]> git.ipfire.org Git - thirdparty/snort3.git/log
thirdparty/snort3.git
2 years agoPull request #3914: ftp: remove file_data dependency on file_id
Priyanka Bangalore Gurudev (prbg) [Fri, 14 Jul 2023 19:13:03 +0000 (19:13 +0000)] 
Pull request #3914: ftp: remove file_data dependency on file_id

Merge in SNORT/snort3 from ~PRBG/snort3:file_data_for_ftp_traffic to master

Squashed commit of the following:

commit f10bfb3e8f36f11d6170e85710d97a90b115fe5d
Author: Priyanka Gurudev <prbg@cisco.com>
Date:   Wed Jul 12 13:50:40 2023 -0400

    ftp: remove file_data dependency on file_id

2 years agoPull request #3906: stream_tcp: update state appropriately when head of seglist is...
Juweria Ali Imran (jaliimra) [Fri, 14 Jul 2023 13:12:24 +0000 (13:12 +0000)] 
Pull request #3906: stream_tcp: update state appropriately when head of seglist is the right end of a hole

Merge in SNORT/snort3 from ~JALIIMRA/snort3:seglist_hole_infinite_recursion to master

Squashed commit of the following:

commit d33b0d33a920dfa8331b487a4c666b7f79c10314
Author: Juweria Ali Imran <jaliimra@cisco.com>
Date:   Tue Jun 20 13:02:14 2023 -0400

    stream_tcp: validate proper update of stream_tcp state when seglist head follows a hole

2 years agoPull request #3902: appid: cache CHP glossary before detectors reload
Oleksandr Stepanov -X (ostepano - SOFTSERVE INC at Cisco) [Thu, 13 Jul 2023 12:57:03 +0000 (12:57 +0000)] 
Pull request #3902: appid: cache CHP glossary before detectors reload

Merge in SNORT/snort3 from ~OSTEPANO/snort3:chp_heap_fix to master

Squashed commit of the following:

commit 4a19f21de3a022a1b88234f6def378a7a8e0941a
Author: Oleksandr Stepanov <ostepano@cisco.com>
Date:   Thu Jul 6 05:59:00 2023 -0400

    appid: cache CHP glossary before detectors reload

2 years agoPull request #3905: binder: in case of a service change, remove flags indicating...
Vitalii Serhiiovych Horbatov -X (vhorbato - SOFTSERVE INC at Cisco) [Wed, 12 Jul 2023 12:15:16 +0000 (12:15 +0000)] 
Pull request #3905: binder: in case of a service change, remove flags indicating an abort of the direction

Merge in SNORT/snort3 from ~VHORBATO/snort3:http_reasm_crash to master

Squashed commit of the following:

commit 83b52fa0fefd9cdf7d0687ba64804ee519225b6a
Author: vhorbato <vhorbato@cisco.com>
Date:   Mon Jul 10 11:37:53 2023 +0300

    binder: in case of a service change, remove flags indicating an abort of the direction

2 years agoPull request #3894: rna: add stats for rna graphs
Adrian Mamolea (admamole) [Tue, 11 Jul 2023 17:12:41 +0000 (17:12 +0000)] 
Pull request #3894: rna: add stats for rna graphs

Merge in SNORT/snort3 from ~ADMAMOLE/snort3:rna_graphs to master

Squashed commit of the following:

commit 92a7848dfd79dfcd809a1501165f7325b42af2d3
Author: Adrian Mamolea <admamole@cisco.com>
Date:   Wed Jun 14 08:42:16 2023 -0400

    rna: add stats for rna graphs

2 years agoPull request #3895: helpers: added additional log in print_backtrace for debugging...
PRATEEK MOHAN PRABHU -X (pratepra - XORIANT CORPORATION at Cisco) [Mon, 10 Jul 2023 11:58:17 +0000 (11:58 +0000)] 
Pull request #3895: helpers: added additional log in print_backtrace for debugging purpose

Merge in SNORT/snort3 from ~PRATEPRA/snort3:crash_fix to master

Squashed commit of the following:

commit 35814367e25bb035806998c65d27ac8b3e3d1aaf
Author: PRATEEK MOHAN PRABHU -X (pratepra - XORIANT CORPORATION at Cisco) <pratepra@cisco.com>
Date:   Wed Jun 28 12:44:25 2023 +0530

    helpers: added additional log in print_backtrace for debugging purpose

2 years agoPull request #3904: ips_options: add gadget check for vba_data
Andrii Serbeniuk -X (aserbeni - SOFTSERVE INC at Cisco) [Mon, 10 Jul 2023 11:42:27 +0000 (11:42 +0000)] 
Pull request #3904: ips_options: add gadget check for vba_data

Merge in SNORT/snort3 from ~ASERBENI/snort3:vba_null_gadget to master

Squashed commit of the following:

commit c9ec58b0e031465bcd69331fcef82e6dd6f03c5d
Author: Andrii Serbeniuk <aserbeni@cisco.com>
Date:   Mon Jul 10 11:53:46 2023 +0300

    ips_options: update dev_notes about IPS options input values

commit 5f6a0b16d628f524961f56f8ab68b614a39ad390
Author: Andrii Serbeniuk <aserbeni@cisco.com>
Date:   Mon Jul 10 11:18:38 2023 +0300

    ips_options: add unit tests for vba_data

commit f7e319f06441b476463a2b64e786330c0a24425a
Author: Andrii Serbeniuk <aserbeni@cisco.com>
Date:   Mon Jul 10 11:17:45 2023 +0300

    ips_options: add gadget check for vba_data

2 years agoPull request #3859: perf_mon: fix dump_stats collision with perf mon
ARUNKUMAR KAYAMBU -X (akayambu - XORIANT CORPORATION at Cisco) [Thu, 6 Jul 2023 18:27:43 +0000 (18:27 +0000)] 
Pull request #3859: perf_mon: fix dump_stats collision with perf mon

Merge in SNORT/snort3 from ~AKAYAMBU/snort3:dump_stats_fix to master

Squashed commit of the following:

commit 78bdb137f619179005aebbadf9548e1121f90fce
Author: Arunkumar Kayambu <akayambu@cisco.com>
Date:   Tue May 23 10:56:21 2023 -0400

    perf_mon: fix dump_stats collision with perf mon

2 years agoPull request #3891: appid: Early detection of ssh and ignoring NAVL detection
Umang Sharma (umasharm) [Wed, 5 Jul 2023 18:42:52 +0000 (18:42 +0000)] 
Pull request #3891: appid: Early detection of ssh and ignoring NAVL detection

Merge in SNORT/snort3 from ~UMASHARM/snort3:ssh to master

Squashed commit of the following:

commit 4e2f347496653738e8aaac683b157664ce24fceb
Author: Umang Sharma <umasharm@cisco.com>
Date:   Wed Jun 21 22:14:38 2023 -0400

    appid: Early detection of ssh and ignoring NAVL detection

2 years agoPull request #3899: flow: changes to support derived classes of parent class Flow
Rishabh Duggal (riduggal) [Wed, 5 Jul 2023 17:11:06 +0000 (17:11 +0000)] 
Pull request #3899: flow: changes to support derived classes of parent class Flow

Merge in SNORT/snort3 from ~RIDUGGAL/snort3:rev_cc_support to master

Squashed commit of the following:

commit 01d4ba9884d67f63542a306bc439731142e893fc
Author: riduggal <riduggal@cisco.com>
Date:   Tue Jun 20 10:23:20 2023 +0000

    flow: changes to support derived classes of parent class Flow

2 years agoPull request #3879: appid: fix for opportunistic tls detected as ssl
Lukasz Czarnik -X (lczarnik - SOFTSERVE INC at Cisco) [Wed, 5 Jul 2023 14:16:25 +0000 (14:16 +0000)] 
Pull request #3879: appid: fix for opportunistic tls detected as ssl

Merge in SNORT/snort3 from ~LCZARNIK/snort3:appid_imaps to master

Squashed commit of the following:

commit 50fc3462f4f62ad0039e21ff8a103dc80fd65311
Author: Lukasz Czarnik <lczarnik@cisco.com>
Date:   Wed Jun 7 10:53:33 2023 -0400

    appid: fix for opportunistic tls detected as ssl

2 years agoPull request #3897: build: generate and tag 3.1.65.0 3.1.65.0
Priyanka Bangalore Gurudev (prbg) [Mon, 3 Jul 2023 12:15:41 +0000 (12:15 +0000)] 
Pull request #3897: build: generate and tag 3.1.65.0

Merge in SNORT/snort3 from ~PRBG/snort3:build_3.1.65.0 to master

Squashed commit of the following:

commit e02dc4aaeb2673eb4aca6cc08f978cddb3569f2f
Author: Priyanka Gurudev <prbg@cisco.com>
Date:   Thu Jun 29 22:32:25 2023 -0400

    build: generate and tag 3.1.65.0

2 years agoPull request #3893: regex: clear flags reused by module to construct ips option
Russ Combs (rucombs) [Thu, 29 Jun 2023 16:27:21 +0000 (16:27 +0000)] 
Pull request #3893: regex: clear flags reused by module to construct ips option

