Code

Detect rule hook/v9#12690

Code

Draft

victorjulien wants to merge 35 commits intoOISF:masterOISF/suricata:masterfrom victorjulien:detect-rule-hook/v9victorjulien/suricata:detect-rule-hook/v9Copy head branch name to clipboard

+2,036-840

Commits

Commits on Feb 26, 2025

• smtp/events: set direction on rules

  Show description for aaf673d
  victorjulien

  committed
  aaf673d

  Copy full SHA for aaf673d

Commits on Feb 27, 2025

• detect/analyzer: add policy

  Show description for d996463
  victorjulien

  committed
  d996463

  Copy full SHA for d996463

• detect: don't register duplicate app inspect engines

  victorjulien

  committed
  ee523a8

  Copy full SHA for ee523a8

• detect/nfs: don't double register nfq_request generic list

  victorjulien

  committed
  0291e43

  Copy full SHA for 0291e43

• detect/tls: don't double register tls_validity generic list

  victorjulien

  committed
  e1cdb48

  Copy full SHA for e1cdb48

• detect: move non-pf rules into special prefilter engines

  Show description for 9e36f8d
  victorjulien

  committed
  9e36f8d

  Copy full SHA for 9e36f8d

• app-layer: constify AppLayerGetProtoByName

  victorjulien

  committed
  5840126

  Copy full SHA for 5840126

• detect: allow longer buffer names

  Show description for a25339e
  victorjulien

  committed
  a25339e

  Copy full SHA for a25339e

• tls: fix handshake handling being too strict

  Show description for 782bb0f
  victorjulien

  committed
  782bb0f

  Copy full SHA for 782bb0f

• tls: introduce per direction progress tracking

  Show description for 00899dc
  victorjulien

  committed
  00899dc

  Copy full SHA for 00899dc

• app-layer: API for mapping progress name vs id

  victorjulien

  committed
  b77c507

  Copy full SHA for b77c507

• tls: expose progress by name

  victorjulien

  committed
  7c22b85

  Copy full SHA for 7c22b85

• http1: register progress state names

  victorjulien

  committed
  8490a7f

  Copy full SHA for 8490a7f

• WIP detect: introduce explicit hooks

  Show description for 0ef0220
  victorjulien

  committed
  0ef0220

  Copy full SHA for 0ef0220

• detect/lua: use rule hook instead of init() 'needs' table

  Show description for fd93d8a
  victorjulien

  committed
  fd93d8a

  Copy full SHA for fd93d8a

• detect: reuse hook based generic lists

  victorjulien

  committed
  48e6db7

  Copy full SHA for 48e6db7

• WIP start of pkt hook

  Show description for a5af3de
  victorjulien

  committed
  a5af3de

  Copy full SHA for a5af3de

• detect: constify rule file and lines in parsing and analyzer

  victorjulien

  committed
  21a72b0

  Copy full SHA for 21a72b0

• detect/loader: minor code cleanup

  victorjulien

  committed
  fd5b6ad

  Copy full SHA for fd5b6ad

• WIP start of firewall rules

  victorjulien

  committed
  ea69a8c

  Copy full SHA for ea69a8c

• WIP fw rules

  Show description for 7e99410
  victorjulien

  committed
  7e99410

  Copy full SHA for 7e99410

• detect: reorder struct

  victorjulien

  committed
  c8ed05c

  Copy full SHA for c8ed05c

• detect/action: minor action parsing cleanup

  Show description for 94fb852
  victorjulien

  committed
  94fb852

  Copy full SHA for 94fb852

• WIP explicit actions

  victorjulien

  committed
  8ea469e

  Copy full SHA for 8ea469e

• detect: require explicit action scope for firewall rules

  victorjulien

  committed
  d329c56

  Copy full SHA for d329c56

• firewall: add --firewall-rules-exclusive

  Show description for 1d76662
  victorjulien

  committed
  1d76662

  Copy full SHA for 1d76662

• SQUASH commandline option for exclusive

  victorjulien

  committed
  1556346

  Copy full SHA for 1556346

Commits on Feb 28, 2025

• SQUASH WIP fw rules

  victorjulien

  committed
  95d5eaa

  Copy full SHA for 95d5eaa

• SQUASH WIP fw rules

  victorjulien

  committed
  3b8f595

  Copy full SHA for 3b8f595

• tls/ja3: register keyword at client_hello_done hook

  victorjulien

  committed
  52bce7a

  Copy full SHA for 52bce7a

• detect/tls.version: allow using rule hook

  Show description for 0038db4
  victorjulien

  committed
  0038db4

  Copy full SHA for 0038db4

• SQUASH WIP fw rules

  victorjulien

  committed
  e67b1fa

  Copy full SHA for e67b1fa

• WIP start of a 'all' pkt hook

  victorjulien

  committed
  f8d123e

  Copy full SHA for f8d123e

• SQUASH fw exclusive commandline

  victorjulien

  committed
  59a7bf8

  Copy full SHA for 59a7bf8

• SQUASH WIP explicit actions

  victorjulien

  committed
  15da1d0

  Copy full SHA for 15da1d0