]>
git.ipfire.org Git - thirdparty/snort3.git/log
Russ Combs [Fri, 8 May 2015 11:27:55 +0000 (07:27 -0400)]
tom: new_http_inspect aborts on obvious non-HTTP ttraffic
Russ Combs [Thu, 7 May 2015 15:05:21 +0000 (11:05 -0400)]
tom:
eliminate chunk aggregation from reassemble()
-- static buffer for body sections
-- update during chunk reassembly mods
-- new chunk splitting is working
-- skip on chunk scan side
-- reassemble side chunk skip
-- complete space optimization changes
Russ Combs [Sat, 2 May 2015 00:48:18 +0000 (20:48 -0400)]
doc tweaks
Russ Combs [Thu, 30 Apr 2015 20:30:25 +0000 (16:30 -0400)]
russ:
-- fix http inspect use of decompress_swf and decompress_pdf
-- ensure that autotools and cmake install the same files in the same dirs
-- add doc/online_manual.sh to generate an all-in-1 html manual with
embedded images
Russ Combs [Thu, 30 Apr 2015 02:06:04 +0000 (22:06 -0400)]
fix packaging foo
Russ Combs [Thu, 30 Apr 2015 00:44:26 +0000 (20:44 -0400)]
forgot change log
Russ Combs [Thu, 30 Apr 2015 00:43:52 +0000 (20:43 -0400)]
fixed xcode static analysis issues
Russ Combs [Wed, 29 Apr 2015 21:41:24 +0000 (17:41 -0400)]
russ:
add packet processing to manual
update default manuals
update base version to 297-177
Russ Combs [Wed, 29 Apr 2015 20:54:07 +0000 (16:54 -0400)]
russ - cleanup some comments; build 150
Russ Combs [Wed, 29 Apr 2015 20:03:12 +0000 (16:03 -0400)]
Squashed commit of the following:
russ:
-- ensure unknown sources are analyzed
-- change daq.var to daq.vars to support multiple params, reported by Sancho Panza
-- fixed urg option
-- fix hi mpse search
-- additional refactoring and cleanup
Russ Combs [Wed, 29 Apr 2015 17:36:48 +0000 (13:36 -0400)]
bhagya - pop and imap inspectors ported
Russ Combs [Tue, 28 Apr 2015 19:07:25 +0000 (15:07 -0400)]
fixed build issue with exta/; bump build to 149
Russ Combs [Tue, 28 Apr 2015 16:18:22 +0000 (12:18 -0400)]
build 148
Russ Combs [Tue, 28 Apr 2015 15:51:58 +0000 (11:51 -0400)]
dont just validate when no -r or -i for non-pcap DAQ; reported by Sancho Panza
Russ Combs [Tue, 28 Apr 2015 15:20:07 +0000 (11:20 -0400)]
russ - refactor of snort and snort_config modules
Russ Combs [Tue, 28 Apr 2015 14:46:41 +0000 (10:46 -0400)]
hui - file type ID updates and refactoring
Russ Combs [Mon, 27 Apr 2015 19:13:56 +0000 (15:13 -0400)]
added publish-subscribe handling of data events and data_log example
Russ Combs [Thu, 23 Apr 2015 16:53:27 +0000 (12:53 -0400)]
build 147
Russ Combs [Wed, 22 Apr 2015 21:48:52 +0000 (17:48 -0400)]
change PT_DATA to IT_PASSIVE; supports named instances, reload, and consumers
Russ Combs [Thu, 16 Apr 2015 19:01:09 +0000 (15:01 -0400)]
added snort_manual.text; add flow pointer to splitter finish
Russ Combs [Fri, 10 Apr 2015 13:10:19 +0000 (09:10 -0400)]
build 145
Russ Combs [Fri, 10 Apr 2015 12:44:00 +0000 (08:44 -0400)]
nhttp clear() and related changes
Russ Combs [Fri, 10 Apr 2015 12:38:44 +0000 (08:38 -0400)]
ensure inspector::clear called only after eval
Russ Combs [Tue, 7 Apr 2015 21:06:03 +0000 (17:06 -0400)]
stream and splitter changes for new http - change log
Russ Combs [Tue, 7 Apr 2015 21:05:28 +0000 (17:05 -0400)]
stream and splitter changes for new http
Russ Combs [Tue, 7 Apr 2015 18:43:58 +0000 (14:43 -0400)]
new http refactoring and cleanup
Russ Combs [Wed, 1 Apr 2015 18:06:59 +0000 (14:06 -0400)]