Merge in SNORT/snort3 from ~RUCOMBS/snort3:regex_fix to master

Squashed commit of the following:

commit d1e67464a0945bfaee8f0910cbef4142ff569337
Author: Russ Combs <rucombs@cisco.com>
Date:   Thu Jun 22 11:53:25 2023 -0400

    regex: clear flags reused by module to construct ips option

2 years agoPull request #3890: appid: do not use global pointers to service and client detectors...
Sreeja Athirkandathil Narayanan (sathirka) [Wed, 28 Jun 2023 16:46:23 +0000 (16:46 +0000)] 
Pull request #3890: appid: do not use global pointers to service and client detectors for packet processing during reload detectors

Merge in SNORT/snort3 from ~SATHIRKA/snort3:tsan_client_det to master

Squashed commit of the following:

commit f31c08920afb3e6411a4bce428fa22acc6213423
Author: Sreeja Athirkandathil Narayanan <sathirka@cisco.com>
Date:   Wed May 10 09:11:40 2023 -0400

    appid: do not use global pointers to service and client detectors for packet processing during reload detectors

2 years agoPull request #3887: Ips content update
Yehor Velykozhon -X (yvelykoz - SOFTSERVE INC at Cisco) [Mon, 26 Jun 2023 14:49:48 +0000 (14:49 +0000)] 
Pull request #3887: Ips content update

Merge in SNORT/snort3 from ~YVELYKOZ/snort3:ips_content_update to master

Squashed commit of the following:

commit ce14dda2618aefbab0882a3d7f24523d39d945f9
Author: Yehor Velykozhon <yvelykoz@cisco.com>
Date:   Mon Jun 19 19:12:42 2023 +0300

    ips_content: clean-up of function

commit 1614f3d02ef0be1419426a27371fc019adc65042
Author: Yehor Velykozhon <yvelykoz@cisco.com>
Date:   Mon Jun 19 19:00:49 2023 +0300

    detection: update condition since the negated stuff can be matched in such cases

commit bcb15b46360c11748873d33166736662906296f2
Author: Yehor Velykozhon <yvelykoz@cisco.com>
Date:   Mon Jun 19 17:42:47 2023 +0300

    ips_content: make the negated content be opposite to normal content

commit 752e235afd42ad16ba7a38e69b0cad22cc57b2a1
Author: Yehor Velykozhon <yvelykoz@cisco.com>
Date:   Mon Jun 19 17:35:38 2023 +0300

    ips_content: add flag for non-default value of depth

    Previously, if the sum of "within", "distance", "current_pos" is zero,
    the "within" was counted incorrectly and whole buffer would be searched.

    Reference: tests/src/ips_options/content/positive_cases, sid:57

commit e430068947d1e20544b3938155439143f66ff9e5
Author: Yehor Velykozhon <yvelykoz@cisco.com>
Date:   Mon Jun 19 17:29:09 2023 +0300

    ips_content: update condition checks

    1. Move out of buffer end check to earlier stage in order to avoid repeated checks
    2. Move the negative pos check to "retry" section since relates only to "retry" stuff
    3. Make the check about pattern length and depth more clear

2 years agoPull request #3885: profiler: change date output format in rule profiler from microse...
Vitalii Serhiiovych Horbatov -X (vhorbato - SOFTSERVE INC at Cisco) [Mon, 26 Jun 2023 09:04:01 +0000 (09:04 +0000)] 
Pull request #3885: profiler: change date output format in rule profiler from microseconds to seconds

Merge in SNORT/snort3 from ~VHORBATO/snort3:rule_prof_date to master

Squashed commit of the following:

commit cbcd8133dd4f0d2d61460719414507319fa82c5d
Author: vhorbato <vhorbato@cisco.com>
Date:   Fri Jun 16 18:55:11 2023 +0300

    profiler: fix date related problems in rule_profiling json output

2 years agoPull request #3874: file_api: Avoid file cache lookup after creating new file cache...
Steve Chew (stechew) [Wed, 21 Jun 2023 16:00:48 +0000 (16:00 +0000)] 
Pull request #3874: file_api: Avoid file cache lookup after creating new file cache entry.

Merge in SNORT/snort3 from ~STECHEW/snort3:file_cache_optimization to master

Squashed commit of the following:

commit 6c08c968d9d0b2de85ffc928916c6c033e7654df
Author: Steve Chew <stechew@cisco.com>
Date:   Fri Jun 9 14:40:27 2023 -0400

    file_api: Avoid file cache lookup after creating new file cache entry.

2 years agoPull request #3848: appid: add support for cip multiple service packet
Suriya Balu -X (subalu - HCL TECHNOLOGIES LIMITED at Cisco) [Wed, 21 Jun 2023 13:17:25 +0000 (13:17 +0000)] 
Pull request #3848: appid: add support for cip multiple service packet

Merge in SNORT/snort3 from ~SUBALU/snort3:msp to master

Squashed commit of the following:

commit 413d157d7b743f18d98d42f0ca41c58735a31563
Author: suriya <subalu@cisco.com>
Date:   Mon May 15 16:55:40 2023 +0530

    appid: add support for cip multiple service packet

2 years agoPull request #3872: libasan: fix out-of-bounds issues
Anna Norokh -X (anorokh - SOFTSERVE INC at Cisco) [Wed, 21 Jun 2023 06:13:14 +0000 (06:13 +0000)] 
Pull request #3872: libasan: fix out-of-bounds issues

Merge in SNORT/snort3 from ~ANOROKH/snort3:asan_invest to master

Squashed commit of the following:

commit 10d928de831b99b2fc6063cf5dc640dc83c4f5b6
Author: Anna Norokh <anorokh@cisco.com>
Date:   Mon May 29 11:31:43 2023 +0300

    analyzer: poison memory segment after msg->data

    This will work only for regtests, memory will be poisoned for 16 bytes
    to provide libasan possibility to sanitize memory that was allocated in DAQ.

commit 11e64eabf0d8fe3845f8cc3e85d040537ddf9103
Author: Oleksii Shumeiko <oshumeik@cisco.com>
Date:   Wed May 24 22:31:03 2023 +0300

    log: fix out-of-bounds read access

    The source structure is over the packet raw data.
    The structure declares an array of maximum possible size.
    The default assign/copy operator may go out of bounds if underlying raw data is shorter.

commit dc558bab687ffc779af2ca285240aa34ceb8c2a2
Author: Oleksii Shumeiko <oshumeik@cisco.com>
Date:   Wed May 24 15:39:19 2023 +0300

    codecs: fix tcp options parsing

commit bda86b5636c95909ed151c013adc481edde815f8
Author: Oleksii Shumeiko <oshumeik@cisco.com>
Date:   Wed May 24 14:51:25 2023 +0300

    codecs: fix ipv6_mobility parsing

    Check data availability before accessing the structure.

commit d3d9b96e273c130e53637246d07ae367912719ff
Author: Oleksii Shumeiko <oshumeik@cisco.com>
Date:   Wed May 24 14:39:33 2023 +0300

    appid: fix FTP parsing

    Prevent offset going beyond the buffer.

commit 6bbb52ff4333c6f0222d6fb05e6ac736d93b5a86
Author: Oleksii Shumeiko <oshumeik@cisco.com>
Date:   Wed May 24 13:12:55 2023 +0300

    rna: fix icmpv6 decoding

    IPv6 payload length may include extenstion headers,
    which should be accounted when looking for the end of ICMPv6.

commit 91f70f976963b9229259f11fabd561fcf5c5c269
Author: Oleksii Shumeiko <oshumeik@cisco.com>
Date:   Wed May 24 09:22:29 2023 +0300

    netflow: fix raw data conversion

    Netflow dedicates 4 bytes for a time record.
    Field size is better to be compared to the type size directly rather than
    to an external variable size.

commit 761afb8d664b7314c4225a3699f1b0bfe95bde3f
Author: Oleksii Shumeiko <oshumeik@cisco.com>
Date:   Fri May 19 15:58:56 2023 +0300

    utils: fix out-of-bound access

    Before the change the function accepted a limit for the destination buffer,
    which may cause out-of-bounds reading from the source buffer.

commit e936d5b47d672e7ac7f6c03afdd55af0d34e04a7
Author: Oleksii Shumeiko <oshumeik@cisco.com>
Date:   Thu May 4 13:54:05 2023 +0300

    appid: check size boundaries before header validation

commit 3708040ec8e130a365cff68b25fb2776db3ae98c
Author: Oleksii Shumeiko <oshumeik@cisco.com>
Date:   Wed May 3 14:56:40 2023 +0300

    protocols: remove of unnecessary old_opt check

2 years agoPull request #3883: NUMA memory policy
Raza Shafiq (rshafiq) [Wed, 21 Jun 2023 01:42:26 +0000 (01:42 +0000)] 
Pull request #3883: NUMA memory policy

Merge in SNORT/snort3 from ~RSHAFIQ/snort3:numa_memory_policy to master

Squashed commit of the following:

commit 9078d21f8c3e62519dadb794bd72abcf502b033b
Author: rshafiq <rshafiq@cisco.com>
Date:   Wed Jun 7 15:18:57 2023 -0400

    thread_config: added thread level mempolicy

2 years agoPull request #3869: icmp6: allow rules to match packet data after header
Brandon Stultz (brastult) [Tue, 20 Jun 2023 07:39:16 +0000 (07:39 +0000)] 
Pull request #3869: icmp6: allow rules to match packet data after header

