Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[preview] xbits v6.4 #1275

wants to merge 21 commits into from


Copy link

commented Dec 20, 2014

"xbits" implementation: as flowbits, but track by ip_src, ip_dst and ip_pair
For the the latter it adds an ip_pair tracking table.
Also has the 'hostbits' support from #1263


victorjulien added 21 commits Dec 19, 2014
host: register unittests
Host unittests were not registered so they wouldn't run.
detect: hostbits keyword
Per host bit similar to 'flowbits'.

Initial code that uses just the 'src' ip for the operations.
hostbits: implement sigorder
Like with flowbits, make sure that 'set's are evaluated before
'isset's, etc.
hostbits: allow for src/dst parameter
By default, the hostbit checks the 'src' host. By adding the dst option
the dst host is used instead.
ippair: xbit implementation
detect xbits for ippair: initial implementation
xbit: move to util-var
We can reuse the type for hostbits and flowbits as well.
xbits: hostbits use xbits type
Make hostbits use xbits type.
vars: redo var name <-> idx handling
Can't use sm type anymore as multiple var carriers (host/flow/etc) will
all have xbits.
xbits: implement ip_src/ip_dst support
Just a wrapper for regular 'hostbits'.
hosts: consider hostbits/xbits status in timeout
Consider the host's xbits expiry status when checking the host for
timeout. If a single active non-expired bit is found, the host won't
be timeout just yet.
ippair: implement basic timeout check
The only user is the xbits subsys, so it's timeout controls all.
ippair: handle timeouts in the flow manager
Like host and defrag, handle timeouts of ippair in the first flow
manager thread.
host: handle timeout
Set expiration for regular hostbits keyword.

@inliniac inliniac added the preview label Jan 30, 2015

@inliniac inliniac referenced this pull request Feb 9, 2015

This comment has been minimized.

Copy link
Contributor Author

commented Feb 9, 2015

Replaced by #1327

@inliniac inliniac closed this Feb 9, 2015

@inliniac inliniac deleted the dev-xbits-v6.4 branch Apr 16, 2015

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
2 participants
You can’t perform that action at this time.