merge in new http changes: events from splitter plus additional refactoring and cleanup
Russ Combs [Wed, 1 Apr 2015 17:52:53 +0000 (13:52 -0400)]
fix dns assertion; remove unused variables
Russ Combs [Tue, 31 Mar 2015 13:03:36 +0000 (09:03 -0400)]
updated autotools generation of api_options.h; bumped build to 144
Russ Combs [Mon, 30 Mar 2015 16:14:59 +0000 (12:14 -0400)]
ported dns preprocessor
Russ Combs [Thu, 26 Mar 2015 16:34:48 +0000 (12:34 -0400)]
build 143 final
russ [Thu, 26 Mar 2015 16:32:49 +0000 (12:32 -0400)]
missed ssh updates
Russ Combs [Thu, 26 Mar 2015 15:26:37 +0000 (11:26 -0400)]
added ssh inspector
Russ Combs [Thu, 26 Mar 2015 12:07:28 +0000 (08:07 -0400)]
add duplicate service warning; set service ahead of session
Russ Combs [Wed, 25 Mar 2015 21:25:29 +0000 (17:25 -0400)]
apply service from hosts when inspector already bound to flow
Russ Combs [Wed, 25 Mar 2015 19:02:20 +0000 (15:02 -0400)]
ensure direction and service are set regardless of flow state
Russ Combs [Sat, 21 Mar 2015 12:41:30 +0000 (08:41 -0400)]
enable active for react / reject only if used in configuration
Russ Combs [Fri, 20 Mar 2015 21:06:53 +0000 (17:06 -0400)]
fixed use of bound ip and tcp policy if not set in hosts
Russ Combs [Thu, 19 Mar 2015 18:29:16 +0000 (14:29 -0400)]
eliminate dedicated nhttp chunk buffer; minor nhttp cleanup in StreamSplitter
Russ Combs [Thu, 19 Mar 2015 13:08:24 +0000 (09:08 -0400)]
fixed host lookup issue
russ [Wed, 18 Mar 2015 22:55:56 +0000 (18:55 -0400)]
misc snort2lua updates
Russ Combs [Wed, 18 Mar 2015 17:32:10 +0000 (13:32 -0400)]
apply module defaults; bump build to 142
Russ Combs [Wed, 18 Mar 2015 16:38:43 +0000 (12:38 -0400)]
fix static analysis issues reported by xcode
Russ Combs [Mon, 16 Mar 2015 17:46:52 +0000 (13:46 -0400)]
all parse warnings are optional; fix ip and tcp policy defines
Russ Combs [Mon, 16 Mar 2015 15:37:16 +0000 (11:37 -0400)]
fixed ip and icmp flow init of client/server ip
Russ Combs [Thu, 12 Mar 2015 12:46:08 +0000 (08:46 -0400)]
fix usage typo
Russ Combs [Thu, 12 Mar 2015 12:31:41 +0000 (08:31 -0400)]
added logging examples to usage
Russ Combs [Wed, 11 Mar 2015 16:42:18 +0000 (12:42 -0400)]
added build foo for lzma, refactored configure.ac, bumped build #
Russ Combs [Wed, 11 Mar 2015 00:33:44 +0000 (20:33 -0400)]
fixed generation of api_options.h
Russ Combs [Wed, 11 Mar 2015 00:01:05 +0000 (20:01 -0400)]
update change log
Russ Combs [Wed, 11 Mar 2015 00:00:09 +0000 (20:00 -0400)]
enhancements for checking compatibility of external plugins
Russ Combs [Mon, 9 Mar 2015 15:20:57 +0000 (11:20 -0400)]
added doc/usage.txt
Russ Combs [Fri, 27 Feb 2015 18:50:46 +0000 (13:50 -0500)]
fix typo
Russ Combs [Fri, 27 Feb 2015 18:45:52 +0000 (13:45 -0500)]
fix make distcheck cleanup for extras
Russ Combs [Fri, 27 Feb 2015 18:15:55 +0000 (13:15 -0500)]
updated documentation
Russ Combs [Fri, 27 Feb 2015 14:54:24 +0000 (09:54 -0500)]
uncrustify, see crusty.cfg
Russ Combs [Thu, 26 Feb 2015 16:59:15 +0000 (11:59 -0500)]
fixed change log date
Russ Combs [Thu, 26 Feb 2015 16:41:41 +0000 (11:41 -0500)]
bump build #
Russ Combs [Wed, 25 Feb 2015 14:43:19 +0000 (09:43 -0500)]
additional http_inspect cleanup
Russ Combs [Wed, 25 Feb 2015 14:39:29 +0000 (09:39 -0500)]
documented gotcha regarding rule variable definitions in Lua
Tom Peters [Tue, 24 Feb 2015 22:25:58 +0000 (17:25 -0500)]
