.py
    -header-filter="$(realpath ..)" -checks='-*,modernize-make-shared' -fix.

commit 7e20f0fa31915690207bbdff886414ca280e7e91
Author: Michael Altizer <mialtize@cisco.com>
Date:   Sat Sep 30 12:30:50 2017 -0400

    build: Fix many warnings reported by Clang 5

commit 32b8843706f549c911091c36a3408c913f9360a5
Author: Michael Altizer <mialtize@cisco.com>
Date:   Sat Sep 30 14:07:33 2017 -0400

    build: Header cleanup (feat. clang-tidy)

    Assisted by run-clang-tidy.py -header-filter="$(realpath ..)"
    -checks='-*,modernize-deprecated-headers' -fix.

commit 4f9a94abcc40f12f9424384082e4fdcc250c6152
Author: Michael Altizer <mialtize@cisco.com>
Date:   Sat Sep 30 12:55:40 2017 -0400

    build: Modernize code with virtual/override/final cleanups

    Generated automatically with run-clang-tidy.py -header-filter='.*'
    -checks='-*,modernize-use-override' -fix.

commit 678d1f53b78f400c5b1915d74353ded1399cd101
Author: Michael Altizer <mialtize@cisco.com>
Date:   Sat Sep 30 12:38:56 2017 -0400

    build: Modernize code with nullptr conversion

    Generated automatically with run-clang-tidy.py -header-filter='.*'
    -checks='-*,modernize-use-nullptr' -fix.

7 years agoMerge pull request #1033 in SNORT/snort3 from appid_failing_reg_tests to master
Tom Peters (thopeter) [Wed, 4 Oct 2017 18:34:31 +0000 (14:34 -0400)] 
Merge pull request #1033 in SNORT/snort3 from appid_failing_reg_tests to master

Squashed commit of the following:

commit c4acd3948029d51d4ae934b1517e1e5ab4627b7e
Author: davis mcpherson <davmcphe.cisco.com>
Date:   Mon Oct 2 08:32:40 2017 -0400

    service applications detected by port only were not be counted, this patch adds stat increment for service detections for this scenario

7 years agoMerge pull request #1029 in SNORT/snort3 from appid_ftp_fix to master
Tom Peters (thopeter) [Tue, 3 Oct 2017 14:43:18 +0000 (10:43 -0400)] 
Merge pull request #1029 in SNORT/snort3 from appid_ftp_fix to master

Squashed commit of the following:

commit 56913ed293e26aa97b4e2942b8797dfb214699a7
Author: snorty <mdagon@cisco.com>
Date:   Thu Sep 28 12:01:11 2017 -0400

    Appid ftp: create exptected flow immediately after PORT command for active mode

7 years agoMerge pull request #1027 in SNORT/snort3 from snort2lua_ims to master
Michael Altizer (mialtize) [Fri, 29 Sep 2017 15:53:42 +0000 (11:53 -0400)] 
Merge pull request #1027 in SNORT/snort3 from snort2lua_ims to master

Squashed commit of the following:

commit 9fe6d6a02b6e82834cbfd2f0c1ebf85f04c066ab
Author: Michael Altizer <mialtize@cisco.com>
Date:   Thu Sep 28 13:52:59 2017 -0400

    appid: Fix performance issues reported by cppcheck

commit aafb9275f17aa4ef91250402751ee80185f41c68
Author: Michael Altizer <mialtize@cisco.com>
Date:   Thu Sep 28 13:49:44 2017 -0400

    memory: Align allocator metadata such that returned memory is also max_align_t-aligned

commit feca8e5d4dbd0a08854f534287d2a45b98fd3a5d
Author: Michael Altizer <mialtize@cisco.com>
Date:   Thu Sep 28 01:13:27 2017 -0400

    build: Clean up a few ICC 2018 and GCC 7 warnings

commit 9532792af8405365856ee56b0c6416c0c231bc4d
Author: Michael Altizer <mialtize@cisco.com>
Date:   Thu Sep 28 01:09:29 2017 -0400

    build: Add NORETURN_ASSERT to tag functions that will always assert

commit 4df0a1d9f5079474d46f757b28c3621157d8d05b
Author: Michael Altizer <mialtize@cisco.com>
Date:   Thu Sep 28 00:29:36 2017 -0400

    uboat,fbstreamer: Fix issues reported by cppcheck

commit 2152f1ab13736173c7bd3d029fa5294a4b22edfd
Author: Michael Altizer <mialtize@cisco.com>
Date:   Thu Sep 28 00:21:55 2017 -0400

    snort2lua: Fix various issues reported by cppcheck

commit d2fa14de02578809294926a981c70d9a4554f0cf
Author: Michael Altizer <mialtize@cisco.com>
Date:   Wed Sep 27 15:30:37 2017 -0400

    snort2lua: Fix initialization order in Converter constructor

commit 26ae4d24ab624c4d0874ae0ab9ca97587d339cde
Author: Michael Altizer <mialtize@cisco.com>
Date:   Wed Sep 20 16:29:59 2017 -0400

    log/messages: Redirect stderr to syslog as well

commit 39bd64bee437f935650af17ac39f6bbbd6c840ac
Author: Michael Altizer <mialtize@cisco.com>
Date:   Wed Sep 20 12:38:00 2017 -0400

    snort2lua: Implement firewall preproc and sfunified2 output conversions

7 years agoMerge pull request #1023 in SNORT/snort3 from s2l_nap to master
Michael Altizer (mialtize) [Wed, 27 Sep 2017 18:07:27 +0000 (14:07 -0400)] 
Merge pull request #1023 in SNORT/snort3 from s2l_nap to master

Squashed commit of the following:

commit 5e656382f62b51480b5b1c363e16d53a8ed985d1
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Tue Sep 26 08:53:33 2017 -0400

    snort2lua: refactored TableApi

commit 89e936eabcd80bb3a866b92a94aa1fb8671ec6fe
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Thu Sep 21 17:08:30 2017 -0400

    snort2lua: fixed extra whitespace generation

commit 1d886319fb648154b5f72ac5613cb71de19c927d
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Wed Sep 20 08:52:46 2017 -0400

    snort2lua: added nap_selector support

7 years agoMerge pull request #1026 in SNORT/snort3 from nhttp91 to master
Tom Peters (thopeter) [Tue, 26 Sep 2017 19:21:55 +0000 (15:21 -0400)] 
Merge pull request #1026 in SNORT/snort3 from nhttp91 to master

Squashed commit of the following:

commit f19b7390fe12eac6f9b3525a181384e353dae217
Author: Tom Peters <thopeter@cisco.com>
Date:   Mon Sep 25 17:02:31 2017 -0400

    http_inspect: test tool improvements

7 years agoMerge pull request #1022 in SNORT/snort3 from snort_daq_packet_retry to master
Russ Combs (rucombs) [Mon, 25 Sep 2017 23:38:06 +0000 (19:38 -0400)] 
Merge pull request #1022 in SNORT/snort3 from snort_daq_packet_retry to master

Squashed commit of the following:

commit c5eaf9f5a8d381a829df5e159eae3fed26309171
Author: davis mcpherson <davmcphe.cisco.com>
Date:   Thu Aug 10 15:01:28 2017 -0400

    implement snort support for DAQ_VERDICT_RETRY feature

    add reg test inspector to facilitate regression testing, initially for the daq packet retry feature

    add reg test inspector service to facilated regression testing of snort++

    limit check of chp match strings to clear to the ones that may have actually been set during chp processing

