liuwentan
|
6fef5354fa
|
change all maatframe to maat4
|
2023-03-22 11:25:34 +08:00 |
|
liuwentan
|
1566a30002
|
ipmatcher rule_id -> long long & scanner engine centralization
|
2023-03-01 09:32:36 +08:00 |
|
liuwentan
|
d4e1670987
|
add bool_plugin & fqdn_plugin unit-test
|
2023-02-24 17:29:38 +08:00 |
|
liuwentan
|
24b27429a5
|
change table_id->table_name
|
2023-02-20 11:43:43 +08:00 |
|
liuwentan
|
be5d157733
|
generate rpm package
|
2023-02-16 17:45:18 +08:00 |
|
liuwentan
|
379efcf027
|
cpp->c and expr support configurable generation of literal_db or regex_db
|
2023-02-15 11:53:46 +08:00 |
|
liuwentan
|
d5e6808e1f
|
support expr offset match
|
2023-02-09 22:13:15 +08:00 |
|
liuwentan
|
c1902f8deb
|
fix flag_matcher and interval_matcher compile error
|
2023-02-07 11:25:31 +08:00 |
|
liuwentan
|
4d2f783874
|
add flagMatcher and IntevalMatcher
|
2023-02-06 08:14:25 +08:00 |
|
liuwentan
|
25f944a1d1
|
unfinished work
|
2023-01-30 21:59:35 +08:00 |
|
liuwentan
|
3d4b833e48
|
hierarchy refactor unfinished
|
2023-01-06 18:54:59 +08:00 |
|
liuwentan
|
9778267b48
|
add dynamic config unit-test and hierarchy unfinished
|
2022-12-14 15:28:21 +08:00 |
|
liuwentan
|
0536083cbe
|
support scan ip
|
2022-12-09 17:12:18 +08:00 |
|
liuwentan
|
ea4c1ba4c3
|
add json/redis rule parser
|
2022-12-03 22:23:41 +08:00 |
|
liuwentan
|
84a271144b
|
fix memory leak and add framework test
|
2022-11-29 14:12:40 +08:00 |
|
liuwentan
|
7e6d131c9e
|
framework work well
|
2022-11-25 16:32:29 +08:00 |
|
liuwentan
|
2a83517894
|
unfinished work
|
2022-11-17 05:05:35 +08:00 |
|
liuwentan
|
6881611975
|
[SCANNER]add hyperscan libs
|
2022-10-27 17:58:52 +08:00 |
|
zhengchao
|
7e860f2c58
|
Refactor from scratch.
|
2022-10-26 14:41:22 +08:00 |
|
zhengchao
|
f88f730fd6
|
Upgrade hiredis library: hiredis-vip-0.3.0.tar.gz -> hiredis-1.0.2.tar.gz.
|
2022-08-23 19:04:35 +08:00 |
|
zhengchao
|
ddd36c2969
|
Refactor table schema and runtime to support boolean expression plugin.
