"Fossies" - the Fresh Open Source Software Archive  

Source code changes of the file "src/generators.h" between
snort-2.9.16.1.tar.gz and snort-2.9.17.tar.gz

About: Snort is a network intrusion prevention and detection system (IDS/IPS) combining the benefits of signature, protocol and anomaly-based inspection.

generators.h  (snort-2.9.16.1):generators.h  (snort-2.9.17)
skipping to change at line 156 skipping to change at line 156
#define DECODE_IPV6_DSTOPTS_WITH_ROUTING 292 #define DECODE_IPV6_DSTOPTS_WITH_ROUTING 292
#define DECODE_IP_MULTIPLE_ENCAPSULATION 293 #define DECODE_IP_MULTIPLE_ENCAPSULATION 293
#define DECODE_ESP_HEADER_TRUNC 294 #define DECODE_ESP_HEADER_TRUNC 294
#define DECODE_IPV6_BAD_OPT_LEN 295 #define DECODE_IPV6_BAD_OPT_LEN 295
#define DECODE_IPV6_UNORDERED_EXTENSIONS 296 #define DECODE_IPV6_UNORDERED_EXTENSIONS 296
#define DECODE_GTP_MULTIPLE_ENCAPSULATION 297 #define DECODE_GTP_MULTIPLE_ENCAPSULATION 297
#define DECODE_GTP_BAD_LEN 298 #define DECODE_GTP_BAD_LEN 298
#define DECODE_DECODING_DEPTH_EXCEEDED 300
//----------------------------------------------------- //-----------------------------------------------------
// remember to add rules to preproc_rules/decoder.rules // remember to add rules to preproc_rules/decoder.rules
// add the new decoder rules to the following enum. // add the new decoder rules to the following enum.
#define DECODE_START_INDEX 400 #define DECODE_START_INDEX 400
enum { enum {
DECODE_TCP_XMAS = DECODE_START_INDEX, DECODE_TCP_XMAS = DECODE_START_INDEX,
DECODE_TCP_NMAP_XMAS, DECODE_TCP_NMAP_XMAS,
DECODE_DOS_NAPTHA, DECODE_DOS_NAPTHA,
skipping to change at line 287 skipping to change at line 289
#define HI_CLIENT_EXCEEDS_SPACES 26 #define HI_CLIENT_EXCEEDS_SPACES 26
#define HI_CLIENT_CONSECUTIVE_SMALL_CHUNK_SIZES 27 #define HI_CLIENT_CONSECUTIVE_SMALL_CHUNK_SIZES 27
#define HI_CLIENT_UNBOUNDED_POST 28 #define HI_CLIENT_UNBOUNDED_POST 28
#define HI_CLIENT_MULTIPLE_TRUEIP_IN_SESSION 29 #define HI_CLIENT_MULTIPLE_TRUEIP_IN_SESSION 29
#define HI_CLIENT_BOTH_TRUEIP_XFF_HDRS 30 #define HI_CLIENT_BOTH_TRUEIP_XFF_HDRS 30
#define HI_CLIENT_UNKNOWN_METHOD 31 #define HI_CLIENT_UNKNOWN_METHOD 31
#define HI_CLIENT_SIMPLE_REQUEST 32 #define HI_CLIENT_SIMPLE_REQUEST 32
#define HI_CLIENT_UNESCAPED_SPACE_URI 33 #define HI_CLIENT_UNESCAPED_SPACE_URI 33
#define HI_CLIENT_PIPELINE_MAX 34 #define HI_CLIENT_PIPELINE_MAX 34
#define HI_CLIENT_INVALID_RANGE_UNIT_FMT 36
#define HI_CLIENT_RANGE_NON_GET_METHOD 37
#define HI_CLIENT_RANGE_FIELD_ERROR 38
// these are either server specific or both client / server // these are either server specific or both client / server
#define GENERATOR_SPP_HTTP_INSPECT 120 #define GENERATOR_SPP_HTTP_INSPECT 120