7 years agoMerge pull request #1019 in SNORT/snort3 from readme_email to master
Tom Peters (thopeter) [Mon, 25 Sep 2017 19:33:35 +0000 (15:33 -0400)] 
Merge pull request #1019 in SNORT/snort3 from readme_email to master

Squashed commit of the following:

commit d0b5a5444cb4f89b8d00a0335bf9d32a23f86a50
Author: Steven Baigal <sbaigal@cisco.com>
Date:   Wed Sep 20 15:28:36 2017 -0400

    added POP, IMAP and SMTP to user manual features

7 years agoMerge pull request #1025 in SNORT/snort3 from nhttp90 to master
Tom Peters (thopeter) [Mon, 25 Sep 2017 17:54:32 +0000 (13:54 -0400)] 
Merge pull request #1025 in SNORT/snort3 from nhttp90 to master

Squashed commit of the following:

commit 43ec1af54b6fc6cacf77da97e687fc6f1877f83a
Author: Tom Peters <thopeter@cisco.com>
Date:   Thu Sep 14 13:17:29 2017 -0400

    http_inspect, stream: HTTP headers no longer avoid detection when message unexpectedly
    ends after status line or headers

7 years agoMerge pull request #1017 in SNORT/snort3 from binder_direction to master
Michael Altizer (mialtize) [Mon, 25 Sep 2017 16:03:16 +0000 (12:03 -0400)] 
Merge pull request #1017 in SNORT/snort3 from binder_direction to master

Squashed commit of the following:

commit 4cd912df8cfa19769b83058243cd227bf24a693b
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Tue Sep 19 10:35:10 2017 -0400

    Binder: allow src and dst specifications for ports and nets

7 years agoMerge pull request #1024 in SNORT/snort3 from appid_rtp_test to master
Tom Peters (thopeter) [Mon, 25 Sep 2017 15:12:14 +0000 (11:12 -0400)] 
Merge pull request #1024 in SNORT/snort3 from appid_rtp_test to master

Squashed commit of the following:

commit f7991c80e3f45ecac034bcf707b406f7f382e85f
Author: snorty <mdagon@cisco.com>
Date:   Fri Sep 22 13:58:54 2017 -0400

    Remove blank lines

commit be685b9241b9c77e605ee8af700752fa66ec9fd6
Author: snorty <mdagon@cisco.com>
Date:   Fri Sep 22 10:46:38 2017 -0400

    Fix typo

commit 63ae375359c37be88f31e3f39183293aa7c8e930
Author: snorty <mdagon@cisco.com>
Date:   Wed Sep 13 14:31:35 2017 -0400

    Appid RTP flow flags (changes commented out)+ small fix

7 years agoMerge pull request #1021 in SNORT/snort3 from firewall_memleak1 to master
Russ Combs (rucombs) [Fri, 22 Sep 2017 13:41:53 +0000 (09:41 -0400)] 
Merge pull request #1021 in SNORT/snort3 from firewall_memleak1 to master

Squashed commit of the following:

commit 25d9fcb917501bd63ed0b46633803c66a0ad4c71
Author: Steve Chew <stechew@cisco.com>
Date:   Thu Sep 21 15:25:33 2017 -0400

    Return nullptr from ApplicationDescriptor get funcs when string is empty.

7 years agoMerge pull request #1006 in SNORT/snort3 from smb_unicode_fname to master
Russ Combs (rucombs) [Fri, 22 Sep 2017 13:41:28 +0000 (09:41 -0400)] 
Merge pull request #1006 in SNORT/snort3 from smb_unicode_fname to master

Squashed commit of the following:

commit aec151308a6b538db68baddeec1a09b956849993
Author: snorty <mdagon@cisco.com>
Date:   Wed Sep 20 17:40:48 2017 -0400

    Missed 2 files

commit 31c622a7fba16becbf5f6b24ce490e4a36cecb78
Author: snorty <mdagon@cisco.com>
Date:   Tue Sep 19 15:19:46 2017 -0400

    Additional changes from Michael's branch - cmake changes for iconv + additional improvements

commit 3758b4d8604c1b1fafce1138942b8f8f20c58ec3
Author: Michael Altizer <mialtize@cisco.com>
Date:   Fri Sep 15 14:47:57 2017 -0400

    build: Import iconv autotools logic from gnulib

commit ef23d1dabc7326091010988a6e0aa0cb936bcc5f
Author: mdagon <mdagon@cisco.com>
Date:   Mon Jul 24 10:29:15 2017 -0400

    SMB unicode filename support

    1. iconv is used for translating UTF16-LE file names to UTF8.
    2. Smb will add BOM to file name in case it is Unicode.
    3. Translation will be done in file_api during logging.
    4. Active response was updated to keep the same format of the original file name.
    5. File api was updated to use pipe-delimited hex for file names:
       printable text will show up as plain text and any 8-bit chars as hex
    6. Full file name, including path, will be logged, instead of only the file name
    7. NHI will send raw uri instead of normalized uri to file api

7 years agoMerge pull request #1020 in SNORT/snort3 from typos to master
Russ Combs (rucombs) [Thu, 21 Sep 2017 13:54:47 +0000 (09:54 -0400)] 
Merge pull request #1020 in SNORT/snort3 from typos to master

Squashed commit of the following:

commit 764e7cd1cfa055c6d0e92a0af6ed2727ec925317
Author: Russ Combs <rucombs@cisco.com>
Date:   Thu Sep 21 08:37:40 2017 -0400

    spell check: fix typos in comments

7 years agoMerge pull request #1014 in SNORT/snort3 from policy_split to master
Russ Combs (rucombs) [Wed, 20 Sep 2017 18:05:41 +0000 (14:05 -0400)] 
Merge pull request #1014 in SNORT/snort3 from policy_split to master

Squashed commit of the following:

commit 0770342be4f4da6ec65d0719ba97b39d6f96b464
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Tue Sep 19 11:26:00 2017 -0400

    unified2: implemented ips, network, and inspection policy id logging

commit c2ecc2df0f84a87bc9ed76b7815096013fda8c55
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Mon Sep 18 13:04:16 2017 -0400

    appid pop3, appid imap: fixed missing include

commit c01713fbe13151f5b9d2f7519f916a104eb5e3fd
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Thu Sep 14 13:06:20 2017 -0400

    snort2lua: config policy_id converts to when ips_policy_id

    This is an interim support to generate loadable configs until
    proper ips / network / inspection differentiation is added.

commit 22147f8cd90ec44794aa3089fbc5308d86a20339
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Thu Sep 14 11:35:11 2017 -0400

    Shell: force default policies for shells not from binder

commit b50ea6e9dfff279c80427fd806341d578f32feca
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Wed Aug 30 13:50:19 2017 -0400

    Binder, Flow, PolicyMap, Shell: enabled policy splitting by type

7 years agoMerge pull request #1016 in SNORT/snort3 from appid1 to master
Hui Cao (huica) [Tue, 19 Sep 2017 19:55:25 +0000 (15:55 -0400)] 
Merge pull request #1016 in SNORT/snort3 from appid1 to master

Squashed commit of the following:

commit b158a2712ae7a41e8b2fac760358c209f6378a0d
Author: Steve Chew <stechew@cisco.com>
Date:   Fri Sep 15 18:06:20 2017 -0400

    Install the appid_api.h header to be used by FirewallInspector module.

