[Oisf-devel] [COMMIT] OISF branch, master, updated. suricata-2.0beta1-475-g3870def

Wed Dec 11 11:16:30 UTC 2013

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "OISF".

The branch, master has been updated
       via  3870def6016b7d24dec8b37557229f49a9bf427c (commit)
       via  b61552482c0b813386c701559a9711bfe3a5f406 (commit)
       via  300b739b1fdc579ef05d265ed9fce0d52c1786ab (commit)
       via  f0c785cc1dfbf67bdf579eb0585d4cdf4d63f2b8 (commit)
       via  5a1bc025e59e63d96f73320178fb9d98fcd1c153 (commit)
       via  bee24d89094eb7f74e036a785b5597268b51ccb6 (commit)
       via  a75911e02fdb3295d1545b30eef178d057fb2ab8 (commit)
       via  58eb6428d1e7ad12d4072e5072f3a3b13bc09767 (commit)
      from  3d81e50ab3d715a5e347fcdbd3b16272cff1f2bd (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 3870def6016b7d24dec8b37557229f49a9bf427c
Author: Ken Steele <ken at tilera.com>
Date:   Wed Nov 13 14:16:21 2013 -0500

    Split AC-Tile MPM context into Search and Initialization structures.

    Some of the fields in the SCACTileCtx struct are only used to create the MPM,
    but are not needed to search the MPM. Create a new structure to contain just
    the data needed by AC Search. After creating the MPM, copy the data into the
    new structure and then free the memory only needed during initialization.

    This reduces the size of the AC-Tile MPM context from 1360 bytes down to 296
    bytes.

commit b61552482c0b813386c701559a9711bfe3a5f406
Author: Victor Julien <victor at inliniac.net>
Date:   Wed Dec 11 11:53:08 2013 +0100

    mpipe code cleanup: indent fixes

commit 300b739b1fdc579ef05d265ed9fce0d52c1786ab
Author: Ken Steele <ken at tilera.com>
Date:   Fri Nov 22 15:53:12 2013 -0500

    Add more suricata.yaml configuration options for mPIPE.

    Add two new mPIPE load-balancing configuration options in suricata.yaml.
    1) "sticky" which keep sending flows to one CPU, but if that queue is full,
    don't drop the packet, move the flow to the least loaded queue.
    2) Round-robin, which always picks the least full input queue for each
    packet.

    Allow configuring the number of packets in the input queue (iqueue) in
    suricata.yaml.

    For the mPipe.buckets configuration, which must be a power of 2, round
    up to the next power of two, rather than report an error.

    Added mpipe.min-buckets, which defaults to 256, so if the requested number
    of buckets can't be allocated, Suricata will keep dividing by 2 until either
    it succeeds in allocating buckets, or reaches the minimum number of buckets
    and fails.

commit f0c785cc1dfbf67bdf579eb0585d4cdf4d63f2b8
Author: Ken Steele <ken at tilera.com>
Date:   Tue Nov 19 10:22:40 2013 -0500

    Fix configuring Prelude with -Werror

    Running with:

    CFLAGS="-Werror" ./configure

    would fail when configuring libprelude because of an unused-result
    warning. Ignore that one warning.

commit 5a1bc025e59e63d96f73320178fb9d98fcd1c153
Author: Ken Steele <ken at tilera.com>
Date:   Tue Dec 10 15:14:49 2013 -0500

    Mark pflow as a constant pointer.

    Address review comment from Victor that the pflow pointer is constant, so
    it can be marked as such.

commit bee24d89094eb7f74e036a785b5597268b51ccb6
Author: Ken Steele <ken at tilera.com>
Date:   Sun Nov 17 09:43:00 2013 -0500

    Use pflow variable in place of p->flow to prevent reloading.

    In SigMatchSignatures, the value p->flow doens't change, but GCC can't
    figure that out, so it reloads p->flow many times during the function.
    When p->flow is loaded into the variable pflow once at the start of the
    function, the compile then doesn't need to reload it.

commit a75911e02fdb3295d1545b30eef178d057fb2ab8
Author: Eric Leblond <eric at regit.org>
Date:   Wed Dec 11 09:25:39 2013 +0000

    pfring: workaround potential librt deps

    It seems some version of pfring needs to be link with librt.

commit 58eb6428d1e7ad12d4072e5072f3a3b13bc09767
Author: Eric Leblond <eric at regit.org>
Date:   Wed Dec 11 09:26:18 2013 +0100

    suricata: ignore SIGHUP signal

    This patch ignores the SIGHUP signal instead of having the default
    behavior.

-----------------------------------------------------------------------

Summary of changes:
 configure.ac                 |   24 ++++-
 src/detect.c                 |  157 ++++++++++++++++---------------
 src/source-mpipe.c           |   80 ++++++++++++----
 src/suricata.c               |    9 +--
 src/util-mpm-ac-tile-small.c |    2 +-
 src/util-mpm-ac-tile.c       |  207 ++++++++++++++++++++++++++++--------------
 src/util-mpm-ac-tile.h       |   37 +++++++-
 suricata.yaml.in             |    5 +-
 8 files changed, 340 insertions(+), 181 deletions(-)

hooks/post-receive
-- 
OISF