Merge in SNORT/snort3 from ~BRASTULT/snort3:icmp6_codec_fix to master

Squashed commit of the following:

commit 3e505237c534272ed501fac591e8eb53c2224727
Author: Brandon Stultz <brastult@cisco.com>
Date:   Tue May 9 17:07:24 2023 -0400

    icmp6: allow rules to match packet data after header

2 years agoPull request #3861: parser: base service_only on services not cursor type
Brandon Stultz (brastult) [Sat, 17 Jun 2023 15:40:14 +0000 (15:40 +0000)] 
Pull request #3861: parser: base service_only on services not cursor type

Merge in SNORT/snort3 from ~BRASTULT/snort3:pkt_data_b64_fix to master

Squashed commit of the following:

commit 4c0959d1ce906b582268c2c639bf3788d40ff04f
Author: Brandon Stultz <brastult@cisco.com>
Date:   Fri May 19 12:51:15 2023 -0400

    parser: base service_only on services not cursor type

2 years agoPull request #3880: build: generate and tag 3.1.64.0 3.1.64.0
Priyanka Bangalore Gurudev (prbg) [Fri, 16 Jun 2023 23:08:24 +0000 (23:08 +0000)] 
Pull request #3880: build: generate and tag 3.1.64.0

Merge in SNORT/snort3 from ~PRBG/snort3:build_3.1.64.0 to master

Squashed commit of the following:

commit 950ce7b6f66736e4cd1ff7d8d89be3b373cba6aa
Author: Priyanka Gurudev <prbg@cisco.com>
Date:   Thu Jun 15 21:33:29 2023 -0400

    build: generate and tag 3.1.64.0

2 years agoPull request #3875: main: Update OopsHandler to get private data length to print...
Steve Chew (stechew) [Fri, 16 Jun 2023 03:10:27 +0000 (03:10 +0000)] 
Pull request #3875: main: Update OopsHandler to get private data length to print private data during crash.

Merge in SNORT/snort3 from ~STECHEW/snort3:daq_privptr_len_ioctl to master

Squashed commit of the following:

commit 46ce6c984ace2f8f753ac1f781da4469de259396
Author: Steve Chew <stechew@cisco.com>
Date:   Sun Jun 11 23:56:06 2023 -0400

    main: Update OopsHandler to get private data length to print private data during crash.

2 years agoPull request #3876: http_inspect: remove stream interface abstraction for http/1...
Shanmugam S (shanms) [Wed, 14 Jun 2023 03:51:43 +0000 (03:51 +0000)] 
Pull request #3876: http_inspect: remove stream interface abstraction for http/1.1 flows

Merge in SNORT/snort3 from ~ABHPAL/snort3:h3 to master

Squashed commit of the following:

commit 853630ce0e2a0ade2bf425d3382c98a5458a283c
Author: Abhijit Pal(abhpal) <abhpal@cisco.com>
Date:   Mon Jun 12 18:05:42 2023 +0530

    http_inspect: remove stream interface abstraction for http/1.1 flows

2 years agoPull request #3867: stream ip: Fix session counters in timeout and cleanup cases
Steven Baigal (sbaigal) [Fri, 9 Jun 2023 15:05:48 +0000 (15:05 +0000)] 
Pull request #3867: stream ip: Fix session counters in timeout and cleanup cases

Merge in SNORT/snort3 from ~CHSHERWI/snort3:ip_counters2 to master

Squashed commit of the following:

commit 744d42e3c0424f5b49f76ce9b7e30a136fd1f1ed
Author: Chris Sherwin <chsherwi@cisco.com>
Date:   Mon Jun 5 10:54:04 2023 -0400

    stream ip: Fix session counters in timeout and cleanup cases

2 years agoPull request #3868: appid: always publish a change message after do not decrypt
Ron Dempster (rdempste) [Wed, 7 Jun 2023 20:00:47 +0000 (20:00 +0000)] 
Pull request #3868: appid: always publish a change message after do not decrypt

Merge in SNORT/snort3 from ~RDEMPSTE/snort3:cert_viz_3 to master

Squashed commit of the following:

commit bac5cc09c3745ee518d865d3767f73c129ac9a18
Author: Ron Dempster (rdempste) <rdempste@cisco.com>
Date:   Wed May 31 12:39:00 2023 -0400

    appid: always publish a change message after do not decrypt

2 years agoPull request #3870: detection: Handle case when no rule tree node is found for a...
Steve Chew (stechew) [Wed, 7 Jun 2023 04:33:44 +0000 (04:33 +0000)] 
Pull request #3870: detection: Handle case when no rule tree node is found for a policy ID.

Merge in SNORT/snort3 from ~STECHEW/snort3:detection_fix to master

Squashed commit of the following:

commit fcfd02235de65ead825b0892946c8f960104e4d6
Author: Steve Chew <stechew@cisco.com>
Date:   Tue Jun 6 23:20:28 2023 -0400

    detection: Handle case when no rule tree node is found for a policy ID.

2 years agoPull request #3855: flow: introduced granular counters for idle_prunes
Steve Chew (stechew) [Sun, 4 Jun 2023 16:19:50 +0000 (16:19 +0000)] 
Pull request #3855: flow: introduced granular counters for idle_prunes

Merge in SNORT/snort3 from ~RCONJEEV/snort3:rconjeev_us824999 to master

Squashed commit of the following:

commit e0b6f73b0314f204e536403604d48c93355cc0d7
Author: RAGHURAAM CONJEEVARAM UDAYANAN -X (rconjeev - XORIANT CORPORATION at Cisco) <rconjeev@cisco.com>
Date:   Fri May 19 15:26:27 2023 +0530

    flow: introduced granular counters for idle_prunes

2 years agoPull request #3866: build: generate and tag 3.1.63.0 3.1.63.0
Priyanka Bangalore Gurudev (prbg) [Fri, 2 Jun 2023 19:53:06 +0000 (19:53 +0000)] 
Pull request #3866: build: generate and tag 3.1.63.0

Merge in SNORT/snort3 from ~PRBG/snort3:build_3.1.63.0 to master

Squashed commit of the following:

commit a13e97e42f217a66596af5add0744ef034e37d74
Author: Priyanka Gurudev <prbg@cisco.com>
Date:   Thu Jun 1 16:10:04 2023 -0400

    build: generate and tag 3.1.63.0

2 years agoPull request #3810: appid: Changes logic in ssl pattern matching
Sreeja Athirkandathil Narayanan (sathirka) [Wed, 31 May 2023 17:40:18 +0000 (17:40 +0000)] 
Pull request #3810: appid: Changes logic in ssl pattern matching

Merge in SNORT/snort3 from ~LCZARNIK/snort3:wildcard to master

Squashed commit of the following:

commit 6231d29de020c2bcd883429293b9c5fb28775efb
Author: Lukasz Czarnik <lczarnik@cisco.com>
Date:   Mon Apr 17 09:50:20 2023 -0400

    appid: Changes logic in ssl pattern matching

2 years agoPull request #3862: stream_tcp: account for data from zero window probes
Steven Baigal (sbaigal) [Wed, 31 May 2023 14:02:06 +0000 (14:02 +0000)] 
Pull request #3862: stream_tcp: account for data from zero window probes

Merge in SNORT/snort3 from ~JALIIMRA/snort3:zero_window_block_master to master

Squashed commit of the following:

commit 494f3504d6db1dae1979aba9032e8f890465c544
Author: Juweria Ali Imran <jaliimra@cisco.com>
Date:   Wed May 17 08:51:34 2023 -0400

    stream_tcp: account for data from zero window probes

2 years agoPull request #3864: perf_monitor: fix data bus subscription
Ron Dempster (rdempste) [Wed, 31 May 2023 13:11:54 +0000 (13:11 +0000)] 
Pull request #3864: perf_monitor: fix data bus subscription

Merge in SNORT/snort3 from ~RDEMPSTE/snort3:sse_identity to master

Squashed commit of the following:

commit 1e2e532752bce48867954eeb6ad6a24711f5f910
Author: Ron Dempster (rdempste) <rdempste@cisco.com>
Date:   Tue May 30 21:46:37 2023 -0400

    perf_monitor: fix data bus subscription

2 years agoPull request #3854: Handle return code from daq
Oleksii Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) [Mon, 29 May 2023 11:03:02 +0000 (11:03 +0000)] 
Pull request #3854: Handle return code from daq

Merge in SNORT/snort3 from ~YVELYKOZ/snort3:return_error_daq_handling to master

Squashed commit of the following:

commit 48dbb1120a85078f6eaefbf4ee824d08f684d619
Author: Yehor Velykozhon <yvelykoz@cisco.com>
Date:   Wed May 17 15:32:47 2023 +0300

    main: add Pig destructor to free dynamic memory

commit 07073ca724c9f6dea8d7d352b3503b157b530c25
Author: Yehor Velykozhon <yvelykoz@cisco.com>
Date:   Fri May 5 16:00:32 2023 +0300

    main: handling the return code in case of error in creation of daq instance

2 years agoPull request #3857: main: Allow network IDs to use up to 32 bits.
Steve Chew (stechew) [Thu, 25 May 2023 22:53:12 +0000 (22:53 +0000)] 
Pull request #3857: main: Allow network IDs to use up to 32 bits.

