[Oisf-devel] [COMMIT] OISF branch, master, updated. suricata-2.0beta1-13-gfb16cf1

noreply at openinfosecfoundation.org noreply at openinfosecfoundation.org
Wed Jul 24 10:28:05 UTC 2013


This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "OISF".

The branch, master has been updated
       via  fb16cf1a5a1173793311096b91ce1b6f9995b3f8 (commit)
       via  16c3487444adf9b888a499604735c1254a669795 (commit)
       via  58ed1f241114c293d7cb5d7be69d6748ff7f6205 (commit)
      from  055b422c28c753d067b06862149d6d0225318c8c (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit fb16cf1a5a1173793311096b91ce1b6f9995b3f8
Author: Victor Julien <victor at inliniac.net>
Date:   Wed Jul 24 11:54:08 2013 +0200

    vlan: add rule for new 'too many layers' event

commit 16c3487444adf9b888a499604735c1254a669795
Author: Victor Julien <victor at inliniac.net>
Date:   Tue Jul 23 13:23:08 2013 +0200

    Add yaml option to disable vlan ids hashing
    
    In some cases using the vlan id(s) in flow hashing is problematic. Cases
    of broken routers have been reported. So this option allows for disabling
    the use of vlan id(s) while calculating the flow hash, and in the future
    other hashes.
    
    Vlan tracking for flow is enabled by default.

commit 58ed1f241114c293d7cb5d7be69d6748ff7f6205
Author: Victor Julien <victor at inliniac.net>
Date:   Thu Oct 11 20:35:17 2012 +0200

    flow: take vlan_id's into account in the flow hash
    
    In VLAN we can have 2 layers of encapsulation. In this patch both
    layers are used in the flow hash to distinguish between encapsulated
    traffic.

-----------------------------------------------------------------------

Summary of changes:
 rules/decoder-events.rules |    5 ++++-
 src/decode-events.h        |    1 +
 src/decode-vlan.c          |   34 +++++++++++++++++++++++++++-------
 src/decode.c               |    7 +++++++
 src/decode.h               |   13 +++++++++++--
 src/detect-engine-event.h  |    1 +
 src/flow-hash.c            |   34 +++++++++++++++++++++++++---------
 src/flow-util.c            |    2 ++
 src/flow.h                 |    1 +
 suricata.yaml.in           |    7 +++++++
 10 files changed, 86 insertions(+), 19 deletions(-)


hooks/post-receive
-- 
OISF


More information about the Oisf-devel mailing list