7 years agoMerge pull request #1018 in SNORT/snort3 from appid_broke_cmake to master
Russ Combs (rucombs) [Tue, 19 Sep 2017 18:00:57 +0000 (14:00 -0400)] 
Merge pull request #1018 in SNORT/snort3 from appid_broke_cmake to master

Squashed commit of the following:

commit 3a7c7be3c9f97243ae4c4e8e868acc6e028704c1
Author: davis mcpherson <davmcphe.cisco.com>
Date:   Tue Sep 19 12:14:54 2017 -0400

    ad appid_peg_counts.cc to lib dependency list for appid http event unit tests

7 years agoMerge pull request #1015 in SNORT/snort3 from log_id_offset to master
Michael Altizer (mialtize) [Mon, 18 Sep 2017 14:49:44 +0000 (10:49 -0400)] 
Merge pull request #1015 in SNORT/snort3 from log_id_offset to master

Squashed commit of the following:

commit c2acd9a9e3389c7ef48ac593ffebfc8b4d4b530e
Author: Michael Altizer <mialtize@cisco.com>
Date:   Fri Sep 15 12:27:05 2017 -0400

    thread: Add logging directory ID offset controlled by --id-offset option

7 years agoMerge pull request #1013 in SNORT/snort3 from nhttp89 to master
Tom Peters (thopeter) [Thu, 14 Sep 2017 20:33:10 +0000 (16:33 -0400)] 
Merge pull request #1013 in SNORT/snort3 from nhttp89 to master

Squashed commit of the following:

commit 5823a745323181eea49a7accc3dce9db76a131aa
Author: Tom Peters <thopeter@cisco.com>
Date:   Mon Sep 11 17:19:02 2017 -0400

    http_inspect: alphabetical ordering of rule options

7 years agoMerge pull request #1008 in SNORT/snort3 from appid_enhance_stats to master
Tom Peters (thopeter) [Thu, 14 Sep 2017 18:26:26 +0000 (14:26 -0400)] 
Merge pull request #1008 in SNORT/snort3 from appid_enhance_stats to master

Squashed commit of the following:

commit 1c37bb2c08789f3f49c8d38bddbdfafd58cea9d2
Author: davis mcpherson <davmcphe.cisco.com>
Date:   Sun Sep 3 16:47:04 2017 -0400

    appid: this commit implements several enhancements to AppId peg counts
    1) the entries in the appMapping.data file are used to dynamically
    generate a vector of the PegInfo and PegCounts for each application that AppId can
    detect. These dynamically generated pegs are merged with a table of
    static pegs for counts of other AppId events worth noting and the
    combined table returned to Module when it queries for PegInfo and
    PegCounts.  The application name from each entry is used as the label
    for the peg counts and to construct the help string.  For each id a
    count is maintained for service, client, user, payload, and misc
    detections.
    2) Since the dynamic table can not be built until AppId is configured
    the Module class was modified to not make the calls to collect PegInfo
    and initialize the peg count data structures as each module is added.
    Instead the call to do this is done from Snort::init after Inspectors
    have been configured.
    3) AppId now increments its detection counts in the base class method
    that is call for each type of detected app (service, client, payload,
    user, misc) and is only incremented when the id of the detected app is
    different the current setting for that type.
    4) refactor AppIdSession to create a new class ApplicationDescriptor and
    derived classes for each application id type (client and user info are
    maintained by a single class).  These classes maintain the
    id and related state for each type have the logic for updating the state
    and the detection counts when appropriate.
    5) Create new class AppIdPegCounts to manage the PegInfo and PegCounts
    tables and functions for incrementing the peg statistics

    Miscellaneous updates:
    - numerous updates to improve compliance with coding standards and
      improve readability
    - use AppId enum type for all variables and paremeters that represent an
      application id
    - appid_stats_counter.cc no longer need and has been deleted
    - numerous instances of redundant calls to set AppId session state
      information have been removed
    - update appid unit tests to work with stats enhancements
    - update appid regression tests to work with stats enhancements

    move detectors configured state variable to AppIdPegCounts class, add method to set it true when detectors are loaded

    move AppId peg count enums into AppIdPegCounts class

7 years agoMerge pull request #1010 in SNORT/snort3 from sfipvar to master
Tom Peters (thopeter) [Tue, 12 Sep 2017 20:10:06 +0000 (16:10 -0400)] 
Merge pull request #1010 in SNORT/snort3 from sfipvar to master

Squashed commit of the following:

commit ab4b16bd7105fd064071f251dd72ee00918ec263
Author: Steven Baigal <sbaigal@cisco.com>
Date:   Fri Sep 8 15:50:00 2017 -0400

    Made Improvements to SFIPVar list performance and added unit test cases

7 years agoMerge pull request #1012 in SNORT/snort3 from file_lib_fix to master
Tom Peters (thopeter) [Tue, 12 Sep 2017 19:58:06 +0000 (15:58 -0400)] 
Merge pull request #1012 in SNORT/snort3 from file_lib_fix to master

Squashed commit of the following:

commit 7ac239558ebe5f37a6e96efa3e5ab01f39bfee7f
Author: Steven Baigal <sbaigal@cisco.com>
Date:   Tue Sep 12 13:35:55 2017 -0400

    refix the fix on valgrind error for null terminator overwritten issue

7 years agoMerge pull request #1011 in SNORT/snort3 from file_lib_fix to master
Michael Altizer (mialtize) [Mon, 11 Sep 2017 21:05:14 +0000 (17:05 -0400)] 
Merge pull request #1011 in SNORT/snort3 from file_lib_fix to master

Squashed commit of the following:

commit e23f9254f747db77ad1263800810cb2cd3ae9715
Author: Steven Baigal <sbaigal@cisco.com>
Date:   Mon Sep 11 15:08:58 2017 -0400

    Fixed a valgrind error -- null terminator overwritten when length equals 8

7 years agoMerge pull request #1009 in SNORT/snort3 from nhttp88 to master
Tom Peters (thopeter) [Mon, 11 Sep 2017 17:15:10 +0000 (13:15 -0400)] 
Merge pull request #1009 in SNORT/snort3 from nhttp88 to master

Squashed commit of the following:

commit ff9037908b697cda3c847d25a91427526a7305d6
Author: Tom Peters <thopeter@cisco.com>
Date:   Fri Sep 8 15:35:46 2017 -0400

    http_inspect: added http_raw_buffer rule option

7 years agoSquashed commit of the following:
Russ Combs [Sun, 10 Sep 2017 02:36:17 +0000 (22:36 -0400)] 
Squashed commit of the following:

commit 929661c23d43af57f00a98a9df5046960187d526
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Sep 9 10:04:58 2017 -0400

    build: fix noreturn and unused warnings

commit 03230ffb0c7b45800f8368a4009dbb5b82b34671
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Sep 9 15:29:47 2017 -0400

    memory: patch around allocation tracking issue

commit 9436ba425e2fa1669ef35046d4a1337b33068652
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Sep 9 10:03:27 2017 -0400

    memory: remove canary from production builds to reduce overhead

commit 7fadd3d35b6c19fb42e3809db384db4828497f7e
Author: Russ Combs <rucombs@cisco.com>
Date:   Mon Sep 4 18:28:25 2017 -0400

    memory: output basic startup heap stats

7 years agoMerge pull request #1005 in SNORT/snort3 from rule_dependencies to master
Russ Combs (rucombs) [Sat, 9 Sep 2017 15:00:00 +0000 (11:00 -0400)] 
Merge pull request #1005 in SNORT/snort3 from rule_dependencies to master

