[Oisf-devel] [COMMIT] OISF branch, master, updated. suricata-1.2beta1-62-gd24b3a0
noreply at openinfosecfoundation.org
noreply at openinfosecfoundation.org
Thu Jan 5 16:25:15 UTC 2012
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "OISF".
The branch, master has been updated
via d24b3a0e50942a544629025f59071d2c4cc73873 (commit)
via 279b8b4027a058857775e67e3ec969a3ab00bc9f (commit)
via 9a2a4802f440ea8acf9c1a30180250433103a5b0 (commit)
via 0399a06f4f0d9a52ce76b5cd89b70ad981af30ba (commit)
via db5ca0f3a4f2f210372eae2a834da76ad8d59573 (commit)
via a565148fb16974086748118bbabc1402fb0f7ac7 (commit)
via 51eb96053c140df509bf66f3240d30dc3572a918 (commit)
via c3eaa6cc60064d2c278e53aecc400d55d2f89e54 (commit)
via 745b61171af167dfe5756920f968d976bd4b6366 (commit)
via e893e860d440c1ed98dbc71c4b0adde92d307d80 (commit)
via 1d1271fd38fdeb6da3bbd240368f5dc1ea8ad88b (commit)
via 6062e00c2b18ce5e62ef3e5dc974af3547eafbd5 (commit)
via 551cb3e4c27e7bba2f2cbddd38b1cb0659ec7776 (commit)
via 623bb38d1c3c11c6ae8b16c09c99165c61062b2f (commit)
via 8d635ddfc25bef83927f2b2d723db4dc111bb13a (commit)
via 67f791e891ab0afe72989f06c198657286058a84 (commit)
via f6ddaf3341c008da9fcc7f381e003c165f6ee2e4 (commit)
via 5dc46ae7c70028280c3be2d96aa71049142aa001 (commit)
via 81bc6f55189f270579e0e0a9b5b389487916bf41 (commit)
via 9324ed7b90043fc2fe9bdf8cfb71a2d6d70b3d89 (commit)
from 517040c4af9d83adbc9165831658c217cfc17c79 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit d24b3a0e50942a544629025f59071d2c4cc73873
Author: Victor Julien <victor at inliniac.net>
Date: Thu Jan 5 17:24:14 2012 +0100
Clean up csum detection output, misc fixes.
commit 279b8b4027a058857775e67e3ec969a3ab00bc9f
Author: Eric Leblond <eric at regit.org>
Date: Wed Jan 4 15:02:19 2012 +0100
config: Add explanation for checksum-checks options
commit 9a2a4802f440ea8acf9c1a30180250433103a5b0
Author: Eric Leblond <eric at regit.org>
Date: Mon Jan 2 17:51:21 2012 +0100
pf-ring: add support for checksum verif mode
This patch adds support for checksum verification mode.
Supported mode are yes, no, auto and rx-only.
commit 0399a06f4f0d9a52ce76b5cd89b70ad981af30ba
Author: Eric Leblond <eric at regit.org>
Date: Wed Jan 4 19:15:56 2012 +0100
pcap: fix typo
commit db5ca0f3a4f2f210372eae2a834da76ad8d59573
Author: Eric Leblond <eric at regit.org>
Date: Tue Jan 3 16:42:38 2012 +0100
pcap: add auto mode support
commit a565148fb16974086748118bbabc1402fb0f7ac7
Author: Eric Leblond <eric at regit.org>
Date: Wed Jan 4 19:24:53 2012 +0100
af-packet: fallback if 'kernel' mode is not supported
This patch adds a fallback to full checksum validation if 'kernel'
mode is not supported by the running kernel.
commit 51eb96053c140df509bf66f3240d30dc3572a918
Author: Eric Leblond <eric at regit.org>
Date: Tue Jan 3 16:42:03 2012 +0100
af-packet: auto mode support
commit c3eaa6cc60064d2c278e53aecc400d55d2f89e54
Author: Eric Leblond <eric at regit.org>
Date: Tue Jan 3 16:38:53 2012 +0100
Add per-interface counter for invalid checksum.
This patch adds a per-device counter for invalid checksum as
well as a simple packet counter.
commit 745b61171af167dfe5756920f968d976bd4b6366
Author: Eric Leblond <eric at regit.org>
Date: Tue Jan 3 10:48:44 2012 +0100
Introduce LiveGetDevice function
commit e893e860d440c1ed98dbc71c4b0adde92d307d80
Author: Eric Leblond <eric at regit.org>
Date: Tue Jan 3 10:23:01 2012 +0100
Rename LiveGetDevice to LiveGetDeviceName
The function LiveGetDevice is returning a point to
the name of the interface. This patch renames it to
LiveGetDeviceName which is more appropriate.
commit 1d1271fd38fdeb6da3bbd240368f5dc1ea8ad88b
Author: Eric Leblond <eric at regit.org>
Date: Mon Jan 2 18:17:08 2012 +0100
pcap: add support for checksum verif mode
This patch adds support for checksum verification mode.
