Commit Graph

58 Commits

Author SHA1 Message Date
liuwentan
6626cbd57c [BUGFIX]fix hit paths miss path if sub group(has super group) is referenced by compile 2023-05-17 14:34:34 +08:00
刘文坛
6830966084 [BUGFIX]fix group_exclude miss hit groups 2023-05-15 07:24:36 +00:00
liuwentan
929d6ac139 [patch]change verify expression retval semantics:1(legal) 0(illegal) 2023-05-11 11:21:46 +08:00
liuwentan
e97adb8b97 [feature]verify regex expression 2023-05-09 17:45:43 +08:00
liuwentan
8a3683fa30 group_exclude(only one hierarchical group can be referenced) 2023-05-06 20:27:39 +08:00
liuwentan
33015d5aac support parse encrypted json config 2023-05-04 17:10:19 +08:00
liuwentan
c88fd120dc add maat_stat instance_name 2023-04-25 17:02:30 +08:00
刘文坛
cb4502c698 implement rcu for g2g runtime & fix maat_stat bug 2023-04-24 02:14:26 +00:00
liuwentan
af6df5951a support maat stat 2023-04-20 15:34:56 +08:00
liuwentan
aadabcae0f optimize group2group runtime 2023-04-18 09:32:21 +08:00
liuwentan
923b4c4168 optimize rcu compile runtime 2023-04-14 11:32:59 +08:00
liuwentan
ffc1740a00 fix Full config update bug https://jira.geedge.net/browse/TSG-14591 2023-04-13 18:53:36 +08:00
liuwentan
571ce08d3b fix stream scan core https://jira.geedge.net/browse/TSG-14701 2023-04-13 14:56:35 +08:00
liuwentan
f213fcbe97 add rule count stat 2023-04-12 19:20:05 +08:00
liuwentan
e8fb0143e9 read_full_config error can't abort maat_new 2023-04-12 15:31:17 +08:00
liuwentan
f571b481f6 delete xx_plugin get ex_data log 2023-04-10 13:40:21 +08:00
liuwentan
3efcb8986e maat_new error if read full config failed 2023-04-07 14:43:04 +08:00
liuwentan
fb3896c078 refactor ex_data_runtime & fix all leak memory 2023-04-05 21:09:19 +08:00
liuwentan
9234ebb9e1 optimize district & support virtual table conjunction 2023-04-04 15:59:34 +08:00
liuwentan
d3d19a4fe9 fix leak memory 2023-04-04 09:31:20 +08:00
liuwentan
5873d77f17 fix pipeline error 2023-03-30 22:53:56 +08:00
liuwentan
18881c5bc3 fix coredump because of no compile/group2compile/group2group field in maat_json.json file 2023-03-30 20:49:59 +08:00
liuwentan
96a5dfdecc fix scan StreamFile bug 2023-03-30 15:22:33 +08:00
liuwentan
690f8bc602 add stat&perf API 2023-03-30 10:00:38 +08:00
liuwentan
10571d3de4 compile/plugin ex_schema support input param table_name 2023-03-29 22:25:14 +08:00
liuwentan
4eee0ede80 add log level 2023-03-28 15:41:24 +08:00
liuwentan
e98627c9e7 optimize maat_scan_xx API 2023-03-28 14:07:44 +08:00
liuwentan
73060d1c35 support ip+port+proto scan 2023-03-27 15:52:47 +08:00
liuwentan
7b49d7d52f interrupt execution if table schema has error 2023-03-23 19:16:23 +08:00
liuwentan
2ce749d9bc support maat_state new/reset/free 2023-03-23 11:57:17 +08:00
liuwentan
a67d24381e table_info.conf support table_name & db_tables to implement all physical tables conjunction 2023-03-22 20:40:36 +08:00
liuwentan
93d4de4d79 change lib name to libmaat4 for test 2023-03-22 11:23:21 +08:00
liuwentan
23ef2c3797 support same pattern different offset(x-x:pat1 & y-y:pat1) 2023-03-22 11:10:00 +08:00
liuwentan
8312b69fda maat_options set logger -> set log_path 2023-03-16 15:16:42 +08:00
liuwentan
6afb0a0194 cancel str_len in maat_options API 2023-03-16 11:59:46 +08:00
liuwentan
c6478818f0 optimize maat_options API 2023-03-16 10:36:04 +08:00
liuwentan
15ec1549c8 plugin table support integer&pointer key type 2023-03-16 09:55:35 +08:00
liuwentan
90d0764845 item_uthash -> item_rcu && add foreign cont dir API 2023-03-15 11:36:54 +08:00
liuwentan
33c9c10467 fix compile conjunction bug 2023-03-06 16:45:34 +08:00
liuwentan
9ff724af02 fix multi compile table hit path bug 2023-03-06 14:09:52 +08:00
liuwentan
cf5c8353e3 Support physical table conjunction and fix compile table conjunction bug 2023-03-06 10:45:36 +08:00
liuwentan
5a53edd943 format log 2023-03-02 14:52:31 +08:00
liuwentan
4a594978c7 add maat helper API 2023-03-02 10:18:20 +08:00
liuwentan
d429a6346d support flag_plus table 2023-03-01 17:44:07 +08:00
liuwentan
2c6cca6f56 fix hit repeated compile_id bug & unify compile+plugin table register API 2023-03-01 13:12:22 +08:00
liuwentan
1566a30002 ipmatcher rule_id -> long long & scanner engine centralization 2023-03-01 09:32:36 +08:00
liuwentan
c3b15c69c4 add boundary check 2023-02-27 10:07:37 +08:00
liuwentan
fa0489abfc fix compile conjunction bug 2023-02-24 18:20:04 +08:00
liuwentan
d4e1670987 add bool_plugin & fqdn_plugin unit-test 2023-02-24 17:29:38 +08:00
liuwentan
d1aee82fe2 compile/plugin table callback function normalization 2023-02-23 11:37:02 +08:00