Squashed commit of the following:

commit acc68fe935fed33c263f355d08320c770bb06cdb
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Fri Aug 25 16:21:58 2017 -0400

    sip: sip_method can use data from any sip inspector of any inspection policy

7 years agoMerge pull request #1007 in SNORT/snort3 from nhttp87 to master
Tom Peters (thopeter) [Fri, 8 Sep 2017 14:27:09 +0000 (10:27 -0400)] 
Merge pull request #1007 in SNORT/snort3 from nhttp87 to master

Squashed commit of the following:

commit 811c4224c6f048f55319a95efef7402a3f079b10
Author: Tom Peters <thopeter@cisco.com>
Date:   Wed Aug 30 14:26:08 2017 -0400

    http_inspect support for u2 extra data logging

7 years agoMerge pull request #1003 in SNORT/snort3 from appid_lua_detectors to master
Tom Peters (thopeter) [Tue, 5 Sep 2017 20:25:04 +0000 (16:25 -0400)] 
Merge pull request #1003 in SNORT/snort3 from appid_lua_detectors to master

Squashed commit of the following:

commit d6a01cdeb7716a02aeb45007cba39d928d223675
Author: davis mcpherson <davmcphe.cisco.com>
Date:   Tue Aug 29 08:05:04 2017 -0400

    hard code use of 'ac_full' as search method for search engine for appid

    select 'ac_full' as search method for appid for now as it is the only one that supports 'find_all', also force enable dfa flag in search engine, improve encapsulation of appid pattern match service class

7 years agoMerge pull request #1004 in SNORT/snort3 from xcode to master
Russ Combs (rucombs) [Fri, 1 Sep 2017 17:25:44 +0000 (13:25 -0400)] 
Merge pull request #1004 in SNORT/snort3 from xcode to master

Squashed commit of the following:

commit 657e650852af9bc8a0c39dc986aa94edc1364f21
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Sep 1 09:02:29 2017 -0400

    analyzer: fix possible leak upon appid info table entry dup

commit ade6ed67f5602ffca18447d0b0ac1ad67da4fcd9
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Sep 1 08:50:07 2017 -0400

    analyzer: fix possible memory leak in side channel

commit 27a9d0a40ec991b938d1f801b32e7fb9fb507ea8
Author: Russ Combs <rucombs@cisco.com>
Date:   Thu Aug 31 19:46:22 2017 -0400

    analyzer: fix missing braces around subobj initialization in flow key

7 years agoMerge pull request #1002 in SNORT/snort3 from sum_stuff to master
Russ Combs (rucombs) [Thu, 31 Aug 2017 16:53:59 +0000 (12:53 -0400)] 
Merge pull request #1002 in SNORT/snort3 from sum_stuff to master

Squashed commit of the following:

commit 322d34f0cc28f97723877caa123853b9c93929b8
Author: Russ Combs <rucombs@cisco.com>
Date:   Tue Aug 29 09:58:51 2017 -0400

    doc: add module usage and peg count type

commit fc9228831b4d5947e5f79470c5ce2aab1b178c16
Author: Russ Combs <rucombs@cisco.com>
Date:   Tue Aug 29 09:37:08 2017 -0400

    modules: add usage designating global, context, inspect, or detect policy applicability

commit 71854c80f788d5419488cd08329b12284c427a5a
Author: Russ Combs <rucombs@cisco.com>
Date:   Mon Aug 28 20:42:55 2017 -0400

    stats: use peg info to accumulate by type

commit 8ce4e18e7035c13101663aa429ae3004824bc7d5
Author: Russ Combs <rucombs@cisco.com>
Date:   Sun Aug 27 19:16:12 2017 -0400

    pegs: add count type to info

commit 84348164529f752b20e5cad3e507454192332e4b
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Aug 19 15:48:21 2017 -0400

    snort2lua: search_engine.split_any_any now defaults to true

commit 2b4a49c31e965c6d493c3683fc8a0f1283f45656
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Aug 19 15:23:14 2017 -0400

    snort: -T does not compile mpse; --mem-check does

7 years agoMerge pull request #1001 in SNORT/snort3 from unified4 to master
Hui Cao (huica) [Tue, 29 Aug 2017 19:49:12 +0000 (15:49 -0400)] 
Merge pull request #1001 in SNORT/snort3 from unified4 to master

Squashed commit of the following:

commit b7a3b06b5d87fdbe3a920d0f96469b2131c9146a
Author: Steve Chew <stechew@cisco.com>
Date:   Tue Aug 29 08:50:17 2017 -0400

    Install sfdaq.h and application_ids.h needed by Firewall changes.

7 years agoMerge pull request #1000 in SNORT/snort3 from appid_lua_api to master
Tom Peters (thopeter) [Tue, 29 Aug 2017 19:21:11 +0000 (15:21 -0400)] 
Merge pull request #1000 in SNORT/snort3 from appid_lua_api to master

Squashed commit of the following:

commit 7b72de2271ba9a9e6d1ff5d6482a4c61911bb76c
Author: davis mcpherson <davmcphe.cisco.com>
Date:   Mon Aug 28 13:55:44 2017 -0400

    fix memory leak in http pattern matching, minor cleanups

7 years agoMerge pull request #995 in SNORT/snort3 from peg_max_conc_p2 to master
Tom Peters (thopeter) [Mon, 28 Aug 2017 20:38:09 +0000 (16:38 -0400)] 
Merge pull request #995 in SNORT/snort3 from peg_max_conc_p2 to master

Squashed commit of the following:

commit 92c5a4145ce11a5610b88afb3120a75d3354178e
Author: Steven Baigal <sbaigal@cisco.com>
Date:   Fri Aug 11 15:40:19 2017 -0400

    add peg count for max concurrent sessions - part2

7 years agoMerge pull request #999 in SNORT/snort3 from icmp6_key to master
Tom Peters (thopeter) [Mon, 28 Aug 2017 15:57:54 +0000 (11:57 -0400)] 
Merge pull request #999 in SNORT/snort3 from icmp6_key to master

Squashed commit of the following:

commit e32554194296dd73fe13ed6bf9b7754d0d988d67
Author: Steven Baigal <sbaigal@cisco.com>
Date:   Tue Aug 22 13:23:06 2017 -0400

    Updated to support associating router solicit/reply packets to a single session

8 years agoMerge pull request #998 in SNORT/snort3 from nhttp86-cleanups to master
Russ Combs (rucombs) [Fri, 25 Aug 2017 12:54:58 +0000 (08:54 -0400)] 
Merge pull request #998 in SNORT/snort3 from nhttp86-cleanups to master

Squashed commit of the following:

commit b408bba53c50afc7f7235ea914bbac87dadb3b71
Author: Tom Peters <thopeter@cisco.com>
Date:   Thu Aug 24 14:09:05 2017 -0400

    .

commit 8ee92a53acf58c2dfc829add2c663de2ba4419a6
Author: Tom Peters <thopeter@cisco.com>
Date:   Tue Jul 25 11:37:43 2017 -0400

    NHI bug fix plus cleaned up a bunch of stuff.