Merge in SNORT/snort3 from ~STECHEW/snort3:network_id_update to master

Squashed commit of the following:

commit f349d2e213663779010377679bf07b9062d89f0a
Author: Steve Chew <stechew@cisco.com>
Date:   Fri May 19 18:00:48 2023 -0400

    main: Allow network IDs to use up to 32 bits.

2 years agoPull request #3853: loggers: reuse sensor_id u2 event field for tenant_id value
Ron Dempster (rdempste) [Wed, 24 May 2023 13:13:18 +0000 (13:13 +0000)] 
Pull request #3853: loggers: reuse sensor_id u2 event field for tenant_id value

Merge in SNORT/snort3 from ~SVLASIUK/snort3:events_tenant_id to master

Squashed commit of the following:

commit 967bb1f63af20b3c219a1a190b9b5fbbb995e36f
Author: Serhii Vlasiuk <svlasiuk@cisco.com>
Date:   Thu May 11 18:37:03 2023 +0300

    loggers: reuse sensor_id u2 event field for tenant_id value

2 years agoPull request #3852: http_inspect: rebuild start line
Steven Baigal (sbaigal) [Tue, 23 May 2023 15:23:59 +0000 (15:23 +0000)] 
Pull request #3852: http_inspect: rebuild start line

Merge in SNORT/snort3 from ~ADMAMOLE/snort3:fix_pkt_event to master

Squashed commit of the following:

commit b0461bdcef28d7c669ef1bd38ce11bd5d706f2db
Author: Adrian Mamolea <admamole@cisco.com>
Date:   Fri May 5 09:17:25 2023 -0400

    http_inspect: rebuild start line

2 years agoPull request #3858: build: generate and tag 3.1.62.0 3.1.62.0
Priyanka Bangalore Gurudev (prbg) [Mon, 22 May 2023 01:30:00 +0000 (01:30 +0000)] 
Pull request #3858: build: generate and tag 3.1.62.0

Merge in SNORT/snort3 from ~PRBG/snort3:build_3.1.62.0 to master

Squashed commit of the following:

commit 67e8ebf226049ffa7e08ec6f6a74b121794120cd
Author: Priyanka Gurudev <prbg@cisco.com>
Date:   Sun May 21 12:12:26 2023 -0400

    build: generate and tag 3.1.62.0

2 years agoPull request #3844: appid: Added fallback check for encrypted appid before port check...
Sreeja Athirkandathil Narayanan (sathirka) [Thu, 18 May 2023 15:16:52 +0000 (15:16 +0000)] 
Pull request #3844: appid: Added fallback check for encrypted appid before port check in SSL inspection flow

Merge in SNORT/snort3 from ~OSTEPANO/snort3:ssl_fallback_to_encrypted_appid to master

Squashed commit of the following:

commit 32a0e9b13a63fe5ccf2c9b74ca1e264b846b4f6b
Author: Oleksandr Stepanov <ostepano@cisco.com>
Date:   Wed May 10 08:59:16 2023 -0400

    appid: Added logic to check for encrypted appid before assigning SSL service based on port

2 years agoPull request #3804: flow: do not recycle flow cache entries
Ron Dempster (rdempste) [Wed, 17 May 2023 20:54:44 +0000 (20:54 +0000)] 
Pull request #3804: flow: do not recycle flow cache entries

Merge in SNORT/snort3 from ~RDEMPSTE/snort3:free_flow to master

Squashed commit of the following:

commit 36cc202818b9d2d7eefd918943ee2c2739d2a414
Author: Ron Dempster (rdempste) <rdempste@cisco.com>
Date:   Tue Apr 25 09:49:46 2023 -0400

    decompress, detetion, file_api, framework: cppcheck fixes

commit 281da6ad7f3ad3b8aecfb363fd0895132ff6e301
Author: Ron Dempster (rdempste) <rdempste@cisco.com>
Date:   Tue Apr 25 09:51:25 2023 -0400

    flow: clean up flow termination

commit dc4f6ee866c7aefab7964eb4e5682c9af9d5d2db
Author: Ron Dempster (rdempste) <rdempste@cisco.com>
Date:   Mon Apr 10 10:12:23 2023 -0400

    flow: do not recycle flow cache entries

2 years agoPull request #3843: profiler: add json formatter
Oleksii Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) [Wed, 17 May 2023 09:04:50 +0000 (09:04 +0000)] 
Pull request #3843: profiler: add json formatter

Merge in SNORT/snort3 from ~ANOROKH/snort3:add_json_formatter to master

Squashed commit of the following:

commit 94832c6e4e72b9a95e644288b349eacf0560f056
Author: Anna Norokh <anorokh@cisco.com>
Date:   Wed May 3 16:55:55 2023 +0300

    profiler: add json formatter
    * separated table output;
    * added json formatter;
    * added output argument to rule_dump() command;
    * added function to put termination to json output in json_stream class;

2 years agoPull request #3823: main: Disable watchdog when Snort 3 process exits gracefully
Shanmugam S (shanms) [Tue, 16 May 2023 06:31:14 +0000 (06:31 +0000)] 
Pull request #3823: main: Disable watchdog when Snort 3 process exits gracefully

Merge in SNORT/snort3 from ~AMUTTUVA/snort3:watchdog_quit_master to master

Squashed commit of the following:

commit 05fbd9ecb7a8225b8c573e90954ed0c343abed91
Author: Akhilesh MY <amuttuva@cisco.com>
Date:   Tue Apr 25 02:03:45 2023 -0400

    main: Disable watchdog when Snort 3 process exits gracefully

2 years agoPull request #3814: Forward-port: (master) add extra jemalloc stats
Steven Baigal (sbaigal) [Fri, 12 May 2023 15:19:10 +0000 (15:19 +0000)] 
Pull request #3814: Forward-port: (master) add extra jemalloc stats

Merge in SNORT/snort3 from ~MMATIRKO/snort3:mem_counts_master to master

Squashed commit of the following:

commit 9a5d8dabaf88dadbe29cd01b54602b5631b1a9bd
Author: Russ Combs <rucombs@cisco.com>
Date:   Wed Mar 15 14:22:22 2023 -0400

    memory: add extra jemalloc counts for tracking

commit 1c078c5fa8c4fd0a99469677269d92f7b7837891
Author: Russ Combs <rucombs@cisco.com>
Date:   Tue Mar 14 22:24:37 2023 -0400

    memory: use jemalloc stats.mapped for process total

2 years agoPull request #3838: Snort2lua reference upd
Oleksii Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) [Thu, 11 May 2023 14:13:54 +0000 (14:13 +0000)] 
Pull request #3838: Snort2lua reference upd

Merge in SNORT/snort3 from ~YVELYKOZ/snort3:snort2lua_reference_upd to master

Squashed commit of the following:

commit 8db269261c14e17be57daa913a5924154541e6c6
Author: Yehor Velykozhon <yvelykoz@cisco.com>
Date:   Thu May 4 16:06:25 2023 +0300

    snort2lua: remove 'reference' option during conversion

2 years agoPull request #3841: Add check for missing Geneve layer in get_geneve_options
Steve Chew (stechew) [Wed, 10 May 2023 15:42:34 +0000 (15:42 +0000)] 
Pull request #3841: Add check for missing Geneve layer in get_geneve_options

Merge in SNORT/snort3 from ~STECHEW/snort3:fix_get_geneve_option to master

Squashed commit of the following:

commit 26ce9e4993fb40e1487e5eb5c466ec61099fd536
Author: Steve Chew <stechew@cisco.com>
Date:   Wed May 10 08:33:57 2023 -0400

    sfip/test: Fix a miscalculation of the number of codes entries.

commit 2bd6ed3dcc1e64a44fbdad95094d677f9cb00794
Author: Steve Chew <stechew@cisco.com>
Date:   Wed May 10 08:31:54 2023 -0400

    protocols: Add check for missing Geneve layer in get_geneve_options.

2 years agoPull request #3835: main, managers: set the network policy using the user id during...
Ron Dempster (rdempste) [Wed, 10 May 2023 14:15:40 +0000 (14:15 +0000)] 
Pull request #3835: main, managers: set the network policy using the user id during inspector delete

Merge in SNORT/snort3 from ~RDEMPSTE/snort3:np_during_free to master

Squashed commit of the following:

commit aa69ac344a8eecf332d56c11d81a3dd97e11e5eb
Author: Ron Dempster (rdempste) <rdempste@cisco.com>
Date:   Thu Apr 27 18:12:49 2023 -0400

    main, managers: set the network policy using the user id during inspector delete

2 years agoPull request #3836: protocols,codecs: Decode Geneve variable length options.
Ron Dempster (rdempste) [Tue, 9 May 2023 11:52:21 +0000 (11:52 +0000)] 
Pull request #3836: protocols,codecs: Decode Geneve variable length options.

Merge in SNORT/snort3 from ~STECHEW/snort3:geneve_update to master

Squashed commit of the following:

commit 6cff0abdd48f869abb22d09f80f4846d88ba7673
Author: Steve Chew <stechew@cisco.com>
Date:   Tue May 2 08:55:38 2023 -0400

    protocols,codecs: Decode Geneve variable length options.

