liuwentan
|
9234ebb9e1
|
optimize district & support virtual table conjunction
|
2023-04-04 15:59:34 +08:00 |
|
liuwentan
|
3ed1f3dfd4
|
delete compile table evaluation_order schema
|
2023-04-03 15:14:57 +08:00 |
|
liuwentan
|
96a5dfdecc
|
fix scan StreamFile bug
|
2023-03-30 15:22:33 +08:00 |
|
liuwentan
|
73060d1c35
|
support ip+port+proto scan
|
2023-03-27 15:52:47 +08:00 |
|
liuwentan
|
7b49d7d52f
|
interrupt execution if table schema has error
|
2023-03-23 19:16:23 +08:00 |
|
liuwentan
|
a67d24381e
|
table_info.conf support table_name & db_tables to implement all physical tables conjunction
|
2023-03-22 20:40:36 +08:00 |
|
liuwentan
|
23ef2c3797
|
support same pattern different offset(x-x:pat1 & y-y:pat1)
|
2023-03-22 11:10:00 +08:00 |
|
liuwentan
|
37447eef7f
|
adapter_hs engine only construct stream db
|
2023-03-17 17:28:52 +08:00 |
|
liuwentan
|
68533f9d43
|
support expr stream scan
|
2023-03-17 11:32:13 +08:00 |
|
liuwentan
|
c669eb5619
|
fix xx_plugin key length
|
2023-03-16 16:03:33 +08:00 |
|
liuwentan
|
15ec1549c8
|
plugin table support integer&pointer key type
|
2023-03-16 09:55:35 +08:00 |
|
liuwentan
|
71d6cbab2c
|
fix hyperscan depends ragel bug
|
2023-03-15 15:11:07 +08:00 |
|
liuwentan
|
5a53edd943
|
format log
|
2023-03-02 14:52:31 +08:00 |
|
liuwentan
|
4a594978c7
|
add maat helper API
|
2023-03-02 10:18:20 +08:00 |
|
liuwentan
|
d429a6346d
|
support flag_plus table
|
2023-03-01 17:44:07 +08:00 |
|
liuwentan
|
fa0489abfc
|
fix compile conjunction bug
|
2023-02-24 18:20:04 +08:00 |
|
liuwentan
|
f8543d9f96
|
table_name->table_id and compile table callback
|
2023-02-21 11:27:18 +08:00 |
|
liuwentan
|
bbed56db80
|
compile table support conjunction, ip_plugin support cidr
|
2023-02-20 10:57:40 +08:00 |
|
liuwentan
|
f688a99bd0
|
add ci config
|
2023-02-16 11:13:23 +08:00 |
|
liuwentan
|
379efcf027
|
cpp->c and expr support configurable generation of literal_db or regex_db
|
2023-02-15 11:53:46 +08:00 |
|
liuwentan
|
d5e6808e1f
|
support expr offset match
|
2023-02-09 22:13:15 +08:00 |
|
liuwentan
|
c1902f8deb
|
fix flag_matcher and interval_matcher compile error
|
2023-02-07 11:25:31 +08:00 |
|
liuwentan
|
4d2f783874
|
add flagMatcher and IntevalMatcher
|
2023-02-06 08:14:25 +08:00 |
|
liuwentan
|
57f0a0581a
|
unfinished work
|
2023-02-03 17:28:14 +08:00 |
|
liuwentan
|
cca7d882e1
|
refactor hierarchy and maat_table
|
2023-01-31 20:39:53 +08:00 |
|
liuwentan
|
25f944a1d1
|
unfinished work
|
2023-01-30 21:59:35 +08:00 |
|
liuwentan
|
3d4b833e48
|
hierarchy refactor unfinished
|
2023-01-06 18:54:59 +08:00 |
|
liuwentan
|
0536083cbe
|
support scan ip
|
2022-12-09 17:12:18 +08:00 |
|
liuwentan
|
7e6d131c9e
|
framework work well
|
2022-11-25 16:32:29 +08:00 |
|
liuwentan
|
2a83517894
|
unfinished work
|
2022-11-17 05:05:35 +08:00 |
|
zhengchao
|
7e860f2c58
|
Refactor from scratch.
|
2022-10-26 14:41:22 +08:00 |
|
zhengchao
|
10118ffed3
|
Add unit test cases for Boolean Expression Plugin (bool_plug) table.
|
2022-08-23 18:32:03 +08:00 |
|
liuxueli
|
c84fb97aae
|
如果扫描无规则数值类型的table时直接返回，导致未进行非表达式的运算。
|
2021-08-20 14:44:09 +08:00 |
|
zhengchao
|
465ad3ca6a
|
如果扫描无规则table时直接返回，导致未进行非表达式的运算。
|
2021-08-19 21:47:38 +08:00 |
|
zhengchao
|
f8ca593ea1
|
增加大量compile引用一个group的测试用例。
|
2020-12-05 15:14:51 +06:00 |
|
刘学利
|
b29714d006
|
Feature fqdn plugin
|
2020-09-28 16:53:40 +08:00 |
|
liuxueli
|
0c694b5f98
|
增加增强数值扫描功能及对应测试用例
增加changelog到rpm包
|
2020-08-22 18:52:25 +08:00 |
|
zhengchao
|
2dbbd55c95
|
version3单元测试通过。
|
2020-06-22 20:26:44 +08:00 |
|
zhengchao
|
df19a8ce71
|
通过原有功能的单元测试。
|
2020-06-22 20:26:43 +08:00 |
|
zhengchao
|
469539ab5a
|
基础扫描功能的测试用例通过。
|
2020-06-22 20:26:43 +08:00 |
|
zhengchao
|
1179e9c76a
|
在编译配置级别支持合取范式，编译配置最多8个子句（Clause）组成，子句内的分组是“或”运算，子句之间是“与”运算。
|
2020-06-22 20:26:41 +08:00 |
|
zhengchao
|
4b4d25b691
|
合并plugin和ip_plugin的处理逻辑，抽象为Maat_ex_data.h/cpp。
|
2020-05-13 14:53:25 +08:00 |
|
zhengchao
|
54c5cf9d86
|
新增composition类型表，支持IP构成功能，可将Source和Destination两个子表组合为待扫描的IP表，子表可以是虚拟表。
|
2020-03-11 23:26:55 +08:00 |
|
zhengchao
|
7bf6dd6278
|
增加IP virtual的测试用例。
|
2020-03-11 15:45:43 +08:00 |
|
liuxueli
|
64ca71e295
|
添加windows1251编码测试用例
|
2020-01-09 18:14:56 +08:00 |
|
zhengchao
|
5f06db9558
|
修复bug：一个分组以虚拟表多次出现在编译配置内，错误的判断为分组重复。
|
2019-11-26 14:40:03 +08:00 |
|
zhengchao
|
484637060d
|
虚拟表功能单元测试通过。
|
2019-07-28 15:00:24 +06:00 |
|
zhengchao
|
3b049f2f13
|
增加单元测试用例ExprPlusWithHex。
|
2019-07-11 17:05:37 +08:00 |
|
zhengchao
|
879da71422
|
增加ip_plus类型表，可以支持范围和掩码两种描述IP和端口的方式。
|
2019-07-11 17:05:35 +08:00 |
|
郑超
|
a651c0669b
|
Trvia prefix suffix scan test case added
|
2019-04-03 17:40:42 +08:00 |
|