Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
[preview] Feature/newdetect/v17.3.5 #3147
Rewrite of the detect engine, esp the stateful logic. Much cleaner 'detect.c'.
Also includes preview of 'starts_with' and 'ends_with' keywords.
Adds new app-layer API call to register u64 with the protocol parser for keeping track of which prefilter engines already ran for a TX.
Changes TX tracking and cleanup. Much more aggressively frees TXs, and can free transactions out of order.
Since it's a lot of code changing and moving reviewing it is a bit challenging. Sorry about that.
PRScript output (if applicable):