"Fossies" - the Fresh Open Source Software Archive  

Source code changes of the file "src/detect.c" between
snort-2.9.16.1.tar.gz and snort-2.9.17.tar.gz

About: Snort is a network intrusion prevention and detection system (IDS/IPS) combining the benefits of signature, protocol and anomaly-based inspection.

detect.c  (snort-2.9.16.1):detect.c  (snort-2.9.17)
skipping to change at line 57 skipping to change at line 57
#include "fpcreate.h" #include "fpcreate.h"
#include "fpdetect.h" #include "fpdetect.h"
#include "sfthreshold.h" #include "sfthreshold.h"
#include "event_wrapper.h" #include "event_wrapper.h"
#include "event_queue.h" #include "event_queue.h"
#include "obfuscation.h" #include "obfuscation.h"
#include "profiler.h" #include "profiler.h"
#include "session_api.h" #include "session_api.h"
#include "session_common.h" #include "session_common.h"
#include "stream_api.h" #include "stream_api.h"
#include "snort_stream_udp.h"
#include "active.h" #include "active.h"
#include "signature.h" #include "signature.h"
#include "ipv6_port.h" #include "ipv6_port.h"
#include "ppm.h" #include "ppm.h"
#include "sf_types.h" #include "sf_types.h"
#include "active.h" #include "active.h"
#include "detection_util.h" #include "detection_util.h"
#include "preprocids.h" #include "preprocids.h"
#if defined(FEAT_OPEN_APPID) #if defined(FEAT_OPEN_APPID)
#include "sp_appid.h" #include "sp_appid.h"
skipping to change at line 173 skipping to change at line 174
if( scb == NULL && p->ssnptr != NULL ) if( scb == NULL && p->ssnptr != NULL )
scb = ( SessionControlBlock * ) p->ssnptr; scb = ( SessionControlBlock * ) p->ssnptr;
// if we now have session, update enabled pps if changed by previous pre proc // if we now have session, update enabled pps if changed by previous pre proc
if( scb != NULL && pps_enabled_foo != scb->enabled_pps ) if( scb != NULL && pps_enabled_foo != scb->enabled_pps )
{ {
EnablePreprocessors( p, scb->enabled_pps ); EnablePreprocessors( p, scb->enabled_pps );
pps_enabled_foo = scb->enabled_pps; pps_enabled_foo = scb->enabled_pps;
} }
if( ( ppn->preproc_id == PP_FW_RULE_ENGINE ) &&
( ( IPH_IS_VALID( p ) ) && ( GET_IPH_PROTO( p ) == IPPROTO_UDP ) ) &
&
( session_api->protocol_tracking_enabled( SESSION_PROTO_UDP ) ) )
{
InspectPortFilterUdp( p );
}
} while ( ( p->cur_pp != NULL ) && !( p->packet_flags & PKT_PASS_RULE ) ); } while ( ( p->cur_pp != NULL ) && !( p->packet_flags & PKT_PASS_RULE ) );
// queued decoder alerts are processed after the selection of the // queued decoder alerts are processed after the selection of the
// IPS rule config for the flow, if not yet done then process them now // IPS rule config for the flow, if not yet done then process them now
if( !alerts_processed ) if( !alerts_processed )
alerts_processed = processDecoderAlertsActionQ( p ); alerts_processed = processDecoderAlertsActionQ( p );
if( p->dsize == 0 ) if( p->dsize == 0 )
DisableDetect( p ); DisableDetect( p );
} }
 End of changes. 2 change blocks. 
0 lines changed or deleted 9 lines changed or added

Home  |  About  |  Features  |  All  |  Newest  |  Dox  |  Diffs  |  RSS Feeds  |  Screenshots  |  Comments  |  Imprint  |  Privacy  |  HTTP(S)