2 years agoPull request #3834: http_inspect: add support for file transfer using Partial Content
Ron Dempster (rdempste) [Mon, 8 May 2023 13:02:27 +0000 (13:02 +0000)] 
Pull request #3834: http_inspect: add support for file transfer using Partial Content

Merge in SNORT/snort3 from ~VHORBATO/snort3:http_206 to master

Squashed commit of the following:

commit ff945654ffbf658b4c97b051819911db6d3f5fbf
Author: vhorbato <vhorbato@cisco.com>
Date:   Thu Apr 27 14:20:03 2023 +0300

    http_inspect: add support for file transfer using Partial Content

2 years agoPull request #3837: build: generate and tag 3.1.61.0 3.1.61.0
Priyanka Bangalore Gurudev (prbg) [Sat, 6 May 2023 19:16:24 +0000 (19:16 +0000)] 
Pull request #3837: build: generate and tag 3.1.61.0

Merge in SNORT/snort3 from ~PRBG/snort3:build_3.1.61.0 to master

Squashed commit of the following:

commit 9f172e7f667828e6ddce5ccd9b26e802a3db4ce6
Author: Priyanka Gurudev <prbg@cisco.com>
Date:   Thu May 4 22:36:42 2023 -0400

    build: generate and tag 3.1.61.0

2 years agoPull request #3796: appid: Ensure that TP SSL reinspection is not overwriting SMTPS...
Sreeja Athirkandathil Narayanan (sathirka) [Thu, 4 May 2023 16:11:21 +0000 (16:11 +0000)] 
Pull request #3796: appid: Ensure that TP SSL reinspection is not overwriting SMTPS service

Merge in SNORT/snort3 from ~OSTEPANO/snort3:smtps_tp to master

Squashed commit of the following:

commit f0eb3ab338d9dc0151dcd2a90cad298196c08bd0
Author: Oleksandr Stepanov <ostepano@cisco.com>
Date:   Tue Apr 4 07:24:54 2023 -0400

    appid: Ensure that TP SSL detection is not overwrite SMTPS service and client in a starttls session

2 years agoPull request #3831: appid: validate data size of SSL certificate record before parsing
Sreeja Athirkandathil Narayanan (sathirka) [Fri, 28 Apr 2023 19:17:03 +0000 (19:17 +0000)] 
Pull request #3831: appid: validate data size of SSL certificate record before parsing

Merge in SNORT/snort3 from ~SATHIRKA/snort3:ssl_validate_crash to master

Squashed commit of the following:

commit 73c6ffdcf155f88b01b7ac8e7070aacc7aa9319c
Author: Sreeja Athirkandathil Narayanan <sathirka@cisco.com>
Date:   Thu Apr 27 13:15:13 2023 -0400

    appid: validate data size of SSL certificate record before parsing

2 years agoPull request #3803: appid: AppIdPegCounters thread fixes
Sreeja Athirkandathil Narayanan (sathirka) [Fri, 28 Apr 2023 17:55:50 +0000 (17:55 +0000)] 
Pull request #3803: appid: AppIdPegCounters thread fixes

Merge in SNORT/snort3 from ~OSTEPANO/snort3:appid_pegs_data_ref to master

Squashed commit of the following:

commit 49fedbbdbfb3e6e06a131f51aefec1603a1b3d83
Author: Oleksandr Stepanov <ostepano@cisco.com>
Date:   Fri Apr 7 12:02:51 2023 -0400

    appid: AppIdPegCounters thread data handling refactored to prevent data races

2 years agoPull request #3825: tcp_reassembler: Fix missing VLAN ids in TCP pseudopkts
Steven Baigal (sbaigal) [Fri, 28 Apr 2023 17:38:41 +0000 (17:38 +0000)] 
Pull request #3825: tcp_reassembler: Fix missing VLAN ids in TCP pseudopkts

Merge in SNORT/snort3 from ~CHSHERWI/snort3:vlan_fix2 to master

Squashed commit of the following:

commit d89e24f57bca7d1f9af03858b5c7069d84039fce
Author: Chris Sherwin <chsherwi@cisco.com>
Date:   Thu Apr 27 15:15:15 2023 -0400

    stream tcp: Populate TCP pseudopackets with VLAN ids in TCP reassembler to avoid
        issues with secondary flow creation / expected flow cache

2 years agoPull request #3832: CMake: update sed
Oleksii Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) [Fri, 28 Apr 2023 12:30:57 +0000 (12:30 +0000)] 
Pull request #3832: CMake: update sed

Merge in SNORT/snort3 from ~OSHUMEIK/snort3:js_norm_cmake_sed to master

Squashed commit of the following:

commit c4bd8e8b2c39d96c367bfb6c6e1340c686add726
Author: Oleksii Shumeiko <oshumeik@cisco.com>
Date:   Fri Apr 28 12:23:30 2023 +0300

    cmake: update sed call

    Use '|' rather than '+' for sed separator.
    A target name can contain any symbol, for example '+' on OpenWrt.
    Picking '|' as a more common substitution for '/'.

    Thanks to graysky for reporting the issue.

2 years agoPull request #3830: Force initalization of thread local variables.
Oleksii Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) [Fri, 28 Apr 2023 11:33:08 +0000 (11:33 +0000)] 
Pull request #3830: Force initalization of thread local variables.

Merge in SNORT/snort3 from ~OSHUMEIK/snort3:fix_nullptr_memman to master

Squashed commit of the following:

commit 09db004f568e7d14f81aad4d30533e3f758e6b0c
Author: Oleksii Shumeiko <oshumeik@cisco.com>
Date:   Mon Apr 24 14:24:37 2023 +0300

    memory: provide a default value for pointers if the module has not been initialized

2 years agoPull request #3811: main: reset the global s_network_policy pointer at main thread...
Steve Chew (stechew) [Thu, 27 Apr 2023 17:34:25 +0000 (17:34 +0000)] 
Pull request #3811: main: reset the global s_network_policy pointer at main thread as part of snort cleanup flow

Merge in SNORT/snort3 from ~SVLASIUK/snort3:firewall_hitcount to master

Squashed commit of the following:

commit f6930a067cc2252a15efb9eea16692b7ade6295e
Author: Serhii Vlasiuk <svlasiuk@cisco.com>
Date:   Thu Apr 13 20:02:46 2023 +0300

    managers: check main SnortConfig pointer in InspectorManager::get_inspector() to avoid memory bad access calls

2 years agoPull request #3826: Reap fix master
Ron Dempster (rdempste) [Thu, 27 Apr 2023 14:08:35 +0000 (14:08 +0000)] 
Pull request #3826: Reap fix master

Merge in SNORT/snort3 from ~RDEMPSTE/snort3:reap_fix_master to master

Squashed commit of the following:

commit fcaaf4316971b0f38e170e3d92a98571c184e25a
Author: Ron Dempster (rdempste) <rdempste@cisco.com>
Date:   Thu Apr 20 14:49:11 2023 -0400

    flow, hash, stream: add a free list node count that is output as a peg count

commit 47a20ab19a85ac3a33787c5ab53a30d15c1208d9
Author: Ron Dempster (rdempste) <rdempste@cisco.com>
Date:   Wed Apr 19 13:05:52 2023 -0400

    memory: fix memory pruning race condition and bail on reap failure

2 years agoPull request #3815: profiler: add shell commands
Oleksii Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) [Thu, 27 Apr 2023 10:02:57 +0000 (10:02 +0000)] 
Pull request #3815: profiler: add shell commands

Merge in SNORT/snort3 from ~ASERBENI/snort3:profiler_shell_commands to master

Squashed commit of the following:

commit 7c951114e3b54775c8f30e889f050f431e170842
Author: Anna Norokh <anorokh@cisco.com>
Date:   Tue Apr 11 13:16:59 2023 +0300

    snort: add show_config_generation() command

commit a12cf4ae89d500160412504e2c1c4a7aea38c665
Author: Anna Norokh <anorokh@cisco.com>
Date:   Tue Apr 11 13:15:46 2023 +0300

    profiler: add shell commands

commit 3d388c55ff0a35776413b41386e5db5b0378545f
Author: vhorbato <vhorbato@cisco.com>
Date:   Wed Feb 15 12:45:52 2023 +0200

    profiler: move profiler module to separate files

2 years agoPull request #3822: Pull request #592: flow: Defensive fix to prevent crash if flow...
Steven Baigal (sbaigal) [Wed, 26 Apr 2023 14:56:07 +0000 (14:56 +0000)] 
Pull request #3822: Pull request #592: flow: Defensive fix to prevent crash if flow->prev is nullptr.

Merge in SNORT/snort3 from ~SBAIGAL/snort3:unideffixmaster to master

Squashed commit of the following:

commit d993b3cb09234ca2333fbf370ddbc0f168e5bfc7
Author: Steven Baigal (sbaigal) <sbaigal@cisco.com>
Date:   Tue Apr 18 22:47:33 2023 +0000

    Pull request #592: flow: Defensive fix to prevent crash if flow->prev is nullptr.

    Merge in FIREPOWER/snort3 from ~STECHEW/snort3:uni_defensive_fix to release/7.4.0

    * commit '8e476581a05fb61df0138ce30d6a9ebc9d053447':
      flow: Defensive fix to prevent crash if flow->prev is nullptr.

