Felipe Zimmerle
b497091017
Cosmetics: Fix coding style
2015-09-28 16:32:59 -03:00
Felipe Zimmerle
076a02951c
Huge performance improvement: passing variables as pointers avoiding copies
2015-09-18 20:21:12 -03:00
Felipe Zimmerle
2451bf05d7
Using pcre (with JIT) instead of pcrecpp
2015-09-17 19:26:44 -03:00
Felipe Zimmerle
1065e297b2
Fix several minor issues on the seclang grammar
2015-08-22 11:06:28 -03:00
Felipe Zimmerle
d5fe21ce3c
Code cosmetics: reduce the amount of cppcheck warnings
2015-08-12 22:40:26 -03:00
Felipe Zimmerle
577736abb1
Code cosmetics: Fix the coding style.
2015-08-11 13:13:28 -03:00
Felipe Zimmerle
fb161a69a9
Removes some warnings by adding missing returns
2015-08-11 13:13:16 -03:00
Felipe Zimmerle
4f47651a6f
Adds variable TX and action "capture".
2015-08-05 10:07:47 -03:00
Felipe Zimmerle
d4dd9c86d4
Accepts Suricata format on @pm operator
2015-08-04 14:26:37 -03:00
Felipe Zimmerle
95efb99a8c
Adds support to the @pm operator
2015-08-04 14:25:48 -03:00
Felipe Zimmerle
774d897351
Adds support to the operator @ipMatchFromFile and @ipMatchF
2015-08-03 17:21:41 -03:00
Felipe Zimmerle
8575c10781
unit-test: Fix the geoip debug code
2015-08-03 13:45:13 -03:00
Felipe Zimmerle
17f88f5821
Using libpcre instead of c++11 regex
2015-08-03 13:45:09 -03:00
Felipe Zimmerle
f811ec6518
Adds support to @ipMatch operator
2015-07-30 20:58:19 -03:00
Felipe Zimmerle
e016b72a8e
Handles better the memory utilization
...
- Added reference counts to Rule and AuditLog;
- Some memory leaks were removed, including GeoLookup;
- Deal better with parser errors;
- Overriding the AutlogLogWritter destructor.
2015-07-26 22:51:57 -03:00
Felipe Zimmerle
76b34af357
Adds support to load remote rules
2015-07-23 14:40:56 -03:00
Felipe Zimmerle
e189055ec3
Adds support to GeoIP operator and variables.
2015-07-20 21:05:14 -03:00
Felipe Zimmerle
96a777a5cf
Adds initial serial audit logging support
...
Serial logging following the format used on ModSecurity 2.9.
2015-07-14 00:33:50 -03:00
Felipe Zimmerle
2109910848
Adds support to the server ID generation
...
The server ID is a sha-1 identifier generated from the mac address of the first
ethernet device plus the server name. The process is the same used by
ModSecurity 2.9
2015-07-10 18:37:48 -03:00