8 years agoMerge pull request #997 in SNORT/snort3 from port_table_cruft to master
Russ Combs (rucombs) [Fri, 25 Aug 2017 12:39:46 +0000 (08:39 -0400)] 
Merge pull request #997 in SNORT/snort3 from port_table_cruft to master

Squashed commit of the following:

commit d52c5cac7ed64dc56f80f2b78f10e065c88d1320
Author: Victor Roemer <viroemer@cisco.com>
Date:   Wed Aug 23 15:42:04 2017 -0400

    snort: disallow invalid port range !:65535 (!any)

commit dd620176da4daaccee9a56827f00d2a0e73bcfd3
Author: Victor Roemer <viroemer@cisco.com>
Date:   Wed Aug 23 15:01:02 2017 -0400

    snort: remove port object cruft

8 years agoMerge pull request #996 in SNORT/snort3 from warnings to master
Michael Altizer (mialtize) [Mon, 21 Aug 2017 22:11:58 +0000 (18:11 -0400)] 
Merge pull request #996 in SNORT/snort3 from warnings to master

Squashed commit of the following:

commit 74780ac195a4bd913c9eda6a0c6d9d14698f431d
Author: Michael Altizer <mialtize@cisco.com>
Date:   Fri Aug 18 16:16:13 2017 -0400

    build: Clean up some more compiler warnings and remove spurious tabs

8 years agoSquashed commit of the following:
Russ Combs [Sat, 19 Aug 2017 02:24:02 +0000 (22:24 -0400)] 
Squashed commit of the following:

commit ee787c62ce89880b0dd6a0b2df06886f0e171e3b
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Aug 18 20:54:07 2017 -0400

    snort2lua: fix borked build broke by binder order

8 years agoMerge pull request #991 in SNORT/snort3 from binder_order to master
Michael Altizer (mialtize) [Fri, 18 Aug 2017 20:47:49 +0000 (16:47 -0400)] 
Merge pull request #991 in SNORT/snort3 from binder_order to master

Squashed commit of the following:

commit 0a44cace2f0cb9798caf59a9f6aba64f21c73de3
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Mon Aug 14 12:19:28 2017 -0400

    snort2lua: enforced ordering to bindings in binder table

commit 4d9a66aefe11ea13f20d2468fccfd140cb18df09
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Thu Aug 10 17:56:35 2017 -0400

    snort2lua: removed dead code

8 years agoMerge pull request #993 in SNORT/snort3 from nhttp85 to master
Tom Peters (thopeter) [Fri, 18 Aug 2017 19:22:27 +0000 (15:22 -0400)] 
Merge pull request #993 in SNORT/snort3 from nhttp85 to master

Squashed commit of the following:

commit f9f1973bb5bd6e38b5b2b974bb202396f048cb6f
Author: Tom Peters <thopeter@cisco.com>
Date:   Tue Aug 1 14:11:54 2017 -0400

    http_inspect: create message sections with body data that has been dechunked and unzipped but not otherwise nortmalized.

8 years agoMerge pull request #994 in SNORT/snort3 from elk to master
Russ Combs (rucombs) [Fri, 18 Aug 2017 14:53:04 +0000 (10:53 -0400)] 
Merge pull request #994 in SNORT/snort3 from elk to master

Squashed commit of the following:

commit 573659a4166f5e1c9583383d7bf0bddbee4472a5
Author: Russ Combs <rucombs@cisco.com>
Date:   Thu Aug 17 15:22:54 2017 -0400

    csv: updates

commit d566f6bb98497dd76baea1b88f451509a7291b96
Author: Russ Combs <rucombs@cisco.com>
Date:   Thu Aug 17 15:11:50 2017 -0400

    b64: updates

commit c25181487233e22511dcd7d5c2f06ba2ad6cf5a2
Author: Russ Combs <rucombs@cisco.com>
Date:   Wed Aug 16 13:45:31 2017 -0400

    appid: convert appid_stats.log from u2 to csv

commit c882db6d3c1901bb3f42e38f733cb70632f3139e
Author: Russ Combs <rucombs@cisco.com>
Date:   Wed Aug 16 11:48:23 2017 -0400

    configure: add --disable-stdlog for cases where logging alerts to file descriptor 3 is unhelpful

commit 6d3c8c3d4c365e8d99866ada71ecc1b039e2c00b
Author: Russ Combs <rucombs@cisco.com>
Date:   Wed Aug 16 11:22:48 2017 -0400

    cleanup: remove rogue HAVE_CONFIG_H from includes

commit d302999d9e784d6a6e2fe8e18514be33b2a3d470
Author: Russ Combs <rucombs@cisco.com>
Date:   Wed Aug 16 11:17:54 2017 -0400

    appid: tweak help for instance_id

commit 2b135326f84f4047aaef5336c7bc31948607d1d5
Author: Russ Combs <rucombs@cisco.com>
Date:   Mon Aug 14 12:56:28 2017 -0400

    stream_tcp: ensure max pdu is flushed by default splitter

commit 7f5eb5649c0f7012c518b5197c77c4b320407841
Author: Russ Combs <rucombs@cisco.com>
Date:   Sun Aug 13 20:39:22 2017 -0400

    unified2: log buffers as cooked packets with legacy events

commit 946b93bdb7aa35d23b259cb769e2eac940254ad7
Author: Russ Combs <rucombs@cisco.com>
Date:   Sun Aug 13 07:32:07 2017 -0400

    build: fix unused parameter warning

commit 4c7e0c61a43102c803c34ca22fe919e2998a941b
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Aug 12 16:05:10 2017 -0400

    conf: fix default classification capitalization

commit a9ccc441b02898f6c9e6471404ced30a1f17f312
Author: Russ Combs <rucombs@cisco.com>
Date:   Sun Aug 13 07:28:57 2017 -0400

    alert_csv: add vlan and mpls options

commit 666b46fd3a976da03840aedf93f5522a639e0de9
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Aug 12 10:25:32 2017 -0400

    alert_csv: add b64_data, rename dgm_len to pkt_len

commit 64889ec87c4a8c953742a7a828d968334439ef48
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Aug 12 10:24:04 2017 -0400

    loggers: add base64 encoder based on libb64 from devolve

commit dfb8e204bcc8d6232b51fdd47ef91ac5d4609f8d
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Aug 11 22:32:17 2017 -0400

    alert_csv: add class, priority, and service options

commit c39d12177bf9a4f304a2801dca1c4edb9b3b8f18
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Aug 11 22:32:01 2017 -0400

    loggers: use standard year/mon/day format

8 years agoMerge pull request #990 in SNORT/snort3 from port_reload_performance_fixes_2 to master
Russ Combs (rucombs) [Thu, 17 Aug 2017 17:59:29 +0000 (13:59 -0400)] 
Merge pull request #990 in SNORT/snort3 from port_reload_performance_fixes_2 to master

Squashed commit of the following:

commit 8c1d83e9188cc38480fbfc99c363608ecd4ca93b
Author: Victor Roemer <viroemer@cisco.com>
Date:   Thu Aug 17 08:58:02 2017 -0400

    snort: Use Debug::enable for runtime check

commit 1c5791908d3e286db0d25b57a1c9d556aad14883
Author: Victor Roemer <viroemer@cisco.com>
Date:   Wed Aug 16 14:36:05 2017 -0400

    snort: more review comments

commit b6c48d7096add2a9cc0df8af0b7877996b7ab470
Author: Victor Roemer <viroemer@cisco.com>
Date:   Wed Aug 16 09:20:15 2017 -0400

    snort3: update based on review comments

commit e1bd664d7cfd6766e98ddb39e715ceab2879d678
Author: Victor Roemer <viroemer@cisco.com>
Date:   Tue Aug 15 15:57:05 2017 -0400

    snort: move debug code into the ifdef DEBUG

commit 1b1350a638cac3355ba0bb80d99298e8f7fd59e6
Author: Victor Roemer <viroemer@cisco.com>
Date:   Fri Aug 11 15:45:54 2017 -0400

    search_engines: only add state to queue once

commit 16069bfce5ffe09d5a52531cf32da305cf28d8d1
Author: Victor Roemer <viroemer@cisco.com>
Date:   Thu Aug 10 13:31:09 2017 -0400

    snort: remove duplicate function declaration

commit 42a2156b3b08232fd6032a7c27d3558fb29dcee2
Author: Victor Roemer <viroemer@cisco.com>
Date:   Mon Aug 7 18:21:54 2017 -0400

    snort: port the optimized port table compilation from 2.9.12

    Incomplete port of port, some things require reworking since PortObjectItem changed so much in Snort3

