summaryrefslogtreecommitdiffstats
path: root/recipes-security/suricata
Commit message (Collapse)AuthorAgeFilesLines
* suricata: install and package threshold.configKoen Kooi2018-08-041-0/+2
| | | | | | | | | This fixes the following warning during startup: suricata[24522]: 31/7/2018 -- 13:47:15 - <Warning> - [ERRCODE: SC_ERR_FOPEN(44)] - Error opening file: "/etc/suricata//threshold.config": No such file or directory Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: install and package rulesKoen Kooi2018-08-041-0/+3
| | | | | | | | | This fixes the following warning during startup: suricata[22707]: 31/7/2018 -- 13:34:40 - <Warning> - [ERRCODE: SC_ERR_NO_RULES_LOADED(43)] - 47 rule files specified, but no rule was loaded at all! Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: enable syslog outputKoen Kooi2018-08-041-1/+1
| | | | | | | | | This fixes the following error preventing startup in daemon mode: suricata[20485]: 31/7/2018 -- 13:19:48 - <Error> - [ERRCODE: SC_ERR_MISSING_CONFIG_PARAM(118)] - NO logging compatible with daemon mode selected, suricata won't be able to log. Please update 'logging.outputs' Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricate: create and package logdirKoen Kooi2018-08-041-0/+2
| | | | | | | | | This fixes the following error preventing startup: suricata[18771]: 31/7/2018 -- 13:08:21 - <Error> - [ERRCODE: SC_ERR_LOGDIR_CONFIG(116)] - The logging directory "/var/log/suricata/" supplied by /etc/suricata/suricata.yaml (default-log-dir) doesn't exist. Shut> Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: add systemd unitKoen Kooi2018-08-042-2/+35
| | | | | | | Based on the debian systemd unit. Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: add 'nfq' PACKAGECONFIGKoen Kooi2018-08-041-0/+1
| | | | | | | | For inline IPS nfqueue is nice to have, so add a PACKAGECONFIG entry for it. Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: mark config file as CONFFILEKoen Kooi2018-08-041-0/+2
| | | | | | | This preserves user edits during package upgrades. Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: fix packagingKoen Kooi2018-08-041-2/+2
| | | | | | | Move ${PN}-python in front so ${PN} can use default packaging rules. Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: don't start service in postinstKoen Kooi2018-08-041-1/+0
| | | | | | | Apart from hardcoding the wrong networking device it won't survive device restart Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: update postinitArmin Kuster2018-07-071-2/+2
| | | | | | [log_check] WARNING: Intentionally failing postinstall scriptlets of ['suricata', 'clamav'] to defer them to first boot is deprecated. Please place them into pkg_postinst_ontarget_${PN} () Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: update to 4.0.0Armin Kuster2017-10-023-6/+6
| | | | | | libhtp updated in // as suricata contains the sources Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: update to 3.2.1Armin Kuster2017-03-272-11/+13
| | | | | | | cleaned up ptyhon package creation. dropped patch no longer needed Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: update package to 3.1.3Armin Kuster2016-11-103-3/+3
| | | | | | | | | | | | | | | | | *Changes* Bug #1861: Suricata with multi tenancy does not start in 3.1/3.1.1 Bug #1889: Suricata doesn't error on missing semicolon Bug #1910: libhtp 0.5.23 (3.1.x) Bug #1912: http.memcap reached condition can lead to dead lock Bug #1913: af-packet fanout detection broken on Debian Jessie Bug #1933: unix-command socket created with last character missing (3.1.x) Bug #1934: make install-full does not install tls-events.rules (3.1.x) Bug #1941: Can't set fast_pattern on tls_sni content (3.1.x) Bug #1942: dns - back to back requests results in loss of response (3.1.x) Bug #1943: Check redis reply in non pipeline mode (3.1.x) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: update package to 3.1.2Armin Kuster2016-11-012-3/+3
| | | | | | | v2: rebased against master-next which has 3.1 Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: package update to 3.1.0Armin Kuster2016-10-192-3/+3
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: update to 3.0.2Armin Kuster2016-06-263-3/+3
| | | | | Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Armin Kuster <akuster@mvista.com>
* suricata: update package to 3.0.1Armin Kuster2016-04-233-4/+3
| | | | | | | | - fixes for multiple stability issues - many memory leak fixes - Hyperscan MPM support (experimental) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: update to 3.0Armin Kuster2016-03-144-32/+6
| | | | | | | removed patch no longer needded. LIC_FILES_CHKSUM changed do to copyright date updates. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: package update to 2.0.11Armin Kuster2016-01-172-4/+3
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: update to version 2.0.9Armin Kuster2015-10-301-0/+0
| | | | | | | | | | | | | | | | | | Changes Bug #1558: stream: retransmission not detected (2.0.x) Bug #1550: Segmentation Fault at detect-engine-content-inspection.c:438 Bug #1564: defrag: evasion issue Bug #1431: stream: last_ack update issue leading to stream gaps (2.0.x) Bug #1483: 2.0.x backport: Leading whitespace in flowbits variable names Bug #1490: http_host payload validation erroring on uppercase PCRE metacharacters Bug #1501: 2.0.x backport: Add HUP coverage to output json-log Bug #1510: 2.0.x: address var parsing issue Bug #1513: stream_size <= and >= modifiers function as < and > (equality is not functional) (2.0.x) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libhtp: update to version 0.5.18Armin Kuster2015-10-302-5/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes This is a minor bug-fix release: - Fixed [#120] Trigger request line parsing on incomplete request [Victor Julien] - Fixed [#119] Fix uninitialized htp_tx_t::is_last value in in htp_tx_res_process_body_data_ex() [Fedor Sakharov] - Fixed [#118] Coverity-identified missing break in switch [Sam Baskinger] - Fixed [#117] Coverity-identified issue of not checking malloc() return value [Sam Baskinger] - Fixed [#116] Fix coverity-identified leaked file descriptors in unit test [Sam Baskinger] - Fixed [#113] fix pkgconfig include dir [Eric Leblond] - Fixed [#111] Connect plain http [Victor Julien] - Fixed [#105] Do not invoke callbacks in htp_req_run_hook_body_data() when there is no tx running. [Sam Baskinger] - Fixed [#104] Modifiying HTTP methods to be rfc3253 compliant [Andreas Moe] - Fixed [#103] Fixes [Victor Julien] - Fixed [#101] Make including the autoconf config header safer [Brian Rectanus] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: package update to 2.0.8Armin Kuster2015-06-251-3/+3
| | | | | | | | includes security fix CVE-2015-0971 include nss and nspr to build Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libhtp: update to use suricata 2.0.8Armin Kuster2015-06-252-4/+5
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: Fix QA warningsArmin Kuster2015-05-101-0/+2
| | | | | | | WARNING: QA Issue: suricata rdepends on nspr, but it isn't a build dependency? [build-deps] WARNING: QA Issue: suricata rdepends on nss, but it isn't a build dependency? [build-deps] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: update to 2.0.7Armin Kuster2015-03-207-4/+6
| | | | | | | | this includes CVE-2015-0928 moved patches and files to more generic dir name Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: update to 2.0.6Armin Kuster2015-02-137-23/+47
| | | | | | | fix new build issues with pcap-config cleanup configure selection Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: add new ids and pds engine for meta-securityArmin Kuster2015-02-134-0/+1426
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libhtp: add support lib for suricataArmin Kuster2015-02-132-0/+20
include common inc file Signed-off-by: Armin Kuster <akuster808@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-06-23 08:54:18 +0000