Commit Graph

47 Commits

Author SHA1 Message Date
liuwentan
ffc1740a00 fix Full config update bug https://jira.geedge.net/browse/TSG-14591 2023-04-13 18:53:36 +08:00
liuwentan
571ce08d3b fix stream scan core https://jira.geedge.net/browse/TSG-14701 2023-04-13 14:56:35 +08:00
liuwentan
f213fcbe97 add rule count stat 2023-04-12 19:20:05 +08:00
liuwentan
e8fb0143e9 read_full_config error can't abort maat_new 2023-04-12 15:31:17 +08:00
liuwentan
f571b481f6 delete xx_plugin get ex_data log 2023-04-10 13:40:21 +08:00
liuwentan
3efcb8986e maat_new error if read full config failed 2023-04-07 14:43:04 +08:00
liuwentan
fb3896c078 refactor ex_data_runtime & fix all leak memory 2023-04-05 21:09:19 +08:00
liuwentan
9234ebb9e1 optimize district & support virtual table conjunction 2023-04-04 15:59:34 +08:00
liuwentan
d3d19a4fe9 fix leak memory 2023-04-04 09:31:20 +08:00
liuwentan
5873d77f17 fix pipeline error 2023-03-30 22:53:56 +08:00
liuwentan
18881c5bc3 fix coredump because of no compile/group2compile/group2group field in maat_json.json file 2023-03-30 20:49:59 +08:00
liuwentan
96a5dfdecc fix scan StreamFile bug 2023-03-30 15:22:33 +08:00
liuwentan
690f8bc602 add stat&perf API 2023-03-30 10:00:38 +08:00
liuwentan
10571d3de4 compile/plugin ex_schema support input param table_name 2023-03-29 22:25:14 +08:00
liuwentan
4eee0ede80 add log level 2023-03-28 15:41:24 +08:00
liuwentan
e98627c9e7 optimize maat_scan_xx API 2023-03-28 14:07:44 +08:00
liuwentan
73060d1c35 support ip+port+proto scan 2023-03-27 15:52:47 +08:00
liuwentan
7b49d7d52f interrupt execution if table schema has error 2023-03-23 19:16:23 +08:00
liuwentan
2ce749d9bc support maat_state new/reset/free 2023-03-23 11:57:17 +08:00
liuwentan
a67d24381e table_info.conf support table_name & db_tables to implement all physical tables conjunction 2023-03-22 20:40:36 +08:00
liuwentan
93d4de4d79 change lib name to libmaat4 for test 2023-03-22 11:23:21 +08:00
liuwentan
23ef2c3797 support same pattern different offset(x-x:pat1 & y-y:pat1) 2023-03-22 11:10:00 +08:00
liuwentan
8312b69fda maat_options set logger -> set log_path 2023-03-16 15:16:42 +08:00
liuwentan
6afb0a0194 cancel str_len in maat_options API 2023-03-16 11:59:46 +08:00
liuwentan
c6478818f0 optimize maat_options API 2023-03-16 10:36:04 +08:00
liuwentan
15ec1549c8 plugin table support integer&pointer key type 2023-03-16 09:55:35 +08:00
liuwentan
90d0764845 item_uthash -> item_rcu && add foreign cont dir API 2023-03-15 11:36:54 +08:00
liuwentan
33c9c10467 fix compile conjunction bug 2023-03-06 16:45:34 +08:00
liuwentan
9ff724af02 fix multi compile table hit path bug 2023-03-06 14:09:52 +08:00
liuwentan
cf5c8353e3 Support physical table conjunction and fix compile table conjunction bug 2023-03-06 10:45:36 +08:00
liuwentan
5a53edd943 format log 2023-03-02 14:52:31 +08:00
liuwentan
4a594978c7 add maat helper API 2023-03-02 10:18:20 +08:00
liuwentan
d429a6346d support flag_plus table 2023-03-01 17:44:07 +08:00
liuwentan
2c6cca6f56 fix hit repeated compile_id bug & unify compile+plugin table register API 2023-03-01 13:12:22 +08:00
liuwentan
1566a30002 ipmatcher rule_id -> long long & scanner engine centralization 2023-03-01 09:32:36 +08:00
liuwentan
c3b15c69c4 add boundary check 2023-02-27 10:07:37 +08:00
liuwentan
fa0489abfc fix compile conjunction bug 2023-02-24 18:20:04 +08:00
liuwentan
d4e1670987 add bool_plugin & fqdn_plugin unit-test 2023-02-24 17:29:38 +08:00
liuwentan
d1aee82fe2 compile/plugin table callback function normalization 2023-02-23 11:37:02 +08:00
liuwentan
9578be5ff3 uint64_t -> long long 2023-02-22 15:22:41 +08:00
liuwentan
ac51c70426 compile_id,group_id,item_id support uint64_t 2023-02-22 15:08:52 +08:00
liuwentan
f8543d9f96 table_name->table_id and compile table callback 2023-02-21 11:27:18 +08:00
liuwentan
24b27429a5 change table_id->table_name 2023-02-20 11:43:43 +08:00
liuwentan
bbed56db80 compile table support conjunction, ip_plugin support cidr 2023-02-20 10:57:40 +08:00
liuwentan
b5b47837d2 fix rule_monitor_loop bug 2023-02-16 16:45:06 +08:00
liuwentan
f688a99bd0 add ci config 2023-02-16 11:13:23 +08:00
liuwentan
379efcf027 cpp->c and expr support configurable generation of literal_db or regex_db 2023-02-15 11:53:46 +08:00