8 years agoMerge pull request #992 in SNORT/snort3 from rm_peg_count_assert to master
Russ Combs (rucombs) [Wed, 16 Aug 2017 02:07:31 +0000 (22:07 -0400)] 
Merge pull request #992 in SNORT/snort3 from rm_peg_count_assert to master

Squashed commit of the following:

commit 2d9ac5528e31a1cf146d22c6b8f42cbedcfd440a
Author: Steven Baigal <sbaigal@cisco.com>
Date:   Tue Aug 15 18:46:59 2017 -0400

    changed concurrent_sessions stats assert() to if()

8 years agoMerge pull request #988 in SNORT/snort3 from max_cocurr_session_peg to master
Tom Peters (thopeter) [Tue, 15 Aug 2017 16:30:51 +0000 (12:30 -0400)] 
Merge pull request #988 in SNORT/snort3 from max_cocurr_session_peg to master

Squashed commit of the following:

commit 86a1cc3153f86bdc73d168ac16dd414f842e8010
Author: Steven Baigal <sbaigal@cisco.com>
Date:   Thu Aug 10 16:17:10 2017 -0400

    Added peg count for max concurrent sessions to service inspectors

8 years agoMerge pull request #989 in SNORT/snort3 from pause_fix to master
Russ Combs (rucombs) [Mon, 14 Aug 2017 20:28:10 +0000 (16:28 -0400)] 
Merge pull request #989 in SNORT/snort3 from pause_fix to master

Squashed commit of the following:

commit 22cbf9fe707272c9549ec81125fec4fbc69d961e
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date:   Fri Aug 11 13:34:12 2017 -0400

    main: Fix pause command issued from command line to accept control commands while in paused state

commit 8519c9d98ebc9375e66234de9aa3a6d108d27fd8
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date:   Fri Aug 11 12:46:48 2017 -0400

    main: Fix pause command issued from command line to accept control commands while in paused state

8 years agoMerge pull request #975 in SNORT/snort3 from delete_inspector to master
Russ Combs (rucombs) [Fri, 11 Aug 2017 16:31:22 +0000 (12:31 -0400)] 
Merge pull request #975 in SNORT/snort3 from delete_inspector to master

Squashed commit of the following:

commit bc33c5a6534764063530ab181422f6a0bb6ac9d1
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date:   Wed Jul 26 11:05:30 2017 -0400

    control: delete inspector from the default inspection policy

8 years agoMerge pull request #986 in SNORT/snort3 from act_u2x_len to master
Russ Combs (rucombs) [Fri, 11 Aug 2017 16:24:30 +0000 (12:24 -0400)] 
Merge pull request #986 in SNORT/snort3 from act_u2x_len to master

Squashed commit of the following:

commit f17065bd7092acee1aa4c856b04d5cfbc2e62807
Author: Russ Combs <rucombs@cisco.com>
Date:   Wed Aug 9 18:19:53 2017 -0400

    appid: fix match vector clearing

commit c1478fac6dd1cdf717948ef64c1db03545ce4cfd
Author: Russ Combs <rucombs@cisco.com>
Date:   Wed Aug 9 18:21:34 2017 -0400

    unified2x: remove obsolete logger; use unified2.legacy_events = true instead

commit 377062a71f6330f26b3033d863da50b56abfb7f2
Author: Russ Combs <rucombs@cisco.com>
Date:   Wed Aug 9 10:53:12 2017 -0400

    unified2: add legacy_events bool for out-of-date barnyard2

commit 69f2dd344c991f1a56e5b93f31d8e49843dbcf6e
Author: Russ Combs <rucombs@cisco.com>
Date:   Tue Aug 8 22:02:08 2017 -0400

    u2: remove obsolete test mode unlink

commit 7277dc3e62677f704bfe9b9bad207997e70687ca
Author: Russ Combs <rucombs@cisco.com>
Date:   Tue Aug 8 07:32:26 2017 -0400

    build: remove obsolete WIN32 snippets

commit 4a64e358bf62a8601eada87e1f3158e34f0c6a9a
Author: Russ Combs <rucombs@cisco.com>
Date:   Mon Aug 7 18:05:27 2017 -0400

    build: fix mac / clang build

commit c5b37ac2fb963d9d11f532160ca6e977cabf2cd5
Author: Russ Combs <rucombs@cisco.com>
Date:   Mon Aug 7 18:05:00 2017 -0400

    spell: fix bufferlen help typo

8 years agoMerge pull request #985 in SNORT/snort3 from multi_binder to master
Russ Combs (rucombs) [Thu, 10 Aug 2017 14:42:26 +0000 (10:42 -0400)] 
Merge pull request #985 in SNORT/snort3 from multi_binder to master

Squashed commit of the following:

commit 03b16f35970939c4a3ad6acebaa0ed5dca7a5a31
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Fri Aug 4 14:07:32 2017 -0400

    snort2lua: removed excessive newlines from binder output

commit a0d7c06663c85b06a85aa6830ff5b88b20289a5e
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Fri Aug 4 10:39:14 2017 -0400

    snort2lua: bindings now merge and propagate to top level of corresponsing policy

8 years agoMerge pull request #979 in SNORT/snort3 from pkt_tracer_p2 to master
Russ Combs (rucombs) [Tue, 8 Aug 2017 20:01:51 +0000 (16:01 -0400)] 
Merge pull request #979 in SNORT/snort3 from pkt_tracer_p2 to master

Squashed commit of the following:

commit c171b98fe8535d65293d2ea0694d09cbe6a42c9a
Author: Steven Baigal <sbaigal@cisco.com>
Date:   Thu Jul 27 16:24:39 2017 -0400

    add support of writing packet trace to DAQ

8 years agoSquashed commit of the following:
Russ Combs [Mon, 7 Aug 2017 02:20:21 +0000 (22:20 -0400)] 
Squashed commit of the following:

commit bb852740170eedb059ad0453f80bdf069b79310b
Author: Russ Combs <rucombs@cisco.com>
Date:   Sun Aug 6 21:14:46 2017 -0400

    snort: exit with zero from usage

commit 262814841a5060e349daf357a72146cb921eb7bc
Author: Russ Combs <rucombs@cisco.com>
Date:   Sun Aug 6 20:27:40 2017 -0400

    snort: add --dump-msg-map

commit c7db261aea251d9c8a887f28784dea9235483d82
Author: Russ Combs <rucombs@cisco.com>
Date:   Sun Aug 6 19:40:05 2017 -0400

    snort: fix --dump-builtin-rules to accept optional module prefix

commit b1987eb132b7bdfdc6c43a9f4f80a4e46ddb3e68
Author: Russ Combs <rucombs@cisco.com>
Date:   Sun Aug 6 09:20:02 2017 -0400

    unified2: resurrect old u2 as unified2x in extra until new u2 events are supported