|
2022-08-23 15:04:55 +08:00 |
|
zhengchao
|
732a944ff4
|
EX_data中的hash表使用RCU更新,替代读写锁,提高多线程下的访问性能。
|
2022-01-21 22:31:13 +05:00 |
|
zhengchao
|
65712be21c
|
未正确统计0号线程的outer_mid和inner_mid计数
|
2021-10-24 17:23:08 +03:00 |
|
liuxueli
|
97ea56eb86
|
TSG-7066: 支持--prefix参数安装,支持查看changelog
TSG-7390: 支持输出扫描状态到prometheus
|
2021-08-14 16:22:10 +08:00 |
|
zhengchao
|
1e2e3a1798
|
改进Hierarchy的多线程扫描性能: Hierarchy使用rwlock来保证更新线程和扫描线程间的线程安全, 测试发现在不发生读写锁冲突的情况下, 读写锁的固有开销会导致并发扫描速度降低。
reference:
https://stackoverflow.com/questions/11866486/how-many-simultaneous-readers-can-a-pthread-rwlock-have
|
2021-07-19 20:55:12 +08:00 |
|
郑超
|
8bf48ba1f3
|
Feature faster bool matcher on reptead item
|
2021-06-15 01:32:46 +00:00 |
|
zhengchao
|
1460f891c6
|
支持加载使用gzip命令压缩的maat JSON文件。允许先压缩、后加密,不支持先加密后压缩。
|
2021-04-28 21:44:04 +08:00 |
|
zhengchao
|
0f6eccbb47
|
增加hierarachy中为每个线程分配expr_buff,以修复使用用户设置的缓冲区大小,导致不命中的bug。
|
2021-04-19 10:27:11 +08:00 |
|
zhengchao
|
12c29eb375
|
更新版本号到3.1.4
|
2020-11-24 21:08:39 +06:00 |
|
刘学利
|
b29714d006
|
Feature fqdn plugin
|
2020-09-28 16:53:40 +08:00 |
|
fengweihao
|
c5b8acc9ce
|
RPM对外提供BOOL_MATCH头文件
|
2020-09-03 10:27:01 +08:00 |
|
liuxueli
|
7d6bc2737c
|
关闭IPscan写日志的开关
关闭changelog
修复编译debuginfo出错的问题
|
2020-09-02 17:17:07 +08:00 |
|
zhengchao
|
2c80ba4c0a
|
代码适配Maat command、maat json。
|
2020-06-22 20:26:43 +08:00 |
|
zhengchao
|
7e1cb56d4f
|
完成Maat_hierarchy规则加载重构的代码编写,未编译。
|
2020-06-22 20:26:42 +08:00 |
|
zhengchao
|
de9cee06b6
|
更新Maat版本号到2.9
|
2020-05-13 19:37:38 +08:00 |
|
zhengchao
|
4b4d25b691
|
合并plugin和ip_plugin的处理逻辑,抽象为Maat_ex_data.h/cpp。
|
2020-05-13 14:53:25 +08:00 |
|
zhengchao
|
9d0d510348
|
新增IP回调表,可以进行IPv4和IPv6的区间匹配。
|
2020-05-13 14:53:25 +08:00 |
|
liuxueli
|
6932f3d29b
|
修正CMakeList.txt及Package.cmake
|
2020-04-15 15:00:32 +08:00 |
|
zhengchao
|
3473cf6dd4
|
增加性能测试用例,处理无法获取redis time的异常。
|
2019-07-28 19:13:04 +06:00 |
|
zhengchao
|
4c4222a302
|
将scanner中的运行态数据拆分到Maat_table_runtime.cpp中。
|
2019-07-28 11:45:57 +06:00 |
|
zhengchao
|
2909cb1997
|
重构Maat table相关代码。
|
2019-07-25 14:49:11 +06:00 |
|
zhengchao
|
683c367ac1
|
变更版本号到2.7.
|
2019-07-11 17:05:34 +08:00 |
|
zhengchao
|
29c4d7ebf3
|
使用有向图(Directed Acyclic Graph)描述分组间的引用关系,引入igraph库。
|
2019-07-11 17:05:33 +08:00 |
|
杨威
|
81f41a472b
|
Update CMakeLists.txt,将install源目录变量从CMAKE_SOURCE_DIR更新为PROJECT_SOURCE_DIR,便于打包RPM使用
|
2019-05-08 17:59:21 +08:00 |
|
zhengchao
|
301dc793f2
|
修正stat中Sum计数不准的问题。
|
2019-01-07 20:31:41 +06:00 |
|
zhengchao
|
b49016adb7
|
非逻辑编译通过。
|
2019-01-05 17:11:20 +08:00 |
|
zhengchao
|
953393b448
|
修改版本号。
|
2018-12-05 18:04:09 +08:00 |
|
zhengchao
|
d02add1a2f
|
make install可以正确的释放头文件到/opt/MESA/include/MESA
|
2018-11-20 18:14:53 +08:00 |
|
zhengchao
|
001fd7d892
|
使用-Wl,--version-script控制导出符号名。
|
2018-11-20 17:27:53 +08:00 |
|
zhengchao
|
5ef1c44257
|
将版本号升级到2.4
|
2018-11-15 20:08:27 +08:00 |
|