#define HI_ANOM_SERVER_ALERT 1 /* done */ #define HI_ANOM_SERVER_ALERT 1 /* done */
#define HI_SERVER_INVALID_STATCODE 2 #define HI_SERVER_INVALID_STATCODE 2
#define HI_SERVER_NO_CONTLEN 3 #define HI_SERVER_NO_CONTLEN 3
#define HI_SERVER_UTF_NORM_FAIL 4 #define HI_SERVER_UTF_NORM_FAIL 4
#define HI_SERVER_UTF7 5 #define HI_SERVER_UTF7 5
#define HI_SERVER_DECOMPR_FAILED 6 #define HI_SERVER_DECOMPR_FAILED 6
#define HI_SERVER_CONSECUTIVE_SMALL_CHUNK_SIZES 7 #define HI_SERVER_CONSECUTIVE_SMALL_CHUNK_SIZES 7
#define HI_CLISRV_MSG_SIZE_EXCEPTION 8 #define HI_CLISRV_MSG_SIZE_EXCEPTION 8
#define HI_SERVER_JS_OBFUSCATION_EXCD 9 #define HI_SERVER_JS_OBFUSCATION_EXCD 9
#define HI_SERVER_JS_EXCESS_WS 10 #define HI_SERVER_JS_EXCESS_WS 10
#define HI_SERVER_MIXED_ENCODINGS 11 #define HI_SERVER_MIXED_ENCODINGS 11
#define HI_SERVER_SWF_ZLIB_FAILURE 12 #define HI_SERVER_SWF_ZLIB_FAILURE 12
#define HI_SERVER_SWF_LZMA_FAILURE 13 #define HI_SERVER_SWF_LZMA_FAILURE 13
#define HI_SERVER_PDF_DEFLATE_FAILURE 14 #define HI_SERVER_PDF_DEFLATE_FAILURE 14
#define HI_SERVER_PDF_UNSUP_COMP_TYPE 15 #define HI_SERVER_PDF_UNSUP_COMP_TYPE 15
#define HI_SERVER_PDF_CASC_COMP 16 #define HI_SERVER_PDF_CASC_COMP 16
#define HI_SERVER_PDF_PARSE_FAILURE 17 #define HI_SERVER_PDF_PARSE_FAILURE 17
#define HI_SERVER_INVALID_CONTENT_RANGE_UNIT_FMT 30
#define HI_SERVER_RANGE_FIELD_ERROR 31
#define GENERATOR_PSNG 122 #define GENERATOR_PSNG 122
#define PSNG_TCP_PORTSCAN 1 #define PSNG_TCP_PORTSCAN 1
#define PSNG_TCP_DECOY_PORTSCAN 2 #define PSNG_TCP_DECOY_PORTSCAN 2
#define PSNG_TCP_PORTSWEEP 3 #define PSNG_TCP_PORTSWEEP 3
#define PSNG_TCP_DISTRIBUTED_PORTSCAN 4 #define PSNG_TCP_DISTRIBUTED_PORTSCAN 4
#define PSNG_TCP_FILTERED_PORTSCAN 5 #define PSNG_TCP_FILTERED_PORTSCAN 5
#define PSNG_TCP_FILTERED_DECOY_PORTSCAN 6 #define PSNG_TCP_FILTERED_DECOY_PORTSCAN 6
#define PSNG_TCP_PORTSWEEP_FILTERED 7 #define PSNG_TCP_PORTSWEEP_FILTERED 7
#define PSNG_TCP_FILTERED_DISTRIBUTED_PORTSCAN 8 #define PSNG_TCP_FILTERED_DISTRIBUTED_PORTSCAN 8
skipping to change at line 534 skipping to change at line 543
#define GENERATOR_SPP_GTP 143 #define GENERATOR_SPP_GTP 143
#define GENERATOR_SPP_MODBUS 144 #define GENERATOR_SPP_MODBUS 144
#define GENERATOR_SPP_DNP3 145 #define GENERATOR_SPP_DNP3 145
// #define GENERATOR_FILE_TYPE 146 //Defined in file_servic e.h // #define GENERATOR_FILE_TYPE 146 //Defined in file_servic e.h
// #define GENERATOR_FILE_SIGNATURE 147 //Defined in file_servic e.h // #define GENERATOR_FILE_SIGNATURE 147 //Defined in file_servic e.h
#define GENERATOR_SPP_CIP 148 #define GENERATOR_SPP_CIP 148
#define GENERATOR_SPP_S7COMMPLUS 149
/* This is where all the alert messages will be archived for each /* This is where all the alert messages will be archived for each