2 years agoPull request #3820: build: remove unused header
Oleksii Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) [Sun, 23 Apr 2023 07:14:42 +0000 (07:14 +0000)] 
Pull request #3820: build: remove unused header

Merge in SNORT/snort3 from ~OSHUMEIK/snort3:build_malloc_header to master

Squashed commit of the following:

commit 79b926addf2f5e5dabf1700eaae12da0f0099016
Author: Oleksii Shumeiko <oshumeik@cisco.com>
Date:   Thu Apr 20 16:34:25 2023 +0300

    build: remove unused header

    Thanks to Rui Chen for reporting the issue.

2 years agoPull request #3819: build: generate and tag 3.1.60.0 3.1.60.0
Priyanka Bangalore Gurudev (prbg) [Fri, 21 Apr 2023 14:26:54 +0000 (14:26 +0000)] 
Pull request #3819: build: generate and tag 3.1.60.0

Merge in SNORT/snort3 from ~PRBG/snort3:build_3.1.60.0 to master

Squashed commit of the following:

commit 67777edd17ca59c103144cc572ab9b5165d3ec65
Author: Priyanka Gurudev <prbg@cisco.com>
Date:   Thu Apr 20 15:40:28 2023 -0400

    build: generate and tag 3.1.60.0

2 years agoPull request #3807: appid: Making free_servicematch_list thread local
Sreeja Athirkandathil Narayanan (sathirka) [Tue, 18 Apr 2023 19:31:48 +0000 (19:31 +0000)] 
Pull request #3807: appid: Making free_servicematch_list thread local

Merge in SNORT/snort3 from ~OSTEPANO/snort3:csd_pattern_search_crash to master

Squashed commit of the following:

commit d8dc69deffebdb3205b7a11a9e0d35a72223228c
Author: Oleksandr Stepanov <ostepano@cisco.com>
Date:   Fri Apr 14 09:54:00 2023 -0400

    appid: Making free_servicematch_list thread local

2 years agoPull request #3809: src: fix broken unit test/tweak define related to previous operat...
Brian Morris (bmorris2) [Fri, 14 Apr 2023 16:00:26 +0000 (16:00 +0000)] 
Pull request #3809: src: fix broken unit test/tweak define related to previous operator bool fixes

Merge in SNORT/snort3 from ~BMORRIS2/snort3:cppcheck_operator to master

Squashed commit of the following:

commit 255884ac3dd41076a21b901a286fc1de9437abbd
Author: Brian Morris <bmorris2@cisco.com>
Date:   Fri Apr 14 14:52:20 2023 +0000

    src: fix broken unit test/tweak define related to previous operator bool fixes

2 years agoPull request #3805: src: change a few operator bool functions to named functions
Brian Morris (bmorris2) [Thu, 13 Apr 2023 15:34:52 +0000 (15:34 +0000)] 
Pull request #3805: src: change a few operator bool functions to named functions

Merge in SNORT/snort3 from ~BMORRIS2/snort3:cppcheck_operator to master

Squashed commit of the following:

commit cf6f1f58a76a597302628847200369d912d890db
Author: Brian Morris <bmorris2@cisco.com>
Date:   Wed Apr 12 15:52:18 2023 +0000

    src: change a few operator bool functions to named functions

2 years agoPull request #3775: appid: Adds logs for memory and pattern count
Sreeja Athirkandathil Narayanan (sathirka) [Wed, 12 Apr 2023 17:46:20 +0000 (17:46 +0000)] 
Pull request #3775: appid: Adds logs for memory and pattern count

Merge in SNORT/snort3 from ~LCZARNIK/snort3:appid_logs to master

Squashed commit of the following:

commit b3115951ae0ed617ae5acb715e351c8789f8fba7
Author: Lukasz Czarnik <lczarnik@cisco.com>
Date:   Fri Mar 3 10:16:27 2023 -0500

    appid: log maxrss difference and pattern count during appid initialization and reload detectors

2 years agoPull request #3801: appid: make ssl app group id lookup set payload and client
Ron Dempster (rdempste) [Mon, 10 Apr 2023 19:55:34 +0000 (19:55 +0000)] 
Pull request #3801: appid: make ssl app group id lookup set payload and client

Merge in SNORT/snort3 from ~RDEMPSTE/snort3:cert_viz_take_2 to master

Squashed commit of the following:

commit a36b1fbaeb2485a2d9e20354af8062fca368e988
Author: Ron Dempster (rdempste) <rdempste@cisco.com>
Date:   Wed Apr 5 17:01:39 2023 -0400

    appid: make ssl app group id lookup set payload and client

2 years agoPull request #3782: appid: Fixed TSAN warnings
Sreeja Athirkandathil Narayanan (sathirka) [Mon, 10 Apr 2023 16:03:02 +0000 (16:03 +0000)] 
Pull request #3782: appid: Fixed TSAN warnings

Merge in SNORT/snort3 from ~BSACHDEV/snort3:tsan_warnings_part1 to master

Squashed commit of the following:

commit b2934642d9bf0fcf7d53f6fc80c4540e7a63736c
Author: bsachdev <bsachdev@cisco.com>
Date:   Wed Mar 8 09:03:53 2023 -0500

    appid: Fixed TSAN warnings

2 years agoPull request #3802: build: generate and tag 3.1.59.0 3.1.59.0
Priyanka Bangalore Gurudev (prbg) [Fri, 7 Apr 2023 13:56:22 +0000 (13:56 +0000)] 
Pull request #3802: build: generate and tag 3.1.59.0

Merge in SNORT/snort3 from ~PRBG/snort3:build_3.1.59.0 to master

Squashed commit of the following:

commit c6153096f840bc6a00588b108b1f5aeb0260bc2a
Author: Priyanka Gurudev <prbg@cisco.com>
Date:   Thu Apr 6 17:21:16 2023 -0400

    build: generate and tag 3.1.59.0

2 years agoPull request #3799: http2_inspect: Snort3 crash due to HTTP2 Stream Re-transmission.
Steven Baigal (sbaigal) [Wed, 5 Apr 2023 18:28:42 +0000 (18:28 +0000)] 
Pull request #3799: http2_inspect: Snort3 crash due to HTTP2 Stream Re-transmission.

Merge in SNORT/snort3 from ~RSHAFIQ/snort3:http2_reload_fix to master

Squashed commit of the following:

commit eec6509dbafa0d13ddb4bd6fd854ccdd806a1172
Author: rshafiq <rshafiq@cisco.com>
Date:   Tue Apr 4 14:37:13 2023 -0400

    http2_inspect: make flow data reload safe

2 years agoPull request #3798: thread_config: add preemptive watchdog kick for flow deletion
Steven Baigal (sbaigal) [Tue, 4 Apr 2023 21:16:56 +0000 (21:16 +0000)] 
Pull request #3798: thread_config: add preemptive watchdog kick for flow deletion

Merge in SNORT/snort3 from ~ADMAMOLE/snort3:wdt_flow_deletes to master

Squashed commit of the following:

commit da7e7eeddf30ca011d46949ec76df28480ec331d
Author: Adrian Mamolea <admamole@cisco.com>
Date:   Tue Apr 4 15:35:17 2023 -0400

    thread_config: add preemptive watchdog kick for flow deletion

2 years agoPull request #3797: Revert "Pull request #3790: thread_config: remove message use...
Steven Baigal (sbaigal) [Tue, 4 Apr 2023 19:18:02 +0000 (19:18 +0000)] 
Pull request #3797: Revert "Pull request #3790: thread_config: remove message use in wdt"

Merge in SNORT/snort3 from ~SBAIGAL/snort3:revert_wgt1 to master

Squashed commit of the following:

commit 89cecd40161799c1c0afbaf83698cd77af32c172
Author: Steven Baigal <sbaigal@cisco.com>
Date:   Tue Apr 4 14:55:20 2023 -0400

    Revert "Pull request #3790: thread_config: remove message use in wdt"

    This reverts commit 824a06ebdc56f88ec8dfe9c96f31a712e053e00e.

