[Oisf-devel] [COMMIT] OISF branch, master, updated. suricata-4.0.0-beta1-42-gbecf1a2
OISF Git
noreply at openinfosecfoundation.org
Fri Jun 16 13:15:20 UTC 2017
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "OISF".
The branch, master has been updated
via becf1a2dfe2f93798792190c0fda32be6c7eb8b5 (commit)
via e0c6565e682dd61a4a1b1363e7efb1ea59f8b04c (commit)
via aff576b524a08cc4f77dc2662309614f56d708d1 (commit)
via 0d79181d78f02209bf682e52250c92aed39c25fb (commit)
via 28cdf7b628123ca95c06eaf47fe9dfccc08a59b7 (commit)
via 7e0d9619acc24f4e1041b60aac847e61cded1902 (commit)
via 41376da03c72550e8972f4b870856c2b7cf7dc20 (commit)
via 9edbb6f235c6fd9e8b14a4c3cc0f128d03473341 (commit)
via 25edac76661acc9a128a23271f763c425b3ff8f1 (commit)
via 2a29f79960b8153234074fee64b1aad45ae76e4f (commit)
via 5153271b87ef41e22c43c6e50645ef5859c88bea (commit)
via c7e10c73f92575c0d0ef4fd79fcb298615ec0c14 (commit)
via d9f87cec3d3dce6a3471ab69c7a441de962aa70f (commit)
via 8fe32f943b8e45ed973e6d2e43d9d60a682bd28d (commit)
via 58af39131f3b693df7293efcb208e21d21ed7683 (commit)
via a116c160194274fe604f504f6ba31d14d2e816e1 (commit)
via 1a2985ed76927db6d0b79c84a1ab1341d30dbb20 (commit)
via e930513125f7cbdb739c63940b052f48e18fbfb5 (commit)
via ed172985ca74760102ba8d5edf3b28062354cc03 (commit)
via d090cd2edf0ce1adb9e9a7e827c9c465168c1432 (commit)
via 6bddc4d3e04bf2c9302d7719fdb95f0116f79b4b (commit)
via 5162b5826062e83a61f81e852b02ecd3e12f5dc8 (commit)
from 30be9f0b5d5870a7e65e6ea429aed3d5b4ca1f4b (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit becf1a2dfe2f93798792190c0fda32be6c7eb8b5
Author: Victor Julien <victor at inliniac.net>
Date: Fri Jun 16 12:02:14 2017 +0200
rust/nfs: fix style warning
commit e0c6565e682dd61a4a1b1363e7efb1ea59f8b04c
Author: Victor Julien <victor at inliniac.net>
Date: Fri Jun 16 10:25:18 2017 +0200
nfs: nfs_version keyword
Store nfs version in tx and add keyword to match on it.
commit aff576b524a08cc4f77dc2662309614f56d708d1
Author: Victor Julien <victor at inliniac.net>
Date: Fri Jun 16 08:09:48 2017 +0200
eve/nfs: log nfs version
commit 0d79181d78f02209bf682e52250c92aed39c25fb
Author: Victor Julien <victor at inliniac.net>
Date: Thu Jun 15 15:00:12 2017 +0200
nfs: rename nfs3 to nfs
Since the parser now also does nfs2, the name nfs3 became confusing.
As it's still in beta, we can rename so this patch renames all 'nfs3'
logic to simply 'nfs'.
commit 28cdf7b628123ca95c06eaf47fe9dfccc08a59b7
Author: Victor Julien <victor at inliniac.net>
Date: Wed Jun 14 16:34:00 2017 +0200
nfs3: create file tx for read on request
This is done so that we can add creds to it.