internal alerts */ internal alerts */
#define ARPSPOOF_UNICAST_ARP_REQUEST_STR "(spp_arpspoof) Unicast ARP request" #define ARPSPOOF_UNICAST_ARP_REQUEST_STR "(spp_arpspoof) Unicast ARP request"
#define ARPSPOOF_ETHERFRAME_ARP_MISMATCH_SRC_STR \ #define ARPSPOOF_ETHERFRAME_ARP_MISMATCH_SRC_STR \
"(spp_arpspoof) Ethernet/ARP Mismatch request for Source" "(spp_arpspoof) Ethernet/ARP Mismatch request for Source"
#define ARPSPOOF_ETHERFRAME_ARP_MISMATCH_DST_STR \ #define ARPSPOOF_ETHERFRAME_ARP_MISMATCH_DST_STR \
"(spp_arpspoof) Ethernet/ARP Mismatch request for Destination" "(spp_arpspoof) Ethernet/ARP Mismatch request for Destination"
#define ARPSPOOF_ARP_CACHE_OVERWRITE_ATTACK_STR \ #define ARPSPOOF_ARP_CACHE_OVERWRITE_ATTACK_STR \
skipping to change at line 820 skipping to change at line 830
#define DECODE_BAD_MPLS_STR "(snort_decoder) WARNING: Bad MPLS Frame" #define DECODE_BAD_MPLS_STR "(snort_decoder) WARNING: Bad MPLS Frame"
#define DECODE_BAD_MPLS_LABEL0_STR "(snort_decoder) WARNING: MPLS Label 0 Appear s in Nonbottom Header" #define DECODE_BAD_MPLS_LABEL0_STR "(snort_decoder) WARNING: MPLS Label 0 Appear s in Nonbottom Header"
#define DECODE_BAD_MPLS_LABEL1_STR "(snort_decoder) WARNING: MPLS Label 1 Appear s in Bottom Header" #define DECODE_BAD_MPLS_LABEL1_STR "(snort_decoder) WARNING: MPLS Label 1 Appear s in Bottom Header"
#define DECODE_BAD_MPLS_LABEL2_STR "(snort_decoder) WARNING: MPLS Label 2 Appear s in Nonbottom Header" #define DECODE_BAD_MPLS_LABEL2_STR "(snort_decoder) WARNING: MPLS Label 2 Appear s in Nonbottom Header"
#define DECODE_BAD_MPLS_LABEL3_STR "(snort_decoder) WARNING: MPLS Label 3 Appear s in Header" #define DECODE_BAD_MPLS_LABEL3_STR "(snort_decoder) WARNING: MPLS Label 3 Appear s in Header"
#define DECODE_MPLS_RESERVEDLABEL_STR "(snort_decoder) WARNING: MPLS Label 4, 5, .. or 15 Appears in Header" #define DECODE_MPLS_RESERVEDLABEL_STR "(snort_decoder) WARNING: MPLS Label 4, 5, .. or 15 Appears in Header"
#define DECODE_MPLS_LABEL_STACK_STR "(snort_decoder) WARNING: Too Many MPLS head ers" #define DECODE_MPLS_LABEL_STACK_STR "(snort_decoder) WARNING: Too Many MPLS head ers"
#define DECODE_MULTICAST_MPLS_STR "(snort_decoder) WARNING: Multicast MPLS traff ic detected" #define DECODE_MULTICAST_MPLS_STR "(snort_decoder) WARNING: Multicast MPLS traff ic detected"
#define DECODE_DECODING_DEPTH_EXCEEDED_STR "(snort_decoder) WARNING: Too many le
vels for decoding"
#endif /* __GENERATORS_H__ */ #endif /* __GENERATORS_H__ */
 End of changes. 5 change blocks. 
0 lines changed or deleted 13 lines changed or added

Home  |  About  |  Features  |  All  |  Newest  |  Dox  |  Diffs  |  RSS Feeds  |  Screenshots  |  Comments  |  Imprint  |  Privacy  |  HTTP(S)