8 years agoSquashed commit of the following:
Russ Combs [Sat, 5 Aug 2017 15:56:54 +0000 (11:56 -0400)] 
Squashed commit of the following:

commit 3b226926b43af0665ba14c502c4a23cd8589811a
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Aug 5 10:55:06 2017 -0400

    rules: make table consistency checks debug only

commit 1f1901fecb88d2871fb4088d6f5f0955767ea5a3
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Aug 4 14:01:13 2017 -0400

    doc: add stdlog usage example

commit f7f4dd5cef22a138582fe8ecad2d03f0b8a8e611
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Aug 4 13:26:46 2017 -0400

    build: remove a4 from version string

commit 057220564faa84541f3882b2ea4e1d04df33557a
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Aug 4 12:13:32 2017 -0400

    conf: convert string ranges to interval params

commit 2c997e0a969bea72bd641e519e48de4052753a16
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Aug 4 11:03:29 2017 -0400

    conf: add explicit interval type

commit 756be7ac77ae96ef026aa92a4af268708ebf4748
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Aug 4 07:32:40 2017 -0400

    spell check: fix typo

commit fc7830bd27d6718a4bd439cde33bfc641d8363b7
Author: Russ Combs <rucombs@cisco.com>
Date:   Thu Aug 3 22:02:35 2017 -0400

    snort2lua: convert dsize:a<>b to dsize:a<=>b for consistency with other rule options

8 years agoMerge pull request #953 in SNORT/snort3 from reload_inspector to master
Russ Combs (rucombs) [Fri, 4 Aug 2017 16:36:21 +0000 (12:36 -0400)] 
Merge pull request #953 in SNORT/snort3 from reload_inspector to master

Squashed commit of the following:

commit c5ec856a1fd022d83fddc05eac88aa5969dede2c
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date:   Thu Aug 3 23:53:09 2017 -0400

    control: dev notes updates, updates to code per review

commit 4c020ea967d22d3db38468fd46810c304bbba64e
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date:   Mon Jul 31 09:35:40 2017 -0400

    control: updates to reload_policy per review

commit a1218168afb28e65253bd0a5e4984438e0214bba
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date:   Wed Jul 26 12:39:02 2017 -0400

    control: enforce fname argument for reload policy

commit 80a3a2d95d0738818017904920546e42738d3cd7
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date:   Wed Jul 26 12:17:29 2017 -0400

    control: renaming the stats for policy reloads

commit fa2456f55f3cd0925a227ca0e26083b87ee91c26
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date:   Wed Jul 26 11:37:55 2017 -0400

    control: update snort_config.cc per master

commit 408f6872cda9970d940ea8623486fdb829e36024
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date:   Sun Jul 23 16:16:49 2017 -0400

    updating unit tests

commit 249eeee92fdcff74e4fd093e4c5022451aeb484f
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date:   Sat Jul 22 16:07:28 2017 -0400

    control: update binder with new inspector

commit cd0b2b8f38af2d1a38f4b6aedb574791ccf30512
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date:   Mon Jul 17 21:44:41 2017 -0400

    control: Changes per code review : reinstantiate default binder when inspectors are enabled. rename command to reload_policy

commit 06e84c034ec8da7fe8daea2afb8d0ed9e26136cc
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date:   Fri Jul 14 16:48:34 2017 -0400

    control: delete the old binder while reloading inspector

commit 9b1928c8587b878b518eb7b5339ec290c613daa5
Author: Bhagya Tholpady <bbantwal@cisco.com>
Date:   Wed Jul 26 11:05:30 2017 -0400

    control: resolve merge conflicts

8 years agoMerge pull request #970 in SNORT/snort3 from port_reload_performance_fixes to master
Russ Combs (rucombs) [Fri, 4 Aug 2017 13:25:26 +0000 (09:25 -0400)] 
Merge pull request #970 in SNORT/snort3 from port_reload_performance_fixes to master

Squashed commit of the following:

commit def9b84906c82d9ebb5f8a85f4227e51520327f3
Author: Victor Roemer <viroemer@cisco.com>
Date:   Thu Aug 3 13:37:54 2017 -0400

    dce_rpc: remove connection-oriented rules from dce_smb module

commit 324a91db775c65c34a5b0cf435768d199368c20c
Author: Victor Roemer <viroemer@cisco.com>
Date:   Thu Aug 3 12:44:41 2017 -0400

    snort: keep tracking rtn after merging duplicate otns

commit b79a20e1a45d052177ff78dff1fd4778dd956b41
Author: Victor Roemer <viroemer@cisco.com>
Date:   Wed Aug 2 14:20:50 2017 -0400

    dce_rpc: Fix --enable-debug-msgs without --enable-debug

commit e901cb79cb608603e109d199cc804e8eab285e83
Author: Victor Roemer <viroemer@cisco.com>
Date:   Wed Aug 2 14:20:21 2017 -0400

    snort: Fix --enable-debug-msgs

commit 733037605b804fd1a1585ff170e5da36dc39400f
Author: Victor Roemer <viroemer@cisco.com>
Date:   Wed Jul 26 08:43:41 2017 -0400

    snort: optimize mSplit performance

commit f48509d9ce999a91fa1ade6009235ed32353338c
Author: Victor Roemer <viroemer@cisco.com>
Date:   Tue Jul 25 10:26:09 2017 -0400

    snort: Parse time RuleTreeNode hash table

commit 85c3cd141b1578200c89ee451382508e9d83732a
Author: Victor Roemer <viroemer@cisco.com>
Date:   Mon Jul 24 13:40:38 2017 -0400

    snort: Stop iterating over ports earlier

8 years agoMerge pull request #982 in SNORT/snort3 from snort2lua_tbd to master
Russ Combs (rucombs) [Thu, 3 Aug 2017 22:16:37 +0000 (18:16 -0400)] 
Merge pull request #982 in SNORT/snort3 from snort2lua_tbd to master

Squashed commit of the following:

commit d1fa8d0f7e525c7be5834598f882681e430e1132
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Thu Aug 3 18:12:45 2017 -0400

    snort2lua: removed dead comments

commit 86f07d1a0038cfb3da576e8bacd8af9868e9a068
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Fri Jul 28 15:24:58 2017 -0400

    snort2lua: added dynamicoutput to deleted list

commit 523ddfa51f0301c7e106c74b9745b3f35d561a6d
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Fri Jul 28 13:59:51 2017 -0400

    snort2lua: added firewall to unsupported list

commit 1021f6d10712c290986356ffc2127e24d494dd70
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Fri Jul 28 13:36:33 2017 -0400

    snort2lua: added nap_selector to unsupported list

commit b8b058da7779c802b906813ba108cbaa10a3a11a
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Fri Jul 28 13:19:05 2017 -0400

    snort2lua: added sf_unified2 to unsupported list and matching log/alert to deleted.

