Commit Graph

115 Commits

Author SHA1 Message Date
刘文坛
5e907a171f [FEATURE]Compile table must register plugin table to get compile ex_data 2023-10-30 08:00:49 +00:00
liuwentan
9f7c82e6b0 [PATCH]support \r\n escape 2023-10-25 15:36:05 +08:00
liuwentan
edab9520bd [PATCH]patch for physical NOT clause 2023-10-24 21:19:33 +08:00
刘文坛
d24d6c1a5f [FEATURE]support physical NOT clause => TSG-17286 2023-10-24 08:21:41 +00:00
liuwentan
bf05309f2a [UNIT_TEST]add some corner case for NOT logic 2023-10-20 14:25:03 +08:00
刘文坛
613b5b3dcf [FEATURE]Refactor NOT clause, NOTE:forward incompatibility!!! 2023-10-18 03:32:53 +00:00
liuwentan
48af7e7aac [FEATURE]support xx_plugin statistics(new API maat_register_thread) 2023-10-13 17:55:51 +08:00
刘文坛
e49427974f [BUGFIX]fix illegal clause index 2023-10-11 06:53:03 +00:00
刘文坛
7cf9a79d64 [PATCH] Ipport plugin unit_test & statistics 2023-10-07 09:48:26 +00:00
刘文坛
00b2d2815d [FEATURE]support Ipport plugin table => TSG-17217 2023-09-27 07:15:29 +00:00
liuwentan
fb0cb5405d rollback to v4.0.31 2023-08-09 19:22:09 +08:00
刘文坛
d29eef0423 [FEATURE]Compile table must register plugin table to get compile ex_data & maat_state_get_compile_table_ids API 2023-08-07 04:26:13 +00:00
刘文坛
af0461bb25 [FEATURE]support benchmark 2023-08-01 10:08:52 +00:00
liuwentan
73887d5e27 [BUGFIX]false hit 0.0.0.0 2023-07-24 18:49:35 +08:00
刘文坛
df36b8987b [FEATURE]compile/plugin/xx_plugin table support gc 2023-06-19 09:44:25 +00:00
刘文坛
c5accc49f2 [PATCH] maat_plugin_table_get_ex_data add key_len (23.06) 2023-06-08 07:32:41 +00:00
liuwentan
029a391f5d [patch]keep maat23.05 compatibility 2023-05-31 13:28:16 +08:00
liuwentan
51e29f0b95 [FEATURE]plugin table support ip_addr key type 2023-05-30 16:16:18 +08:00
刘文坛
464dc43cc4 fix group_exclude logic miss & add some corner case 2023-05-23 03:23:39 +00:00
liuwentan
929d6ac139 [patch]change verify expression retval semantics:1(legal) 0(illegal) 2023-05-11 11:21:46 +08:00
liuwentan
e97adb8b97 [feature]verify regex expression 2023-05-09 17:45:43 +08:00
liuwentan
f7bde76fcf support more than one hierarchical group referenced(max hierarchical level: 5) 2023-05-08 16:39:58 +08:00
liuwentan
8a3683fa30 group_exclude(only one hierarchical group can be referenced) 2023-05-06 20:27:39 +08:00
liuwentan
658625fde3 fix clause update bug and stream scan bug 2023-03-29 14:29:34 +08:00
liuwentan
73060d1c35 support ip+port+proto scan 2023-03-27 15:52:47 +08:00
liuwentan
a67d24381e table_info.conf support table_name & db_tables to implement all physical tables conjunction 2023-03-22 20:40:36 +08:00
liuwentan
23ef2c3797 support same pattern different offset(x-x:pat1 & y-y:pat1) 2023-03-22 11:10:00 +08:00
liuwentan
37447eef7f adapter_hs engine only construct stream db 2023-03-17 17:28:52 +08:00
liuwentan
8312b69fda maat_options set logger -> set log_path 2023-03-16 15:16:42 +08:00
liuwentan
15ec1549c8 plugin table support integer&pointer key type 2023-03-16 09:55:35 +08:00
liuwentan
cf5c8353e3 Support physical table conjunction and fix compile table conjunction bug 2023-03-06 10:45:36 +08:00
liuwentan
5a53edd943 format log 2023-03-02 14:52:31 +08:00
liuwentan
d429a6346d support flag_plus table 2023-03-01 17:44:07 +08:00
liuwentan
1566a30002 ipmatcher rule_id -> long long & scanner engine centralization 2023-03-01 09:32:36 +08:00
liuwentan
c3b15c69c4 add boundary check 2023-02-27 10:07:37 +08:00
liuwentan
ddfd0a503d fix maat_scan_string maat_state bug 2023-02-23 19:08:26 +08:00
liuwentan
f8543d9f96 table_name->table_id and compile table callback 2023-02-21 11:27:18 +08:00
liuwentan
bbed56db80 compile table support conjunction, ip_plugin support cidr 2023-02-20 10:57:40 +08:00
liuwentan
f688a99bd0 add ci config 2023-02-16 11:13:23 +08:00
liuwentan
d5e6808e1f support expr offset match 2023-02-09 22:13:15 +08:00
liuwentan
25f944a1d1 unfinished work 2023-01-30 21:59:35 +08:00
liuwentan
9778267b48 add dynamic config unit-test and hierarchy unfinished 2022-12-14 15:28:21 +08:00
liuwentan
ea4c1ba4c3 add json/redis rule parser 2022-12-03 22:23:41 +08:00
zhengchao
7e860f2c58 Refactor from scratch. 2022-10-26 14:41:22 +08:00
zhengchao
10118ffed3 Add unit test cases for Boolean Expression Plugin (bool_plug) table. 2022-08-23 18:32:03 +08:00
zhengchao
9e91bc0973 Expr_plus表增加中英文混合district的测试用例 2021-10-20 10:54:55 +03:00
zhengchao
d954c5a011 expr_plus和interval_plus表的district对英文大小写不敏感。 2021-10-20 00:02:43 +03:00
zhengchao
51b26e3a54 修复expr_plus和expr混合扫描时,expr漏命中的问题。 2021-10-12 09:55:53 +03:00
zhengchao
593bcfb907 修复 TSG-7994 ,避免处理未知district时出现误命中。 2021-10-11 12:00:26 +03:00
liuxueli
a2f2adc82a 策略中的district与扫描时设置的district不一致时命中了策略 2021-10-11 14:57:18 +08:00