Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Detect prefilter events 6291 v1.1 #11337

Closed

Conversation

catenacyber
Copy link
Contributor

Link to ticket: https://redmine.openinfosecfoundation.org/issues/
https://redmine.openinfosecfoundation.org/issues/6291
https://redmine.openinfosecfoundation.org/issues/7106

Describe changes:

  • fix missed cases in signature mask for decode events and such
  • add prefilter for decode-event and such

Tested with a random TLPW1-ca1fb1ad30189110cc225620dc537368.pcap with 487089 packets,

time ./src/suricata -c suricata.yaml -k none -r TLPW1-ca1fb1ad30189110cc225620dc537368.pcap -S rules/decoder-events.rules --runmode=single goes down from 12/14 seconds to 8

#11328 first commits that are not draft

jlucovsky and others added 3 commits June 20, 2024 17:11
Remove unused preprocessor value; exposed by compilation warning
Copy link

codecov bot commented Jun 20, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 82.42%. Comparing base (dc043d0) to head (863d67c).

Additional details and impacted files
@@           Coverage Diff           @@
##           master   #11337   +/-   ##
=======================================
  Coverage   82.42%   82.42%           
=======================================
  Files         935      935           
  Lines      247310   247311    +1     
=======================================
+ Hits       203833   203845   +12     
+ Misses      43477    43466   -11     
Flag Coverage Δ
fuzzcorpus 60.23% <100.00%> (+<0.01%) ⬆️
livemode 18.75% <50.00%> (+<0.01%) ⬆️
pcap 43.79% <50.00%> (+0.01%) ⬆️
suricata-verify 61.37% <100.00%> (+<0.01%) ⬆️
unittests 59.31% <50.00%> (+<0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

@suricata-qa
Copy link

ERROR:

ERROR: QA failed on SURI_TLPW2_autofp_suri_time.

Pipeline 21153

@victorjulien victorjulien added this to the 8.0 milestone Jun 20, 2024
@victorjulien
Copy link
Member

Merged in #11353, thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

4 participants