"Fossies" - the Fresh Open Source Software Archive  

Source code changes of the file "src/preprocessors/HttpInspect/include/hi_eo_events.h" between
snort-2.9.16.1.tar.gz and snort-2.9.17.tar.gz

About: Snort is a network intrusion prevention and detection system (IDS/IPS) combining the benefits of signature, protocol and anomaly-based inspection.

hi_eo_events.h  (snort-2.9.16.1):hi_eo_events.h  (snort-2.9.17)
skipping to change at line 69 skipping to change at line 69
HI_EO_CLIENT_EXCEEDS_SPACES , HI_EO_CLIENT_EXCEEDS_SPACES ,
HI_EO_CLIENT_CONSECUTIVE_SMALL_CHUNKS, HI_EO_CLIENT_CONSECUTIVE_SMALL_CHUNKS,
HI_EO_CLIENT_UNBOUNDED_POST, HI_EO_CLIENT_UNBOUNDED_POST,
HI_EO_CLIENT_MULTIPLE_TRUEIP_IN_SESSION, HI_EO_CLIENT_MULTIPLE_TRUEIP_IN_SESSION,
HI_EO_CLIENT_BOTH_TRUEIP_XFF_HDRS, HI_EO_CLIENT_BOTH_TRUEIP_XFF_HDRS,
HI_EO_CLIENT_UNKNOWN_METHOD, HI_EO_CLIENT_UNKNOWN_METHOD,
HI_EO_CLIENT_SIMPLE_REQUEST, HI_EO_CLIENT_SIMPLE_REQUEST,
HI_EO_CLIENT_UNESCAPED_SPACE_URI, HI_EO_CLIENT_UNESCAPED_SPACE_URI,
HI_EO_CLIENT_PIPELINE_MAX, HI_EO_CLIENT_PIPELINE_MAX,
HI_EO_CLIENT_MULTIPLE_COLON_BETN_KEY_VALUE, HI_EO_CLIENT_MULTIPLE_COLON_BETN_KEY_VALUE,
HI_EO_CLIENT_INVALID_RANGE_UNIT_FMT,
HI_EO_CLIENT_RANGE_NON_GET_METHOD,
HI_EO_CLIENT_RANGE_FIELD_ERROR,
HI_EO_CLIENT_EVENT_NUM HI_EO_CLIENT_EVENT_NUM
} HI_CLI_EVENTS; } HI_CLI_EVENTS;
typedef enum _HI_EVENTS typedef enum _HI_EVENTS
{ {
HI_EO_ANOM_SERVER = 0, HI_EO_ANOM_SERVER = 0,
HI_EO_SERVER_INVALID_STATCODE, HI_EO_SERVER_INVALID_STATCODE,
HI_EO_SERVER_NO_CONTLEN, HI_EO_SERVER_NO_CONTLEN,
HI_EO_SERVER_UTF_NORM_FAIL, HI_EO_SERVER_UTF_NORM_FAIL,
HI_EO_SERVER_UTF7, HI_EO_SERVER_UTF7,
skipping to change at line 103 skipping to change at line 106
HI_EO_SERVER_MULTIPLE_CONTENT_ENCODING, HI_EO_SERVER_MULTIPLE_CONTENT_ENCODING,
HI_EO_SERVER_MULTIPLE_COLON_BETN_KEY_VALUE, HI_EO_SERVER_MULTIPLE_COLON_BETN_KEY_VALUE,
HI_EO_SERVER_INVALID_CHAR_BETN_KEY_VALUE, HI_EO_SERVER_INVALID_CHAR_BETN_KEY_VALUE,
HI_EO_CLISRV_INVALID_CHUNKED_ENCODING, HI_EO_CLISRV_INVALID_CHUNKED_ENCODING,
HI_EO_SERVER_PARTIAL_DECOMPRESSION_FAIL, HI_EO_SERVER_PARTIAL_DECOMPRESSION_FAIL,
HI_EO_SERVER_INVALID_HEADER_FOLDING, HI_EO_SERVER_INVALID_HEADER_FOLDING,
HI_EO_SERVER_JUNK_LINE_BEFORE_RESP_HEADER, HI_EO_SERVER_JUNK_LINE_BEFORE_RESP_HEADER,
HI_EO_SERVER_NO_RESP_HEADER_END, HI_EO_SERVER_NO_RESP_HEADER_END,
HI_EO_SERVER_INVALID_CHUNK_SIZE, HI_EO_SERVER_INVALID_CHUNK_SIZE,
HI_EO_SERVER_INVALID_VERSION_RESP_HEADER, HI_EO_SERVER_INVALID_VERSION_RESP_HEADER,
HI_EO_SERVER_INVALID_CONTENT_RANGE_UNIT_FMT,
HI_EO_SERVER_RANGE_FIELD_ERROR,
HI_EO_SERVER_EVENT_NUM HI_EO_SERVER_EVENT_NUM
}HI_EVENTS; }HI_EVENTS;
/* /*
** These defines are the alert names for each event ** These defines are the alert names for each event
*/ */
#define HI_EO_CLIENT_ASCII_STR \ #define HI_EO_CLIENT_ASCII_STR \
"(http_inspect) ASCII ENCODING" "(http_inspect) ASCII ENCODING"
#define HI_EO_CLIENT_DOUBLE_DECODE_STR \ #define HI_EO_CLIENT_DOUBLE_DECODE_STR \
"(http_inspect) DOUBLE DECODING ATTACK" "(http_inspect) DOUBLE DECODING ATTACK"
skipping to change at line 180 skipping to change at line 185
#define HI_EO_CLIENT_UNKNOWN_METHOD_STR \ #define HI_EO_CLIENT_UNKNOWN_METHOD_STR \
"(http_inspect) UNKNOWN METHOD" "(http_inspect) UNKNOWN METHOD"
#define HI_EO_CLIENT_SIMPLE_REQUEST_STR \ #define HI_EO_CLIENT_SIMPLE_REQUEST_STR \
