liuwentan
|
e89bb89fa9
|
fix maat_redis_tool bug
|
2023-04-14 16:51:09 +08:00 |
|
liuwentan
|
923b4c4168
|
optimize rcu compile runtime
|
2023-04-14 11:32:59 +08:00 |
|
liuwentan
|
ffc1740a00
|
fix Full config update bug https://jira.geedge.net/browse/TSG-14591
|
2023-04-13 18:53:36 +08:00 |
|
liuwentan
|
571ce08d3b
|
fix stream scan core https://jira.geedge.net/browse/TSG-14701
|
2023-04-13 14:56:35 +08:00 |
|
liuwentan
|
f213fcbe97
|
add rule count stat
|
2023-04-12 19:20:05 +08:00 |
|
liuwentan
|
e8fb0143e9
|
read_full_config error can't abort maat_new
|
2023-04-12 15:31:17 +08:00 |
|
liuwentan
|
53cd03995d
|
use pad instead of pack(4)
|
2023-04-10 14:13:41 +08:00 |
|
liuwentan
|
f571b481f6
|
delete xx_plugin get ex_data log
|
2023-04-10 13:40:21 +08:00 |
|
liuwentan
|
fb3896c078
|
refactor ex_data_runtime & fix all leak memory
|
2023-04-05 21:09:19 +08:00 |
|
liuwentan
|
5d545d6dbf
|
add hierarchy unit-test
|
2023-04-04 21:23:03 +08:00 |
|
liuwentan
|
9234ebb9e1
|
optimize district & support virtual table conjunction
|
2023-04-04 15:59:34 +08:00 |
|
liuwentan
|
d3d19a4fe9
|
fix leak memory
|
2023-04-04 09:31:20 +08:00 |
|
liuwentan
|
3ed1f3dfd4
|
delete compile table evaluation_order schema
|
2023-04-03 15:14:57 +08:00 |
|
liuwentan
|
18881c5bc3
|
fix coredump because of no compile/group2compile/group2group field in maat_json.json file
|
2023-03-30 20:49:59 +08:00 |
|
liuwentan
|
4bbd0ebdc4
|
fix group2group bug
|
2023-03-30 16:50:05 +08:00 |
|
liuwentan
|
96a5dfdecc
|
fix scan StreamFile bug
|
2023-03-30 15:22:33 +08:00 |
|
liuwentan
|
10571d3de4
|
compile/plugin ex_schema support input param table_name
|
2023-03-29 22:25:14 +08:00 |
|
liuwentan
|
658625fde3
|
fix clause update bug and stream scan bug
|
2023-03-29 14:29:34 +08:00 |
|
liuwentan
|
cca03b6faf
|
gcc4.8.5 don't support variable array size
|
2023-03-28 19:07:12 +08:00 |
|
liuwentan
|
c8450c8a04
|
export maat_stream_XX
|
2023-03-28 18:42:49 +08:00 |
|
liuwentan
|
4eee0ede80
|
add log level
|
2023-03-28 15:41:24 +08:00 |
|
liuwentan
|
e98627c9e7
|
optimize maat_scan_xx API
|
2023-03-28 14:07:44 +08:00 |
|
liuwentan
|
73060d1c35
|
support ip+port+proto scan
|
2023-03-27 15:52:47 +08:00 |
|
liuwentan
|
7b49d7d52f
|
interrupt execution if table schema has error
|
2023-03-23 19:16:23 +08:00 |
|
liuwentan
|
2ce749d9bc
|
support maat_state new/reset/free
|
2023-03-23 11:57:17 +08:00 |
|
liuwentan
|
a67d24381e
|
table_info.conf support table_name & db_tables to implement all physical tables conjunction
|
2023-03-22 20:40:36 +08:00 |
|
liuwentan
|
23ef2c3797
|
support same pattern different offset(x-x:pat1 & y-y:pat1)
|
2023-03-22 11:10:00 +08:00 |
|
liuwentan
|
37447eef7f
|
adapter_hs engine only construct stream db
|
2023-03-17 17:28:52 +08:00 |
|
liuwentan
|
68533f9d43
|
support expr stream scan
|
2023-03-17 11:32:13 +08:00 |
|
liuwentan
|
8312b69fda
|
maat_options set logger -> set log_path
|
2023-03-16 15:16:42 +08:00 |
|
liuwentan
|
15ec1549c8
|
plugin table support integer&pointer key type
|
2023-03-16 09:55:35 +08:00 |
|
liuwentan
|
71d6cbab2c
|
fix hyperscan depends ragel bug
|
2023-03-15 15:11:07 +08:00 |
|
liuwentan
|
fb4043f225
|
change sudo make -> make
|
2023-03-15 14:07:29 +08:00 |
|
liuwentan
|
fc4ee32b6c
|
fix continuous updating config with same key invalid bug
|
2023-03-15 13:30:39 +08:00 |
|
liuwentan
|
90d0764845
|
item_uthash -> item_rcu && add foreign cont dir API
|
2023-03-15 11:36:54 +08:00 |
|
liuwentan
|
33c9c10467
|
fix compile conjunction bug
|
2023-03-06 16:45:34 +08:00 |
|
liuwentan
|
9ff724af02
|
fix multi compile table hit path bug
|
2023-03-06 14:09:52 +08:00 |
|
liuwentan
|
cf5c8353e3
|
Support physical table conjunction and fix compile table conjunction bug
|
2023-03-06 10:45:36 +08:00 |
|
liuwentan
|
5a53edd943
|
format log
|
2023-03-02 14:52:31 +08:00 |
|
liuwentan
|
d790afa58b
|
export maat_get_table_id symbol
|
2023-03-02 11:01:52 +08:00 |
|
liuwentan
|
4a594978c7
|
add maat helper API
|
2023-03-02 10:18:20 +08:00 |
|
liuwentan
|
d429a6346d
|
support flag_plus table
|
2023-03-01 17:44:07 +08:00 |
|
liuwentan
|
2c6cca6f56
|
fix hit repeated compile_id bug & unify compile+plugin table register API
|
2023-03-01 13:12:22 +08:00 |
|
liuwentan
|
1566a30002
|
ipmatcher rule_id -> long long & scanner engine centralization
|
2023-03-01 09:32:36 +08:00 |
|
liuwentan
|
a6fb2b6fdd
|
allow compile table not exist
|
2023-02-27 15:55:26 +08:00 |
|
liuwentan
|
c3b15c69c4
|
add boundary check
|
2023-02-27 10:07:37 +08:00 |
|
liuwentan
|
fa0489abfc
|
fix compile conjunction bug
|
2023-02-24 18:20:04 +08:00 |
|
liuwentan
|
d4e1670987
|
add bool_plugin & fqdn_plugin unit-test
|
2023-02-24 17:29:38 +08:00 |
|
liuwentan
|
ddfd0a503d
|
fix maat_scan_string maat_state bug
|
2023-02-23 19:08:26 +08:00 |
|
liuwentan
|
ca1ae3a0de
|
fix compile table update bug
|
2023-02-23 14:50:07 +08:00 |
|