Menu

Code Commit Log


Commit Date  
[r27] (HEAD) by justinwray

Added output handling, which reads the users output option, and outputs in the requested format or to the proper file.

2011-06-01 03:35:59 Tree
[r26] by justinwray

Bug: UDP was incorrectly spcified as TCP.

2011-05-31 01:47:24 Tree
[r25] by justinwray

Added proper handling of invalid IP addresses within a range, or when the minIP is larger than the maxIP.

2011-05-31 01:26:50 Tree
[r24] by justinwray

Moved the header checking to its own method. Also stopped passing variables all over the place when they were part of the object to begin with.

2011-05-30 05:50:25 Tree
[r23] by justinwray

Multiple changes to properly parse rules and handle header processing:

* Bug: Updated rule parsing to properly skip a rule, and proceed to the next
* Bug: Modified portParse to handle numeric values properly
* New: Full PCAP Header parsing/processing - Packets Src/Dst Port/Address are compared to the values provided wihin the rule, including ranges.

2011-05-29 22:49:47 Tree
[r22] by justinwray

Dump data only after we already know it matched, yes it may try to dump twice, it more than one rule first, we can dicuss this though...

2011-05-29 07:15:12 Tree
[r21] by stevcoll

Added processing of IP Ranges, which can be used inside rules in addition to IP and CIDR .

2011-05-29 07:04:22 Tree
[r20] by justinwray

Added initial Rule Matching, so we are now officially alerting on data, based on the rules! -- In other words, HUGE SUCCESS.

Couple of changes/notes:
* Rules now have the compiled regular expression within the rule element
* PCAP and Alerting methods required Rules to be passed
* Packet is first compared against a large REGEX, then further processed
* Once packet is matched, it is reprocessed to determine the alerting rule - this is also where header related comparisons should take place.

2011-05-29 04:44:50 Tree
[r19] by justinwray

Compiled Master Rule (All rules compiled into one union).

2011-05-29 04:03:40 Tree
[r18] by justinwray

Added compiled regex rules to the Rules Class - this will allow indexed searches against the rules from the PCAP class.

2011-05-29 03:31:41 Tree
Older >
Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.