commit e54a3faff40023cecc60ec8a58c502a241c94843
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Thu Jul 27 12:44:03 2017 -0400

    snort2lua: added config protected_content to deleted list

commit e54ec4b55d4dcdcf9d4164151860de2726cc0df7
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Wed Jul 26 12:44:42 2017 -0400

    snort2lua: added config_na_policy_mode to unsupported list

commit 88dd22b5999a6f673ea747bae36060e916321c52
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Tue Jul 25 10:02:33 2017 -0400

    snort2lua: added XFF configuration to unsupported list

commit f38d8334ba8de1e964daed54212b8d448d1408bf
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Fri Jul 28 09:58:40 2017 -0400

    snort2lua: added ability to add top level unsupported comments

commit f3a06388660ceb897d37b0d3527f005d1d5936b7
Author: Carter Waxman <cwaxman@cisco.com>
Date:   Mon Jul 24 10:29:23 2017 -0400

    snort2lua: condensed failed_conversion to one method

8 years agoMerge pull request #983 in SNORT/snort3 from stdlog to master
Russ Combs (rucombs) [Tue, 1 Aug 2017 21:30:55 +0000 (17:30 -0400)] 
Merge pull request #983 in SNORT/snort3 from stdlog to master

Squashed commit of the following:

commit c8d172dc28a8157129d8426255d40fa4a3acd645
Author: Russ Combs <rucombs@cisco.com>
Date:   Tue Aug 1 08:52:05 2017 -0400

    stdlog: support snort 3> log for text alerts

8 years agoMerge pull request #971 in SNORT/snort3 from bug233728 to master
Russ Combs (rucombs) [Tue, 1 Aug 2017 14:08:40 +0000 (10:08 -0400)] 
Merge pull request #971 in SNORT/snort3 from bug233728 to master

Squashed commit of the following:

commit 93e0c40389cd89b42a8f98449e3b005b787694a0
Author: Steven Baigal <sbaigal@cisco.com>
Date:   Tue Jul 25 15:42:18 2017 -0400

    utils: wrap snprintf() with safe_snprintf()

8 years agoSquashed commit of the following:
Russ Combs [Mon, 31 Jul 2017 01:10:59 +0000 (21:10 -0400)] 
Squashed commit of the following:

commit c3a1640d50792c59d25736b4f7355050d8079b48
Author: Russ Combs <rucombs@cisco.com>
Date:   Sun Jul 30 20:05:10 2017 -0400

    data_log: update to new http_inspect

commit 3867148695e9e3a7a78c1fd4c802b08ee18f8e54
Author: Russ Combs <rucombs@cisco.com>
Date:   Sun Jul 30 13:26:37 2017 -0400

    unified2: tweak event3 prefix for consistent common prefix

commit e429a7d13b0da2f186fe32674d5f1baa17fbed63
Author: Russ Combs <rucombs@cisco.com>
Date:   Sun Jul 30 11:52:04 2017 -0400

    pop: service name is pop3

commit 07cf602ec7acd43742c48b7fbbc279e624a18852
Author: Russ Combs <rucombs@cisco.com>
Date:   Sun Jul 30 11:45:04 2017 -0400

    fragbits: reset on begin

commit c8cd7a0ebeadc708fb4b81fe8a481751bf03a647
Author: Russ Combs <rucombs@cisco.com>
Date:   Sun Jul 30 11:44:16 2017 -0400

    normalizer: remove non-inline warning since still counting conditions

commit 56c3929ae45f8df82042981d7312b4ab05fd5498
Author: Russ Combs <rucombs@cisco.com>
Date:   Sun Jul 30 10:29:07 2017 -0400

    conf: align default conf closer to 2.X

8 years agoSquashed commit of the following:
Russ Combs [Sat, 29 Jul 2017 23:20:03 +0000 (19:20 -0400)] 
Squashed commit of the following:

commit 0166dd6c1dc4b559ef0203dedd459292fef1b1d1
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Jul 29 17:09:45 2017 -0400

    alerts: add log_references to store and log rule references with alert_full

commit 4542dcc4fa7cb2e3d5b6ebaf150f0fe99cd68320
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Jul 29 15:36:02 2017 -0400

    memory: use allocation / deallocation overrides where appropriate

commit 0c33d17bfac612dbf0a65e3df19c42d7dd08c080
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Jul 29 10:24:22 2017 -0400

    rules: warn only once per gid:sid of no fast pattern

commit 7448d1ab5abd7ae216c9f67bf02e5429245032bc
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Jul 29 09:53:40 2017 -0400

    cleanup: remove otn cruft

commit 48a3e731f039f68584dc77240b5b2738a9c0ad3b
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Jul 29 09:44:42 2017 -0400

    startup: add warnings count to validate statement

commit f1a4f2575293fcd3895b91e8f767a0afa8e725cb
Author: Russ Combs <rucombs@cisco.com>
Date:   Sat Jul 29 09:26:49 2017 -0400

    snort.lua: tweak comments

commit 5851d54ad71a18912a0fff6ebfcd2882047a500b
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Jul 28 21:45:38 2017 -0400

    snort2lua: do not convert sameip; handle same as ftpbounce (no longer supported)

commit ded10c2e8c3539354102137de3ca90fa8d1ebbb0
Author: Russ Combs <rucombs@cisco.com>
Date:   Fri Jul 28 21:18:46 2017 -0400

    messages: output startup warnings and errors to stderr instead of stdout

8 years agoMerge pull request #981 in SNORT/snort3 from siri1 to master
Russ Combs (rucombs) [Sat, 29 Jul 2017 17:55:27 +0000 (13:55 -0400)] 
Merge pull request #981 in SNORT/snort3 from siri1 to master

Squashed commit of the following:

commit 715c0a144bfe9fb3617b3c2b6aad2e7a6a5b68d9
Author: Steve Chew <stechew@cisco.com>
Date:   Fri Jul 28 17:18:05 2017 -0400

    Enable SSL certificate pattern matching for AppId.

8 years agoMerge pull request #980 in SNORT/snort3 from icmp_flowkey_fix to master
Russ Combs (rucombs) [Fri, 28 Jul 2017 23:43:01 +0000 (19:43 -0400)] 
Merge pull request #980 in SNORT/snort3 from icmp_flowkey_fix to master

Squashed commit of the following:

commit 4c5be44956af918f64b08681bce4ae5f68199205
Author: Steven Baigal <sbaigal@cisco.com>
Date:   Fri Jul 28 12:41:20 2017 -0400

    Fixed valgaind error on ICMP session flow key

8 years agoMerge pull request #978 in SNORT/snort3 from default_conf to master
Russ Combs (rucombs) [Fri, 28 Jul 2017 21:46:12 +0000 (17:46 -0400)] 
Merge pull request #978 in SNORT/snort3 from default_conf to master

Squashed commit of the following:

commit 3ba8c2e107703368af3012e89dae0e0be79e9fe1
Author: Russ Combs <rucombs@cisco.com>
Date:   Thu Jul 27 02:30:28 2017 -0400

    conf: expand default conf for completeness and clarity

8 years agoSquashed commit of the following:
Russ Combs [Fri, 28 Jul 2017 02:51:20 +0000 (22:51 -0400)] 
Squashed commit of the following:

commit 8789b7d3be1a86dbdaafe3617211df9e046024f0
Author: Russ Combs <rucombs@cisco.com>
Date:   Thu Jul 27 21:46:30 2017 -0400

    sip_stat_code: fix zero initialization

8 years agoMerge pull request #977 in SNORT/snort3 from acfull_case to master
Michael Altizer (mialtize) [Thu, 27 Jul 2017 23:21:04 +0000 (19:21 -0400)] 
Merge pull request #977 in SNORT/snort3 from acfull_case to master

Squashed commit of the following:

commit 19ac03abda583aecef298a269f2eae3ae11ae5a9
Author: Michael Altizer <mialtize@cisco.com>
Date:   Thu Jul 27 16:25:47 2017 -0400

    search_engines: Fix case sensitive ac_full DFA matching