minor changes related to comments and a reg test problem
Tom Peters [Tue, 24 Feb 2015 18:15:20 +0000 (13:15 -0500)]
minor changes to http
Russ Combs [Sat, 21 Feb 2015 19:07:38 +0000 (14:07 -0500)]
strip unneeded mstring.h includes
Russ Combs [Sat, 21 Feb 2015 18:54:43 +0000 (13:54 -0500)]
refactor file_decomp (missed files)
Russ Combs [Sat, 21 Feb 2015 18:53:58 +0000 (13:53 -0500)]
refactor file_decomp
Russ Combs [Sat, 21 Feb 2015 17:42:55 +0000 (12:42 -0500)]
sync 297 http xff, swf, and pdf updates
Russ Combs [Fri, 20 Feb 2015 20:34:12 +0000 (15:34 -0500)]
bump build to 138
Russ Combs [Thu, 12 Feb 2015 21:28:36 +0000 (16:28 -0500)]
sync ftp with 297; replace stream event callbacks with FlowData virtuals
Russ Combs [Thu, 12 Feb 2015 15:58:07 +0000 (10:58 -0500)]
bump build to 137
Russ Combs [Tue, 10 Feb 2015 17:18:23 +0000 (12:18 -0500)]
remove deleted files from ignore set
Russ Combs [Tue, 10 Feb 2015 14:33:55 +0000 (09:33 -0500)]
updated manual from blog posts and emails
Russ Combs [Mon, 9 Feb 2015 20:31:08 +0000 (15:31 -0500)]
fix merge error
Russ Combs [Mon, 9 Feb 2015 20:25:54 +0000 (15:25 -0500)]
normalization fixups, refactoring, renaming
Russ Combs [Mon, 9 Feb 2015 19:39:58 +0000 (14:39 -0500)]
fixed icmp4 encoding
Russ Combs [Mon, 9 Feb 2015 17:40:27 +0000 (12:40 -0500)]
refactored codec methods
Russ Combs [Mon, 9 Feb 2015 14:27:30 +0000 (09:27 -0500)]
297 sync of active and codecs
Russ Combs [Thu, 5 Feb 2015 16:34:42 +0000 (11:34 -0500)]
bump build #
russ [Thu, 5 Feb 2015 11:54:10 +0000 (06:54 -0500)]
fix up encoders
russ [Wed, 4 Feb 2015 22:07:52 +0000 (17:07 -0500)]
fix typo
Russ Combs [Wed, 4 Feb 2015 22:02:03 +0000 (17:02 -0500)]
sync stream with 297
Russ Combs [Wed, 4 Feb 2015 21:59:59 +0000 (16:59 -0500)]
fix encoder check for ip6 extensions
rcombs [Wed, 4 Feb 2015 14:27:40 +0000 (09:27 -0500)]
policy mode default is based on run mode
Russ Combs [Wed, 4 Feb 2015 13:54:31 +0000 (08:54 -0500)]
sync normalize with 297
Russ Combs [Thu, 29 Jan 2015 17:09:56 +0000 (12:09 -0500)]
bumped build, updated default snort manuals
Russ Combs [Thu, 29 Jan 2015 13:53:07 +0000 (08:53 -0500)]
fix freebsd build error
Russ Combs [Wed, 28 Jan 2015 18:17:22 +0000 (13:17 -0500)]
fix default hi profile name
Russ Combs [Tue, 27 Jan 2015 00:10:09 +0000 (19:10 -0500)]
deleted double define
Russ Combs [Mon, 26 Jan 2015 23:01:29 +0000 (18:01 -0500)]
fix merge
Russ Combs [Mon, 26 Jan 2015 22:36:50 +0000 (17:36 -0500)]
bump build
Russ Combs [Mon, 26 Jan 2015 22:36:17 +0000 (17:36 -0500)]
sync Mpse to 297, add SearchTool
Russ Combs [Mon, 26 Jan 2015 21:43:37 +0000 (16:43 -0500)]
update change log
Russ Combs [Mon, 26 Jan 2015 20:02:11 +0000 (15:02 -0500)]
297 sync for tag, hash, perfmon, etc.
Russ Combs [Mon, 26 Jan 2015 17:06:25 +0000 (12:06 -0500)]
fix year
Russ Combs [Fri, 23 Jan 2015 00:52:55 +0000 (19:52 -0500)]
fix typo
Russ Combs [Thu, 22 Jan 2015 21:55:46 +0000 (16:55 -0500)]
snort2lua default port bindings
Russ Combs [Thu, 22 Jan 2015 15:06:59 +0000 (10:06 -0500)]
add md5, sha256, and sha512 rule options based on snort 2.x protected_content
Russ Combs [Tue, 20 Jan 2015 21:36:37 +0000 (16:36 -0500)]
update change log
Russ Combs [Tue, 20 Jan 2015 21:27:17 +0000 (16:27 -0500)]
update build
Russ Combs [Tue, 20 Jan 2015 15:05:49 +0000 (10:05 -0500)]
fixes for LFS
Russ Combs [Thu, 15 Jan 2015 23:59:42 +0000 (18:59 -0500)]
reformat comment