2 years agoPull request #3790: thread_config: remove message use in wdt
Steven Baigal (sbaigal) [Tue, 4 Apr 2023 18:21:32 +0000 (18:21 +0000)] 
Pull request #3790: thread_config: remove message use in wdt

Merge in SNORT/snort3 from ~ADMAMOLE/snort3:wdt_atomic to master

Squashed commit of the following:

commit d963d3fa286084fd2e537c6698ebdbfc0806dc81
Author: Adrian Mamolea <admamole@cisco.com>
Date:   Thu Mar 30 12:46:15 2023 -0400

    watchdog: address comments from Steven

commit 85f9cbf5a6b99f0812ae20a4d004d41b4f02a74a
Author: Adrian Mamolea <admamole@cisco.com>
Date:   Thu Mar 23 09:24:42 2023 -0400

    thread_config: remove message use in wdt

2 years agoPull request #3793: 7.5.0 Forward-port -- memory: subtract the allocated memory from...
Steven Baigal (sbaigal) [Tue, 4 Apr 2023 15:41:34 +0000 (15:41 +0000)] 
Pull request #3793: 7.5.0 Forward-port -- memory: subtract the allocated memory from the thread pruned before comparing to the target

Merge in SNORT/snort3 from ~MMATIRKO/snort3:memory_forward_75 to master

Squashed commit of the following:

commit c1e4fa90a08069e186bdf9717bcb8524b123a220
Author: Steve Chew (stechew) <stechew@cisco.com>
Date:   Wed Mar 29 05:26:48 2023 +0000

    Pull request #554: memory: subtract the allocated memory from the thread pruned before comparing to the target

    Merge in FIREPOWER/snort3 from ~RDEMPSTE/snort3:free_space_allocs to hotfix/7.0.5-DE

    * commit '71b3d000f9788a3ef14f6b9b5a606354623fe58f':
      memory: subtract the allocated memory from the thread pruned before comparing to the target

2 years agoPull request #3794: stream: store thread local flow control pointer in global
Shanmugam S (shanms) [Tue, 4 Apr 2023 08:08:02 +0000 (08:08 +0000)] 
Pull request #3794: stream: store thread local flow control pointer in global

Merge in SNORT/snort3 from ~KBHANDAN/snort3:crash_dump_flow_control to master

Squashed commit of the following:

commit e6dd384b6ba178393dcf1bd56721b7243646a05f
Author: Kaushal Bhandankar <kbhandan@cisco.com>
Date:   Tue Apr 4 10:35:32 2023 +0530

    stream: store thread local flow control pointer in global

2 years agoPull request #3785: file_api: handling file cache context
Bhargava Jandhyala (bjandhya) [Mon, 3 Apr 2023 05:43:40 +0000 (05:43 +0000)] 
Pull request #3785: file_api: handling file cache context

Merge in SNORT/snort3 from ~VKAMBALA/snort3:file_context_75 to master

Squashed commit of the following:

commit d2ef60bb3aadead55f22384cc5263882262f40d7
Author: krishnakanth <vkambala@cisco.com>
Date:   Tue Mar 21 18:47:29 2023 +0530

    file_api: handling file cache context

2 years agoPull request #3791: http2_inspect: clear flow stream_intf with flow_data
Oleksii Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) [Fri, 31 Mar 2023 07:53:47 +0000 (07:53 +0000)] 
Pull request #3791: http2_inspect: clear flow stream_intf with flow_data

Merge in SNORT/snort3 from ~VHORBATO/snort3:http2_stream_intf to master

Squashed commit of the following:

commit 6e6662bc009fddcdd8abc4c4d506f8144847b87b
Author: vhorbato <vhorbato@cisco.com>
Date:   Fri Mar 24 19:23:41 2023 +0200

    http2_inspect: clear flow stream_intf with flow_data

2 years agoPull request #3787: flow_cache: Prune multiple flows
Shanmugam S (shanms) [Fri, 24 Mar 2023 08:10:12 +0000 (08:10 +0000)] 
Pull request #3787: flow_cache: Prune multiple flows

Merge in SNORT/snort3 from ~KBHANDAN/snort3:prune_multiple to master

Squashed commit of the following:

commit 2851a29722b096be89b291dc8d2e88dd0764510b
Author: Kaushal Bhandankar <kbhandan@cisco.com>
Date:   Thu Mar 23 01:28:22 2023 +0530

    flow_cache: Prune multiple flows

2 years agoPull request #3786: build: generate and tag 3.1.58.0 3.1.58.0
Priyanka Bangalore Gurudev (prbg) [Thu, 23 Mar 2023 01:51:45 +0000 (01:51 +0000)] 
Pull request #3786: build: generate and tag 3.1.58.0

Merge in SNORT/snort3 from ~PRBG/snort3:build_3.1.58.0 to master

Squashed commit of the following:

commit b84026ea28ab20d03aaff276ced50b9e9fecbc0a
Author: Priyanka Gurudev <prbg@cisco.com>
Date:   Wed Mar 22 11:50:40 2023 -0400

    build: generate and tag 3.1.58.0

2 years agoPull request #3781: detection: fix queue_limit pegcounter evaluation
Oleksii Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) [Tue, 21 Mar 2023 16:26:01 +0000 (16:26 +0000)] 
Pull request #3781: detection: fix queue_limit pegcounter evaluation

Merge in SNORT/snort3 from ~YCHALOV/snort3:snort3_detection_queue_limit to master

Squashed commit of the following:

commit 172915ec46eb9d912f1d6b0a9d9b17cffa3e53e1
Author: Yurii Chalov <ychalov@cisco.com>
Date:   Fri Mar 10 10:20:31 2023 +0100

    detection: fix queue_limit pegcounter evaluation

2 years agoPull request #3766: host cache: removed some log to prevent log flooding
Steven Baigal (sbaigal) [Tue, 21 Mar 2023 13:16:27 +0000 (13:16 +0000)] 
Pull request #3766: host cache: removed some log to prevent log flooding

Merge in SNORT/snort3 from ~RSHAFIQ/snort3:host_cache_logs to master

Squashed commit of the following:

commit ec6949eab03ba034c9ed416476329e1a6c6ad697
Author: rshafiq <rshafiq@cisco.com>
Date:   Thu Feb 16 09:30:46 2023 -0500

    host cache: removed some log to prevent log flooding

2 years agoPull request #3784: js_norm: Initialize normalizer after script was found
Oleksii Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) [Tue, 21 Mar 2023 11:40:22 +0000 (11:40 +0000)] 
Pull request #3784: js_norm: Initialize normalizer after script was found

Merge in SNORT/snort3 from ~DKYRYLOV/snort3:jsn_perf_fix to master

Squashed commit of the following:

commit a54f7df1a0443a886091118006020608ef3140b6
Author: dkyrylov <dkyrylov@cisco.com>
Date:   Fri Mar 17 18:20:46 2023 +0200

    js_norm: initialize normalization context only when script is detected

2 years agoPull request #3783: memory: add shell command to dump heap stats
Steven Baigal (sbaigal) [Mon, 20 Mar 2023 14:45:59 +0000 (14:45 +0000)] 
Pull request #3783: memory: add shell command to dump heap stats

Merge in SNORT/snort3 from ~SBAIGAL/snort3:memstats to master

Squashed commit of the following:

commit ebe8554f4f5e95c464f08e57393d4fc204b531a0
Author: Steven Baigal <sbaigal@cisco.com>
Date:   Wed Mar 15 17:19:35 2023 -0400

    memory: add shell command to dump heap stats

2 years agoPull request #3780: appid: give precedence to eve detected client over appid when...
Sreeja Athirkandathil Narayanan (sathirka) [Fri, 17 Mar 2023 18:00:30 +0000 (18:00 +0000)] 
Pull request #3780: appid: give precedence to eve detected client over appid when eve_http_client_mapping config is set

Merge in SNORT/snort3 from ~SATHIRKA/snort3:eve_http_process_client_detection to master

Squashed commit of the following:

commit 214fba55d508bd25ecbe05aa55618d17085daada
Author: Sreeja Athirkandathil Narayanan <sathirka@cisco.com>
Date:   Thu Mar 9 11:20:54 2023 -0500

    appid: give precedence to eve detected client over appid when eve_http_client_mapping config is set

2 years agoPull request #3778: actions: restore rtn check in Actions::alert and add to Actions...
Oleksii Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) [Mon, 13 Mar 2023 07:58:20 +0000 (07:58 +0000)] 
Pull request #3778: actions: restore rtn check in Actions::alert and add to Actions::log

Merge in SNORT/snort3 from ~ANOROKH/snort3:rtn_check to master

Squashed commit of the following:

commit d969e687476e4f6ca453fa0501691e93dd0b8442
Author: AnnaNorokh <annanorokh15@gmail.comm>
Date:   Thu Mar 9 16:00:01 2023 +0200

    actions: restore rtn check in Actions::alert and add to Actions::log

2 years agoPull request #3777: loggers: fix pcap flushing
Oleksii Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) [Mon, 13 Mar 2023 07:43:17 +0000 (07:43 +0000)] 
Pull request #3777: loggers: fix pcap flushing

Merge in SNORT/snort3 from ~YCHALOV/snort3:snort3_sigsegv to master

Squashed commit of the following:

commit a57f1b0348b5d4262b8c5df81af6ab297a89de98
Author: Yurii Chalov <ychalov@cisco.com>
Date:   Mon Mar 6 21:41:35 2023 +0100

    loggers: fix pcap flushing

2 years agoPull request #3779: Build 3.1.57.0 3.1.57.0
Priyanka Bangalore Gurudev (prbg) [Mon, 13 Mar 2023 02:14:03 +0000 (02:14 +0000)] 
Pull request #3779: Build 3.1.57.0

Merge in SNORT/snort3 from ~PRBG/snort3:build_3.1.57.0 to master

Squashed commit of the following:

commit b1ca05cd7d06a3cc4b3cd199ac754527a32bb5b7
Author: Priyanka Gurudev <prbg@cisco.com>
Date:   Thu Mar 9 14:03:27 2023 -0500

    build: generate and tag 3.1.57.0

2 years agoPull request #3690: telnet: added paf based splitter for telnet
Bhargava Jandhyala (bjandhya) [Tue, 7 Mar 2023 16:58:31 +0000 (16:58 +0000)] 
Pull request #3690: telnet: added paf based splitter for telnet

Merge in SNORT/snort3 from ~SMANGHAT/snort3:snort_telnet_splitter to master

Squashed commit of the following:

commit 573f28712abe09bbcdd7d693986fffffa7eb6881
Author: Shailendra Manghate <smanghat@cisco.com>
Date:   Tue Mar 7 15:38:22 2023 +0530

    ftp_telnet: updated flushing around subnegotiation parameters

    The splitter will flush after EOL or SE. It will ignore EOL between SB and SE.

