summaryrefslogtreecommitdiff
path: root/vendor
AgeCommit message (Collapse)Author
2024-11-11🔧 build(rulescan cxx flags): ignore narrowing for el9yangwei
2024-11-11🔧 build(fix el9 compile warning): upgrade hyperscan & rulescanyangwei
2024-03-22[BUGFIX]solve Rocky8-debug illegal instructionv4.1.31liuwentan
2024-03-20[PATCH]update colm & ragel versionliuwentan
2023-12-26[BUGFIX] rulescan stream input data_len maximum:(1500 -> 65535) => TSG-18030v4.1.25liuwentan
2023-08-10[FEATURE]expr_matcher support dual engine(hyperscan & rulescan) & benchmarkliuwentan
2023-08-09rollback to v4.0.31liuwentan
2023-08-01[FEATURE]support benchmark刘文坛
2023-07-28[FEATURE]expr_matcher support dual engine(hyperscan & rulescan)刘文坛
2023-06-14[BUGFIX]fix hyperscan-5.4.2 literal empty string check bugv4.0.25刘文坛
2023-06-12[PATCH]hyperscan version 5.4.0->5.4.2liuwentan
2023-04-12read_full_config error can't abort maat_newliuwentan
2023-03-15fix hyperscan depends ragel bugliuwentan
2023-03-15change sudo make -> makeliuwentan
2023-03-01ipmatcher rule_id -> long long & scanner engine centralizationliuwentan
2023-02-20compile table support conjunction, ip_plugin support cidrliuwentan
2023-02-16add ci configliuwentan
2023-02-15cpp->c and expr support configurable generation of literal_db or regex_dbliuwentan
2023-02-07fix flag_matcher and interval_matcher compile errorliuwentan
2023-02-06add flagMatcher and IntevalMatcherliuwentan
2022-12-14add dynamic config unit-test and hierarchy unfinishedliuwentan
2022-12-03add json/redis rule parserliuwentan
2022-11-25framework work wellliuwentan
2022-10-31[SCANNER]modify hyperscan depsliuwentan
2022-10-27[SCANNER]add hyperscan libsliuwentan
2022-10-26Refactor from scratch.zhengchao
2022-08-23Upgrade hiredis library: hiredis-vip-0.3.0.tar.gz -> hiredis-1.0.2.tar.gz.v3.6.14v3.6.13v3.6.12zhengchao
2021-07-01更新IP ↵v3.2.2zhengchao
Matcher:不再使用全局的结果缓存数组m_v,改为栈内变量,以修复多线程扫描时的线程不安全访问。 修复 TSG-6825 TSG-6524
2020-09-02关闭IPscan写日志的开关v3.0.4liuxueli
关闭changelog 修复编译debuginfo出错的问题
2020-05-13更新ip_matcher,解决IPv6字节序问题。zhengchao
根据rfc2553,ipv6地址是一个16字节的数组,用网络序存储。 3.2 IPv6 Address Structure A new in6_addr structure holds a single IPv6 address and is defined as a result of including <netinet/in.h>: struct in6_addr { uint8_t s6_addr[16]; /* IPv6 address */ }; This data structure contains an array of sixteen 8-bit elements, which make up one 128-bit IPv6 address. The IPv6 address is stored in network byte order. IPv6地址由高位到低位存储在第0至15个uint8_t中。例如地址2001:0db8:1234::5210,rfc2553存储为(通过inet_pton): static const uint8_t myaddr[16] = { 0x20, 0x01, 0x0d, 0xb8, 0x12, 0x34, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x52, 0x10 }; 上述地址转换为uint32_t网络序后: static const uint32_t myaddr_network_byte_order[4]={ 0xb80d0120, 0x3412, 0x0, 0x10520000} 再转换为主机序后,这也是MAAT输入ipmatcher和rulescan的格式: static const uint32_t myaddr_host_byte_order[4]={ 0x20010db8, 0x12340000, 0x0, 0x5210} 目前,ip_matcher中int数组高位到低位的顺序是a[3]a[2]a[1]a[0],与RFC2553、Linux都不一致。
2020-05-13新增IP回调表,可以进行IPv4和IPv6的区间匹配。zhengchao
2019-07-11使用有向图(Directed Acyclic ↵zhengchao
Graph)描述分组间的引用关系,引入igraph库。
2018-10-26同步修改maat_redis_tool支持64位的Maat redis key。v2.3.3zhengchao
2018-09-261)hiredis-vip静态链接到maat;2)maat_redis_tool静态链接libmaatframe ↵zhengchao
.a;3)增加文件删除的测试用例。
2018-09-26maat_redis_tool支持dump内容外键。zhengchao
2018-09-23集成google test测试框架。zhengchao