commit 7e0d9619acc24f4e1041b60aac847e61cded1902
Author: Victor Julien <victor at inliniac.net>
Date: Wed Jun 14 14:17:58 2017 +0200
nfs3: add readdirplus path
commit 41376da03c72550e8972f4b870856c2b7cf7dc20
Author: Victor Julien <victor at inliniac.net>
Date: Wed Jun 14 12:41:49 2017 +0200
nfs: log more rpc
commit 9edbb6f235c6fd9e8b14a4c3cc0f128d03473341
Author: Victor Julien <victor at inliniac.net>
Date: Wed Jun 14 10:22:08 2017 +0200
nfs: split record parsers into different files
commit 25edac76661acc9a128a23271f763c425b3ff8f1
Author: Victor Julien <victor at inliniac.net>
Date: Tue Jun 13 08:39:16 2017 +0200
nfs3: fill bytes corner case
commit 2a29f79960b8153234074fee64b1aad45ae76e4f
Author: Victor Julien <victor at inliniac.net>
Date: Mon Jun 12 23:15:42 2017 +0200
nfs: fix rust data type declaration
commit 5153271b87ef41e22c43c6e50645ef5859c88bea
Author: Victor Julien <victor at inliniac.net>
Date: Mon Jun 12 09:41:31 2017 +0200
nfs2: basic record parsing and tracking
commit c7e10c73f92575c0d0ef4fd79fcb298615ec0c14
Author: Victor Julien <victor at inliniac.net>
Date: Sat Jun 10 23:19:29 2017 +0200
nfs3: support NFS over UDP
commit d9f87cec3d3dce6a3471ab69c7a441de962aa70f
Author: Victor Julien <victor at inliniac.net>
Date: Sat Jun 10 22:31:40 2017 +0200
nfs3: probing parsers in both directions
commit 8fe32f943b8e45ed973e6d2e43d9d60a682bd28d
Author: Victor Julien <victor at inliniac.net>
Date: Sat Jun 10 14:58:06 2017 +0200
nfs3: search for next record if needed after GAP
commit 58af39131f3b693df7293efcb208e21d21ed7683
Author: Victor Julien <victor at inliniac.net>
Date: Thu Jun 8 15:13:49 2017 +0200
rust/nfs: handle GAPs
In normal records it will try to continue parsing.
GAP 'data' will be passed to file api as '0's. New call is used
so that the file API does know it is dealing with a GAP. Such
files are flagged as truncated at the end of the file and no
checksums are calculated.
commit a116c160194274fe604f504f6ba31d14d2e816e1
Author: Victor Julien <victor at inliniac.net>
Date: Sun Jun 11 11:27:31 2017 +0200
nfs3: parse mkdir and rmdir request records
commit 1a2985ed76927db6d0b79c84a1ab1341d30dbb20
Author: Victor Julien <victor at inliniac.net>
Date: Thu Jun 15 11:41:12 2017 +0200
app-layer: remove checks
Now that app-layer parser registrations are validated at startup,
a number of runtime checks are no longer necessary. So remove them.
commit e930513125f7cbdb739c63940b052f48e18fbfb5
Author: Victor Julien <victor at inliniac.net>
Date: Thu Jun 15 11:34:25 2017 +0200
app-layer: detect state registrations are mandatory
commit ed172985ca74760102ba8d5edf3b28062354cc03
Author: Victor Julien <victor at inliniac.net>
Date: Thu Jun 15 11:32:13 2017 +0200
app-layer: validate registration
commit d090cd2edf0ce1adb9e9a7e827c9c465168c1432
Author: Victor Julien <victor at inliniac.net>
Date: Thu Jun 15 11:29:55 2017 +0200
dcerpc/udp: add missing tx support
commit 6bddc4d3e04bf2c9302d7719fdb95f0116f79b4b
Author: Jason Ish <ish at unx.ca>
Date: Wed Jun 14 22:59:39 2017 -0600
python: use python path found during configure
Also look for Python under more names. For example, on OpenBSD
if you just install Python 2, you will only get a python2.7
executable.