Auto mode is not yet supported.
commit 6062e00c2b18ce5e62ef3e5dc974af3547eafbd5
Author: Eric Leblond <eric at regit.org>
Date: Mon Jan 2 17:34:33 2012 +0100
af-packet: add support for checksum verif mode
This patch adds support for checksum verification mode.
Auto mode is not yet supported.
commit 551cb3e4c27e7bba2f2cbddd38b1cb0659ec7776
Author: Eric Leblond <eric at regit.org>
Date: Mon Jan 2 17:33:49 2012 +0100
decode: introduce checksum mode enum.
commit 623bb38d1c3c11c6ae8b16c09c99165c61062b2f
Author: Eric Leblond <eric at regit.org>
Date: Mon Jan 2 17:07:37 2012 +0100
af-packet: Fix typo in error message.
commit 8d635ddfc25bef83927f2b2d723db4dc111bb13a
Author: Eric Leblond <eric at regit.org>
Date: Wed Dec 21 12:18:57 2011 +0100
detect-csum: incomplete checksum is a valid checksum
This patch modify checksum match to not alert on packet with
incomplete checksum. They will be checksummed later and thus
can be considered as valid one.
commit 67f791e891ab0afe72989f06c198657286058a84
Author: Eric Leblond <eric at regit.org>
Date: Tue Dec 20 17:46:07 2011 +0100
af-packet: add variable to disable offloading detection
This flag adds variable to disable offloading detection. The effect
of the flag is to avoid to transmit auxiliary data at each packet.
This could result in a potential performance gain.
commit f6ddaf3341c008da9fcc7f381e003c165f6ee2e4
Author: Eric Leblond <eric at regit.org>
Date: Tue Dec 20 16:52:07 2011 +0100
af-packet: parse message to find lack of checksum
Emitted packet can have checksum offloading. This patch reads
af-packet message parameter to see if the kernel has sent a non
checksummed packet.
commit 5dc46ae7c70028280c3be2d96aa71049142aa001
Author: Eric Leblond <eric at regit.org>
Date: Tue Dec 20 15:10:57 2011 +0100
pf-ring: Mark emitted traffic as non checksummed
The traffic sent by an interface is potentially offloaded. This
patch adds detection of TX packets and set the corresponding flag.
commit 81bc6f55189f270579e0e0a9b5b389487916bf41
Author: Eric Leblond <eric at regit.org>
Date: Tue Dec 20 15:08:40 2011 +0100
Treat incomplete checksum.
Checksum of local traffic is often offloaded to the network device.
This causes some problems on parsing of this traffic. This patch
introduces a PKT_INCOMPLETE_CHECKSUM flag which can be used to
indicate that the checksum is not computed/correct for good reason.
commit 9324ed7b90043fc2fe9bdf8cfb71a2d6d70b3d89
Author: Victor Julien <victor at inliniac.net>
Date: Thu Jan 5 16:48:48 2012 +0100
Fix icmpv6 ip-only rule not firing. #363.
-----------------------------------------------------------------------
Summary of changes:
src/decode.h | 18 ++++++++++++-
src/detect-csum.c | 28 ++++++++++++++++++++
src/detect-engine-iponly.c | 9 +------
src/runmode-af-packet.c | 23 +++++++++++++---
src/runmode-pcap.c | 14 ++++++++++
src/runmode-pfring.c | 19 ++++++++++++-
src/source-af-packet.c | 61 ++++++++++++++++++++++++++++++++++++++++---
src/source-af-packet.h | 1 +
src/source-pcap.c | 42 ++++++++++++++++++++++++++++-
src/source-pcap.h | 1 +
src/source-pfring.c | 40 ++++++++++++++++++++++++++++-
src/source-pfring.h | 1 +
src/stream-tcp.c | 7 +++++
src/util-checksum.c | 33 +++++++++++++++++++++++-
src/util-checksum.h | 10 ++++++-
src/util-device.c | 37 ++++++++++++++++++++++++--
src/util-device.h | 8 ++++-
src/util-runmodes.c | 14 +++++-----
suricata.yaml | 36 +++++++++++++++++++++++++-
19 files changed, 363 insertions(+), 39 deletions(-)
hooks/post-receive
--
OISF
More information about the Oisf-devel
mailing list