2 years agoPull request #3772: Hyperscan scratch space.
Oleksii Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) [Fri, 3 Mar 2023 12:20:05 +0000 (12:20 +0000)] 
Pull request #3772: Hyperscan scratch space.

Merge in SNORT/snort3 from ~OSHUMEIK/snort3:mpse_hs_scratch to master

Squashed commit of the following:

commit 84e671286cba6537b4893d2425e0542e008e758a
Author: Oleksii Shumeiko <oshumeik@cisco.com>
Date:   Fri Feb 24 22:34:08 2023 +0200

    search_engine: allocate a single shared scratch space

    All threads, compiling mpse database, update the same scratch space sequentially.

2 years agoPull request #3769: profiler: add rule time percentage table field
Oleksii Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) [Mon, 27 Feb 2023 13:16:51 +0000 (13:16 +0000)] 
Pull request #3769: profiler: add rule time percentage table field

Merge in SNORT/snort3 from ~YCHALOV/snort3:snort_rule_profiler_per to master

Squashed commit of the following:

commit abd4ea019de96d2083c46c0d898e84099a83615e
Author: Yurii Chalov <ychalov@cisco.com>
Date:   Fri Feb 17 14:27:11 2023 +0100

    profiler: add rule time percentage table field

2 years agoPull request #3771: build: generate and tag 3.1.56.0 3.1.56.0
Priyanka Bangalore Gurudev (prbg) [Thu, 23 Feb 2023 15:50:35 +0000 (15:50 +0000)] 
Pull request #3771: build: generate and tag 3.1.56.0

Merge in SNORT/snort3 from ~PRBG/snort3:build_3.1.56.0 to master

Squashed commit of the following:

commit 42baa9b03a8293dac46f75195a512c52ceffa0bc
Author: Priyanka Gurudev <prbg@cisco.com>
Date:   Wed Feb 22 20:18:39 2023 -0500

    build: generate and tag 3.1.56.0

2 years agoPull request #3763: appid: merge cname pattern matchers with ssl pattern matchers
Sreeja Athirkandathil Narayanan (sathirka) [Thu, 16 Feb 2023 17:10:51 +0000 (17:10 +0000)] 
Pull request #3763: appid: merge cname pattern matchers with ssl pattern matchers

Merge in SNORT/snort3 from ~OSTEPANO/snort3:cname_and_cert_merge to master

Squashed commit of the following:

commit 9be16131179eeff287720a474b410885b19cff7a
Author: Oleksandr Stepanov <ostepano@cisco.com>
Date:   Thu Feb 9 10:41:51 2023 -0500

    appid: merge cname pattern matchers with ssl pattern matchers

2 years agoPull request #3764: configure: fix typo in jemalloc with tcmalloc error message
Russ Combs (rucombs) [Sun, 12 Feb 2023 11:13:33 +0000 (11:13 +0000)] 
Pull request #3764: configure: fix typo in jemalloc with tcmalloc error message

Merge in SNORT/snort3 from ~RUCOMBS/snort3:mem_config to master

Squashed commit of the following:

commit 7b2c5a1442a406af1869ce7b408fdeeec44a003e
Author: Russ Combs <rucombs@cisco.com>
Date:   Thu Feb 9 11:31:56 2023 -0500

    configure: fix typo in jemalloc with tcmalloc error message

2 years agoPull request #3753: sd_pattern: keep obfuscation blocks per buffer
Oleksii Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) [Fri, 10 Feb 2023 09:33:19 +0000 (09:33 +0000)] 
Pull request #3753: sd_pattern: keep obfuscation blocks per buffer

Merge in SNORT/snort3 from ~ASERBENI/snort3:sd_obfuscation to master

Squashed commit of the following:

commit 0db98b656216676553096952d7df2d815e073627
Author: Andrii Serbeniuk <aserbeni@cisco.com>
Date:   Tue Jan 31 11:12:57 2023 +0200

    doc: update sd_pattern docs after obfuscation changes

commit 7699a8338c6d7ec534d648d16cae8fde7947fd3a
Author: Andrii Serbeniuk <aserbeni@cisco.com>
Date:   Mon Jan 23 11:26:18 2023 +0200

    sd_pattern: keep obfuscation blocks per buffer

2 years agoPull request #3756: copyright: update for year 2023
Steven Baigal (sbaigal) [Fri, 10 Feb 2023 01:44:24 +0000 (01:44 +0000)] 
Pull request #3756: copyright: update for year 2023

Merge in SNORT/snort3 from ~RSHAFIQ/snort3:copyright_update_year_2023 to master

Squashed commit of the following:

commit 74b7468527b55e3f54b7969b30a7fcb53648fe2c
Author: rshafiq <rshafiq@cisco.com>
Date:   Mon Feb 6 15:03:24 2023 -0500

    copyright: update for year 2023

2 years agoPull request #3755: appid: add validation for rpcbind universal address
Sreeja Athirkandathil Narayanan (sathirka) [Thu, 9 Feb 2023 21:25:29 +0000 (21:25 +0000)] 
Pull request #3755: appid: add validation for rpcbind universal address

Merge in SNORT/snort3 from ~SATHIRKA/snort3:rpc_bind_uaddr_validate to master

Squashed commit of the following:

commit fff62286d419f493c0882fb1d94b4f3fe21f843a
Author: Sreeja Athirkandathil Narayanan <sathirka@cisco.com>
Date:   Wed Feb 1 10:29:32 2023 -0500

    appid: add validation for rpcbind universal address

2 years agoPull request #3761: build: generate and tag 3.1.55.0 3.1.55.0
Priyanka Bangalore Gurudev (prbg) [Thu, 9 Feb 2023 03:49:01 +0000 (03:49 +0000)] 
Pull request #3761: build: generate and tag 3.1.55.0

Merge in SNORT/snort3 from ~PRBG/snort3:build_3.1.55.0 to master

Squashed commit of the following:

commit b8adbca0e683e91cc9aed32bf556420d902395a1
Author: Priyanka Gurudev <prbg@cisco.com>
Date:   Wed Feb 8 15:53:28 2023 -0500

    build: generate and tag 3.1.55.0

2 years agoPull request #3757: build: fix configure_cmake.sh 'too many arguments' error
Russ Combs (rucombs) [Tue, 7 Feb 2023 19:25:30 +0000 (19:25 +0000)] 
Pull request #3757: build: fix configure_cmake.sh 'too many arguments' error

Merge in SNORT/snort3 from ~RUCOMBS/snort3:jem_tcm to master

Squashed commit of the following:

commit 52e2b486adf8562f5c6578a0ab44d6ce3846dcf2
Author: Russ Combs <rucombs@cisco.com>
Date:   Tue Feb 7 10:00:51 2023 -0500

    build: fix configure_cmake.sh 'too many arguments' error

2 years agoPull request #3752: detection: add new pegcount
Oleksii Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) [Tue, 7 Feb 2023 08:59:44 +0000 (08:59 +0000)] 
Pull request #3752: detection: add new pegcount

Merge in SNORT/snort3 from ~YCHALOV/snort3:sse_total_distance to master

Squashed commit of the following:

commit f41962a935ec8edf4de99df43bcc569877afc9f8
Author: Yurii Chalov <ychalov@cisco.com>
Date:   Thu Jan 26 13:08:52 2023 +0100

    detection: add new pegcount

2 years agoPull request #3742: appid: updating lua API to accomodate netbios domain extraction...
Sreeja Athirkandathil Narayanan (sathirka) [Mon, 6 Feb 2023 15:23:07 +0000 (15:23 +0000)] 
Pull request #3742: appid: updating lua API to accomodate netbios domain extraction, substring search, and substring index.

Merge in SNORT/snort3 from ~AANTONYK/snort3:netbios_donain_name_detection_on_SMB_traffic to master

Squashed commit of the following:

commit 29bf509e59cc0cdbbbe29e1ffe06ed216202325b
Author: Clifford Judge <cljudge@cisco.com>
Date:   Mon Apr 25 10:54:52 2022 -0400

    appid: updating lua API to accomodate netbios domain extraction, substring search, and substring index.

2 years agoPull request #3740: appid: Support for IPv4 and IPv6 subnets for First Packet API
Sreeja Athirkandathil Narayanan (sathirka) [Thu, 2 Feb 2023 21:48:58 +0000 (21:48 +0000)] 
Pull request #3740: appid: Support for IPv4 and IPv6 subnets for First Packet API

Merge in SNORT/snort3 from ~OSTEPANO/snort3:subnet_first_packet_api to master

Squashed commit of the following:

commit f6bcb8fbe09223f566cafc3a40c3e57c174998e0
Author: Umang Sharma <umasharm@cisco.com>
Date:   Fri Dec 9 06:38:37 2022 -0500

    appid: Support for IPv4 and IPv6 subnets for First Packet API