| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2024-11-11 | 🔧 build(rulescan cxx flags): ignore narrowing for el9 | yangwei | |
| 2024-11-11 | 🔧 build(fix el9 compile warning): upgrade hyperscan & rulescan | yangwei | |
| 2024-03-22 | [BUGFIX]solve Rocky8-debug illegal instructionv4.1.31 | liuwentan | |
| 2024-03-20 | [PATCH]update colm & ragel version | liuwentan | |
| 2023-12-26 | [BUGFIX] rulescan stream input data_len maximum:(1500 -> 65535) => TSG-18030v4.1.25 | liuwentan | |
| 2023-08-10 | [FEATURE]expr_matcher support dual engine(hyperscan & rulescan) & benchmark | liuwentan | |
| 2023-08-09 | rollback to v4.0.31 | liuwentan | |
| 2023-08-01 | [FEATURE]support benchmark | 刘文坛 | |
| 2023-07-28 | [FEATURE]expr_matcher support dual engine(hyperscan & rulescan) | 刘文坛 | |
| 2023-06-14 | [BUGFIX]fix hyperscan-5.4.2 literal empty string check bugv4.0.25 | 刘文坛 | |
| 2023-06-12 | [PATCH]hyperscan version 5.4.0->5.4.2 | liuwentan | |
| 2023-04-12 | read_full_config error can't abort maat_new | liuwentan | |
| 2023-03-15 | fix hyperscan depends ragel bug | liuwentan | |
| 2023-03-15 | change sudo make -> make | liuwentan | |
| 2023-03-01 | ipmatcher rule_id -> long long & scanner engine centralization | liuwentan | |
| 2023-02-20 | compile table support conjunction, ip_plugin support cidr | liuwentan | |
| 2023-02-16 | add ci config | liuwentan | |
| 2023-02-15 | cpp->c and expr support configurable generation of literal_db or regex_db | liuwentan | |
| 2023-02-07 | fix flag_matcher and interval_matcher compile error | liuwentan | |
| 2023-02-06 | add flagMatcher and IntevalMatcher | liuwentan | |
| 2022-12-14 | add dynamic config unit-test and hierarchy unfinished | liuwentan | |
| 2022-12-03 | add json/redis rule parser | liuwentan | |
| 2022-11-25 | framework work well | liuwentan | |
| 2022-10-31 | [SCANNER]modify hyperscan deps | liuwentan | |
| 2022-10-27 | [SCANNER]add hyperscan libs | liuwentan | |
| 2022-10-26 | Refactor from scratch. | zhengchao | |
| 2022-08-23 | Upgrade hiredis library: hiredis-vip-0.3.0.tar.gz -> hiredis-1.0.2.tar.gz.v3.6.14v3.6.13v3.6.12 | zhengchao | |
| 2021-07-01 | 更新IP ↵v3.2.2 | zhengchao | |
| Matcher:不再使用全局的结果缓存数组m_v,改为栈内变量,以修复多线程扫描时的线程不安全访问。 修复 TSG-6825 TSG-6524 | |||
| 2020-09-02 | 关闭IPscan写日志的开关v3.0.4 | liuxueli | |
| 关闭changelog 修复编译debuginfo出错的问题 | |||
| 2020-05-13 | 更新ip_matcher,解决IPv6字节序问题。 | zhengchao | |
| 根据rfc2553,ipv6地址是一个16字节的数组,用网络序存储。 3.2 IPv6 Address Structure A new in6_addr structure holds a single IPv6 address and is defined as a result of including <netinet/in.h>: struct in6_addr { uint8_t s6_addr[16]; /* IPv6 address */ }; This data structure contains an array of sixteen 8-bit elements, which make up one 128-bit IPv6 address. The IPv6 address is stored in network byte order. IPv6地址由高位到低位存储在第0至15个uint8_t中。例如地址2001:0db8:1234::5210,rfc2553存储为(通过inet_pton): static const uint8_t myaddr[16] = { 0x20, 0x01, 0x0d, 0xb8, 0x12, 0x34, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x52, 0x10 }; 上述地址转换为uint32_t网络序后: static const uint32_t myaddr_network_byte_order[4]={ 0xb80d0120, 0x3412, 0x0, 0x10520000} 再转换为主机序后,这也是MAAT输入ipmatcher和rulescan的格式: static const uint32_t myaddr_host_byte_order[4]={ 0x20010db8, 0x12340000, 0x0, 0x5210} 目前,ip_matcher中int数组高位到低位的顺序是a[3]a[2]a[1]a[0],与RFC2553、Linux都不一致。 | |||
| 2020-05-13 | 新增IP回调表,可以进行IPv4和IPv6的区间匹配。 | zhengchao | |
| 2019-07-11 | 使用有向图(Directed Acyclic ↵ | zhengchao | |
| Graph)描述分组间的引用关系,引入igraph库。 | |||
| 2018-10-26 | 同步修改maat_redis_tool支持64位的Maat redis key。v2.3.3 | zhengchao | |
| 2018-09-26 | 1)hiredis-vip静态链接到maat;2)maat_redis_tool静态链接libmaatframe ↵ | zhengchao | |
| .a;3)增加文件删除的测试用例。 | |||
| 2018-09-26 | maat_redis_tool支持dump内容外键。 | zhengchao | |
| 2018-09-23 | 集成google test测试框架。 | zhengchao | |