commit 5162b5826062e83a61f81e852b02ecd3e12f5dc8
Author: Selivanov Pavel <selivan5 at yandex.ru>
Date: Tue Jun 6 15:28:11 2017 +0300
Fixed small typo: double sudo
-----------------------------------------------------------------------
Summary of changes:
configure.ac | 4 +-
doc/userguide/install.rst | 2 +-
rust/Makefile.am | 4 +-
rust/gen-c-headers.py | 4 +-
rust/src/core.rs | 5 +
rust/src/filecontainer.rs | 18 +-
rust/src/filetracker.rs | 100 ++-
rust/src/nfs/log.rs | 56 +-
rust/src/nfs/mod.rs | 8 +-
rust/src/nfs/{nfs3.rs => nfs.rs} | 837 +++++++++++++++++----
rust/src/nfs/nfs2_records.rs | 113 +++
rust/src/nfs/{parser.rs => nfs3_records.rs} | 249 ++----
.../src/nfs/nfs_records.rs | 16 +-
rust/src/nfs/rpc_records.rs | 327 ++++++++
rust/src/nfs/types.rs | 88 +++
scripts/suricatasc/Makefile.am | 6 +-
src/Makefile.am | 8 +-
src/app-layer-dcerpc-udp.c | 68 ++
src/app-layer-dcerpc-udp.h | 1 +
src/app-layer-detect-proto.c | 8 +-
src/{app-layer-nfs3.c => app-layer-nfs-tcp.c} | 205 ++---
...detect-nfs3-procedure.h => app-layer-nfs-tcp.h} | 10 +-
src/app-layer-nfs-udp.c | 391 ++++++++++
...detect-nfs3-procedure.h => app-layer-nfs-udp.h} | 10 +-
src/app-layer-nfs3.h | 34 -
src/app-layer-parser.c | 98 ++-
src/app-layer-protos.c | 4 +-
src/app-layer-protos.h | 2 +-
src/detect-engine-state.c | 279 ++++---
src/detect-filename.c | 4 +-
...ect-nfs3-procedure.c => detect-nfs-procedure.c} | 180 ++---
...ect-nfs3-procedure.h => detect-nfs-procedure.h} | 8 +-
...etect-nfs3-procedure.c => detect-nfs-version.c} | 216 +++---
...etect-nfs3-procedure.h => detect-nfs-version.h} | 8 +-
src/detect.c | 6 +-
src/detect.h | 3 +-
src/output-json-file.c | 1 +
src/{output-json-nfs3.c => output-json-nfs.c} | 102 +--
src/{detect-nfs3-procedure.h => output-json-nfs.h} | 9 +-
src/output-json-nfs3.h | 29 -
src/output.c | 6 +-
src/rust.h | 6 +
src/suricata-common.h | 2 +-
src/suricata.c | 1 +
src/util-file.c | 37 +-
src/util-file.h | 3 +
suricata.yaml.in | 4 +-
47 files changed, 2566 insertions(+), 1014 deletions(-)
rename rust/src/nfs/{nfs3.rs => nfs.rs} (64%)
create mode 100644 rust/src/nfs/nfs2_records.rs
rename rust/src/nfs/{parser.rs => nfs3_records.rs} (68%)
copy src/app-layer-dns-tcp-rust.h => rust/src/nfs/nfs_records.rs (73%)
create mode 100644 rust/src/nfs/rpc_records.rs
rename src/{app-layer-nfs3.c => app-layer-nfs-tcp.c} (57%)
copy src/{detect-nfs3-procedure.h => app-layer-nfs-tcp.h} (81%)
create mode 100644 src/app-layer-nfs-udp.c
copy src/{detect-nfs3-procedure.h => app-layer-nfs-udp.h} (81%)
delete mode 100644 src/app-layer-nfs3.h
copy src/{detect-nfs3-procedure.c => detect-nfs-procedure.c} (74%)
copy src/{detect-nfs3-procedure.h => detect-nfs-procedure.h} (83%)
rename src/{detect-nfs3-procedure.c => detect-nfs-version.c} (69%)
copy src/{detect-nfs3-procedure.h => detect-nfs-version.h} (83%)
rename src/{output-json-nfs3.c => output-json-nfs.c} (54%)
rename src/{detect-nfs3-procedure.h => output-json-nfs.h} (82%)
delete mode 100644 src/output-json-nfs3.h
hooks/post-receive
--
OISF
More information about the Oisf-devel
mailing list