jasonish

%YAML 1.1
---

outputs:
  - eve-log:
      enabled: yes
      filetype: redis
      filename: eve.json
      redis:
        server: 127.0.0.1

jasonish

%YAML 1.1
---

outputs:
  - eve-log:
      enabled: yes
      filetype: redis
      filename: eve.json
      redis:
        server: 127.0.0.1

jasonish

diff --git a/src/app-layer-dns-udp.c b/src/app-layer-dns-udp.c
index 9f1ec9d09..68ccb6787 100644
--- a/src/app-layer-dns-udp.c
+++ b/src/app-layer-dns-udp.c
@@ -387,6 +387,37 @@ static void DNSUDPConfigure(void)
     DNSConfigSetGlobalMemcap(global_memcap);
 }
 
+static char terminator;
+#define TERMINATOR ((void *)&terminator)

jasonish

diff --git a/src/app-layer-dns-common.c b/src/app-layer-dns-common.c
index bc6821092..0dcc988da 100644
--- a/src/app-layer-dns-common.c
+++ b/src/app-layer-dns-common.c
@@ -319,6 +319,8 @@ static void DNSTransactionFree(DNSTransaction *tx, DNSState *state)
 {
     SCEnter();
 
+    SCLogNotice("Freeing tx %p", tx);
+

jasonish

diff --git a/src/app-layer-dns-udp.c b/src/app-layer-dns-udp.c
index 9f1ec9d09..795d281f4 100644
--- a/src/app-layer-dns-udp.c
+++ b/src/app-layer-dns-udp.c
@@ -387,6 +387,47 @@ static void DNSUDPConfigure(void)
     DNSConfigSetGlobalMemcap(global_memcap);
 }
 
+static void *DNSUDPGetTxIterator(const uint8_t ipproto, const AppProto alproto,
+        void *alstate, uint64_t min_tx_id, uint64_t max_tx_id,

jasonish

diff --git a/src/app-layer-dns-udp.c b/src/app-layer-dns-udp.c
index 9f1ec9d09..747b441b3 100644
--- a/src/app-layer-dns-udp.c
+++ b/src/app-layer-dns-udp.c
@@ -387,6 +387,35 @@ static void DNSUDPConfigure(void)
     DNSConfigSetGlobalMemcap(global_memcap);
 }
 
+static void *DNSUDPGetTxIterator(const uint8_t ipproto, const AppProto alproto,
+        void *alstate, uint64_t min_tx_id, uint64_t max_tx_id,

jasonish

#0  0x0000000000ba9d38 in DetectPortCut (de_ctx=de_ctx@entry=0x622000004900, a=0x6030026312b0, b=b@entry=0x6030023ed710, 
    c=c@entry=0x7fffff803070) at detect-engine-port.c:278
#1  0x0000000000bad60e in DetectPortInsert (de_ctx=de_ctx@entry=0x622000004900, head=head@entry=0x7ffffffef760, 
    new=new@entry=0x6030023ed710) at detect-engine-port.c:231
#2  0x0000000000bad629 in DetectPortInsert (de_ctx=de_ctx@entry=0x622000004900, head=head@entry=0x7ffffffef760, 
    new=new@entry=0x6030023ed710) at detect-engine-port.c:235
#3  0x0000000000bad629 in DetectPortInsert (de_ctx=de_ctx@entry=0x622000004900, head=head@entry=0x7ffffffef760, 
    new=new@entry=0x6030023ed710) at detect-engine-port.c:235
#4  0x0000000000bad629 in DetectPortInsert (de_ctx=de_ctx@entry=0x622000004900, head=head@entry=0x7ffffffef760, 
    new=new@entry=0x6030023ed710) at detect-engine-port.c:235

jasonish

#!/usr/bin/python
# EASY-INSTALL-SCRIPT: 'suricata-update==1.0.0b1','suricata-update'
__requires__ = 'suricata-update==1.0.0b1'
__import__('pkg_resources').run_script('suricata-update==1.0.0b1', 'suricata-update')

jasonish

outputs:
  - eve-log:
      types:
        - alert:
            metadata: yes
            
            # Include context from the rule that triggered the alert.
            # Defaults:
            #   - raw: false
            #   - metadata: true

jasonish

outputs:
  - eve-log:
      types:
        - alert:
            metadata: yes
            rule-metadata:
              enabled: yes
            rule: yes