"(http_inspect) SIMPLE REQUEST" "(http_inspect) SIMPLE REQUEST"
#define HI_EO_CLIENT_UNESCAPED_SPACE_URI_STR \ #define HI_EO_CLIENT_UNESCAPED_SPACE_URI_STR \
"(http_inspect) UNESCAPED SPACE IN HTTP URI" "(http_inspect) UNESCAPED SPACE IN HTTP URI"
#define HI_EO_CLIENT_PIPELINE_MAX_STR \ #define HI_EO_CLIENT_PIPELINE_MAX_STR \
"(http_inspect) TOO MANY PIPELINED REQUESTS" "(http_inspect) TOO MANY PIPELINED REQUESTS"
#define HI_EO_CLIENT_MULTIPLE_COLON_BETN_KEY_VALUE_STR \ #define HI_EO_CLIENT_MULTIPLE_COLON_BETN_KEY_VALUE_STR \
"(http_inspect) MULTIPLE COLON BETWEEN KEY AND VALUE IN HTTP REQUEST HEADER" "(http_inspect) MULTIPLE COLON BETWEEN KEY AND VALUE IN HTTP REQUEST HEADER"
#define HI_EO_CLIENT_INVALID_RANGE_UNIT_FMT_STR \
"(http_inspect) INVALID RANGE UNIT FORMAT"
#define HI_EO_CLIENT_RANGE_NON_GET_METHOD_STR \
"(http_inspect) RANGE FIELD PRESENT IN NON GET METHOD"
#define HI_EO_CLIENT_RANGE_FIELD_ERROR_STR \
"(http_inspect) ERROR IN RANGE FIELD OF REQUEST HEADER"
/* /*
** Server Events ** Server Events
*/ */
#define HI_EO_ANOM_SERVER_STR \ #define HI_EO_ANOM_SERVER_STR \
"(http_inspect) ANOMALOUS HTTP SERVER ON UNDEFINED HTTP PORT" "(http_inspect) ANOMALOUS HTTP SERVER ON UNDEFINED HTTP PORT"
#define HI_EO_SERVER_INVALID_STATCODE_STR \ #define HI_EO_SERVER_INVALID_STATCODE_STR \
"(http_inspect) INVALID STATUS CODE IN HTTP RESPONSE" "(http_inspect) INVALID STATUS CODE IN HTTP RESPONSE"
#define HI_EO_SERVER_NO_CONTLEN_STR \ #define HI_EO_SERVER_NO_CONTLEN_STR \
skipping to change at line 243 skipping to change at line 254
#define HI_EO_SERVER_INVALID_HEADER_FOLDING_STR \ #define HI_EO_SERVER_INVALID_HEADER_FOLDING_STR \
"(http_inspect) INVALID HEADER FOLDING" "(http_inspect) INVALID HEADER FOLDING"
#define HI_EO_SERVER_JUNK_LINE_BEFORE_RESP_HEADER_STR \ #define HI_EO_SERVER_JUNK_LINE_BEFORE_RESP_HEADER_STR \
"(http_inspect) JUNK LINE BEFORE HTTP RESPONSE HEADER" "(http_inspect) JUNK LINE BEFORE HTTP RESPONSE HEADER"
#define HI_EO_SERVER_NO_RESP_HEADER_END_STR \ #define HI_EO_SERVER_NO_RESP_HEADER_END_STR \
"(http_inspect) NO END OF HEADER IN RESPONSE" "(http_inspect) NO END OF HEADER IN RESPONSE"
#define HI_EO_SERVER_INVALID_CHUNK_SIZE_STR \ #define HI_EO_SERVER_INVALID_CHUNK_SIZE_STR \
"(http_inspect) INVALID CHUNK SIZE OR CHUNK SIZE FOLLOWED BY JUNK CHARACTERS " "(http_inspect) INVALID CHUNK SIZE OR CHUNK SIZE FOLLOWED BY JUNK CHARACTERS "
#define HI_EO_SERVER_INVALID_VERSION_RESP_HEADER_STR \ #define HI_EO_SERVER_INVALID_VERSION_RESP_HEADER_STR \
"(http_inspect) INVALID VERSION IN HTTP RESPONSE HEADER" "(http_inspect) INVALID VERSION IN HTTP RESPONSE HEADER"
#define HI_EO_SERVER_INVALID_CONTENT_RANGE_UNIT_FMT_STR \
"(http_inspect) INVALID CONTENT RANGE UNIT FORMAT"
#define HI_EO_SERVER_RANGE_FIELD_ERROR_STR \
"(http_inspect) ERROR IN RANGE FIELD OF RESPONSE HEADER"
/* /*
** Event Priorities ** Event Priorities
*/ */
#define HI_EO_HIGH_PRIORITY 0 #define HI_EO_HIGH_PRIORITY 0
#define HI_EO_MED_PRIORITY 1 #define HI_EO_MED_PRIORITY 1
#define HI_EO_LOW_PRIORITY 2 #define HI_EO_LOW_PRIORITY 2
#endif #endif
 End of changes. 4 change blocks. 
0 lines changed or deleted 15 lines changed or added

Home  |  About  |  Features  |  All  |  Newest  |  Dox  |  Diffs  |  RSS Feeds  |  Screenshots  |  Comments  |  Imprint  |  Privacy  |  HTTP(S)