Commit Graph

836 Commits

Author SHA1 Message Date
liuwentan
d429a6346d support flag_plus table 2023-03-01 17:44:07 +08:00
liuwentan
2c6cca6f56 fix hit repeated compile_id bug & unify compile+plugin table register API 2023-03-01 13:12:22 +08:00
liuwentan
1566a30002 ipmatcher rule_id -> long long & scanner engine centralization 2023-03-01 09:32:36 +08:00
liuwentan
a6fb2b6fdd allow compile table not exist 2023-02-27 15:55:26 +08:00
liuwentan
c3b15c69c4 add boundary check 2023-02-27 10:07:37 +08:00
liuwentan
fa0489abfc fix compile conjunction bug 2023-02-24 18:20:04 +08:00
liuwentan
d4e1670987 add bool_plugin & fqdn_plugin unit-test 2023-02-24 17:29:38 +08:00
liuwentan
6f4b88d690 fix maat_scan_intval maat_state bug 2023-02-23 19:10:23 +08:00
liuwentan
ddfd0a503d fix maat_scan_string maat_state bug 2023-02-23 19:08:26 +08:00
liuwentan
ca1ae3a0de fix compile table update bug 2023-02-23 14:50:07 +08:00
liuwentan
d1aee82fe2 compile/plugin table callback function normalization 2023-02-23 11:37:02 +08:00
liuwentan
9578be5ff3 uint64_t -> long long 2023-02-22 15:22:41 +08:00
liuwentan
ac51c70426 compile_id,group_id,item_id support uint64_t 2023-02-22 15:08:52 +08:00
liuwentan
313b0558d0 TODO: delete ip_plugin cidr temporary 2023-02-21 12:00:40 +08:00
liuwentan
f8543d9f96 table_name->table_id and compile table callback 2023-02-21 11:27:18 +08:00
liuwentan
24b27429a5 change table_id->table_name 2023-02-20 11:43:43 +08:00
liuwentan
bbed56db80 compile table support conjunction, ip_plugin support cidr 2023-02-20 10:57:40 +08:00
liuwentan
be5d157733 generate rpm package 2023-02-16 17:45:18 +08:00
liuwentan
b5b47837d2 fix rule_monitor_loop bug 2023-02-16 16:45:06 +08:00
liuwentan
d1b015226e fix cmake bug 2023-02-16 11:28:44 +08:00
liuwentan
f688a99bd0 add ci config 2023-02-16 11:13:23 +08:00
liuwentan
379efcf027 cpp->c and expr support configurable generation of literal_db or regex_db 2023-02-15 11:53:46 +08:00
liuwentan
d5e6808e1f support expr offset match 2023-02-09 22:13:15 +08:00
liuwentan
c1902f8deb fix flag_matcher and interval_matcher compile error 2023-02-07 11:25:31 +08:00
liuwentan
4d2f783874 add flagMatcher and IntevalMatcher 2023-02-06 08:14:25 +08:00
liuwentan
57f0a0581a unfinished work 2023-02-03 17:28:14 +08:00
liuwentan
cca7d882e1 refactor hierarchy and maat_table 2023-01-31 20:39:53 +08:00
liuwentan
25f944a1d1 unfinished work 2023-01-30 21:59:35 +08:00
liuwentan
3d4b833e48 hierarchy refactor unfinished 2023-01-06 18:54:59 +08:00
liuwentan
9778267b48 add dynamic config unit-test and hierarchy unfinished 2022-12-14 15:28:21 +08:00
liuwentan
95b2123b5f add unittest for scan_ip 2022-12-12 00:10:30 +08:00
liuwentan
83bdf09dc9 support log 2022-12-10 00:37:51 +08:00
liuwentan
0536083cbe support scan ip 2022-12-09 17:12:18 +08:00
liuwentan
6ba2f6241e add conjunction table 2022-12-06 00:35:36 +08:00
liuwentan
6d18cf0f36 add input mode unit-test 2022-12-05 23:21:18 +08:00
liuwentan
ea4c1ba4c3 add json/redis rule parser 2022-12-03 22:23:41 +08:00
liuwentan
84a271144b fix memory leak and add framework test 2022-11-29 14:12:40 +08:00
liuwentan
7e6d131c9e framework work well 2022-11-25 16:32:29 +08:00
liuwentan
2a83517894 unfinished work 2022-11-17 05:05:35 +08:00
liuwentan
d9f62317b2 [SCANNER]modify hyperscan deps 2022-10-31 11:21:51 +08:00
liuwentan
6881611975 [SCANNER]add hyperscan libs 2022-10-27 17:58:52 +08:00
zhengchao
6d7354a866 Add some drafts 2022-10-27 17:24:54 +08:00
zhengchao
7e860f2c58 Refactor from scratch. 2022-10-26 14:41:22 +08:00
Zheng Chao
18ece0b026 Stash for source insight 2022-10-26 10:25:16 +08:00
zhengchao
e5c9d7a2a0 Hyperscan adapter is in progress. 2022-10-25 13:17:02 +08:00
liuxueli
bf7ef3eb6c 提供maat_redis_tool的rpm安装包 v3.6.15 2022-10-09 18:22:42 +08:00
zhengchao
f88f730fd6 Upgrade hiredis library: hiredis-vip-0.3.0.tar.gz -> hiredis-1.0.2.tar.gz. v3.6.14 v3.6.13 v3.6.12 2022-08-23 19:04:35 +08:00
zhengchao
10118ffed3 Add unit test cases for Boolean Expression Plugin (bool_plug) table. 2022-08-23 18:32:03 +08:00
zhengchao
ddd36c2969 Refactor table schema and runtime to support boolean expression plugin. 2022-08-23 15:04:55 +08:00
zhengchao
47a71011db 和redis通信发生错误后,立即关闭链接,待下次遍历重连。 v3.6.11 3.6.11 2022-07-13 14:59:28 +08:00