mike@arpaia.co
715e10a738
Change glog max log size to 10MB
...
close #444
2014-11-17 11:39:35 -08:00
Teddy Reed
1116d6a928
Merge pull request #438 from theopolis/feature-arp-table
...
arp_cache vtable for OSX and Linux
2014-11-17 11:36:46 -08:00
Mike Arpaia
c56d045f7a
Merge pull request #447 from facebook/445
...
Get rid of superfluous logging in launchQueries
2014-11-17 11:29:55 -08:00
mike@arpaia.co
f707253537
close #445
2014-11-17 11:29:14 -08:00
Mike Arpaia
c5e50ff26e
Merge pull request #439 from wxsBSD/macros
...
Use INTEGER macro.
2014-11-17 11:19:08 -08:00
Wesley Shields
c764226b77
Use INTEGER macro.
...
This makes the code match the example at:
https://github.com/facebook/osquery/wiki/creating-a-new-table
2014-11-17 13:30:46 -05:00
Teddy
968f8027e6
Cleaner arp_table->arp_cache on Linux/OSX
2014-11-17 02:37:15 -08:00
Javier Marcos
093c857aea
Merge pull request #437 from facebook/centos_build_fix
...
Fixes building in CentOS, sudo was missing from some commands
2014-11-16 22:51:06 -08:00
Javier Marcos
5db8dcbae6
Fixes building in CentOS, sudo was missing from some commands
2014-11-16 22:46:12 -08:00
Teddy Reed
d50d1cf3a7
Faster build on Ubuntu
2014-11-16 19:49:41 -08:00
Teddy Reed
ee015343f9
Simplify arp, move to arp_table
2014-11-16 19:49:40 -08:00
Pablo S. Torralba
65c4ed4a7d
Fix boost split on linux to remove sscanf
2014-11-16 19:49:40 -08:00
Pablo S. Torralba
2b32673445
Some fixes:
...
- clang-format on code
- NULL -> nullptr
- some (char *) changed in std::string favour
- Removed a memory leak.
- Moved struct inside the table namespace
2014-11-16 19:49:40 -08:00
Pablo S. Torralba
778951d6a4
Remove osx dependency on system() call to get arp information
2014-11-16 19:49:40 -08:00
Pablo S. Torralba
c7fc2cee22
rename vtable field arp->mac
2014-11-16 19:49:40 -08:00
Pablo S. Torralba
4f524abbea
arp vtable different implementation in osx and linux
2014-11-16 19:49:40 -08:00
Pablo S. Torralba
413d6f068b
Change fgetln (osx specific) in favour of getline (both osx and linux)
2014-11-16 19:49:40 -08:00
Pablo S. Torralba
1843d80660
arp vtable with ip, arp and interface where it was seen
2014-11-16 19:49:40 -08:00
Mike Arpaia
c594c67dae
Merge pull request #436 from facebook/launchd-customization
...
Customizable LaunchDaemon via a command-line flag
2014-11-16 13:01:17 -08:00
Mike Arpaia
a4b9920ed9
Merge pull request #435 from facebook/blacklist-inode
...
blacklisting port_inode and socket_inode
2014-11-16 13:01:01 -08:00
mike@arpaia.co
2e49debd70
Customizable LaunchDaemon via a command-line flag
...
This is in response to #411 . Allowing you to specify arguments on the
command-line has more edge-cases than I'd prefer, so I think this is a
bit more of a sustainable solution, especially given that you're already
supplying the tool with a path to your config file (now you can just
track one additional file).
2014-11-16 11:07:52 -08:00
mike@arpaia.co
bfceaf8453
blacklisting port_inode and socket_inode
...
port_inode and socket_inode have caused a few issues lately and, as of
right now, they both have open issues against them. For the time being,
I'm going to blacklist them. When the tables are production-ready, we
can re-add them back in to the base linux build.
2014-11-16 09:42:57 -08:00
Teddy Reed
816faec3db
Merge pull request #429 from cdown/llvm_license
...
Add missing LLVM license referenced in git-clang-format.py
2014-11-14 18:46:22 -08:00
Teddy Reed
f725e1c01d
Merge pull request #431 from cdown/its_lintmas
...
Add PEP8 and general lint conformance to in-house scripts
2014-11-14 18:46:11 -08:00
Chris Down
8082313cce
Revert removal of unused symbols in genapi per @theopolis' comment:
...
At https://github.com/cdown/osquery/commit/2a93de#commitcomment-8583208 :
> Although the removed symbols aren't referenced in this script they are
> used in the spec evaluation.
2014-11-15 01:39:29 +00:00
Chris Down
2a93def805
Add PEP8 and general lint conformance to in-house scripts
...
My intent in this diff was mostly style linting, so I disabled
non-stylistic pylint linters that fired in the interests of making this
a sane diff with one purpose: stylistic consistency and conformance. If
I disabled them it means they were thrown somewhere and should probably
be looked into some time :-)
This diff adds:
- PEP8 conformance (tested with pep8)
- A cleanup of stuff shown by `pylint`, with quite a few linters
disabled. See above for rationale to disable these -- in the end this
was mostly unused variables, unused imports, etc). These are the
linters I disabled:
- attribute-defined-outside-init
- bad-classmethod-argument
- bare-except
- broad-except
- exec-used
- invalid-name
- logging-not-lazy
- method-hidden
- missing-docstring
- redefined-outer-name
- too-few-public-methods
- too-many-instance-attributes
- too-many-locals
- unused-argument
- flake8 warnings fixed (warnings were about redefinition of previous
variables in a listcomp)
I didn't do anything with git-clang-format since it's from an external
project and it's possible that there may be a wish to merge it in again
later if it gets updated upstream, but you could, of course, apply this
to that script as well if you so wish. Right now it's not at all PEP8
conformant.
2014-11-14 23:36:36 +00:00
Teddy Reed
0cb30d8ccb
Merge pull request #430 from theopolis/fix-biging
...
Check tables row vector size before access
2014-11-14 15:25:39 -08:00
Teddy Reed
a1898ef03b
Check tables row vector size before access
2014-11-14 15:18:25 -08:00
Chris Down
3554a65885
Add missing LLVM license referenced in git-clang-format.py
2014-11-14 23:07:48 +00:00
Teddy Reed
c0dc2720fb
Merge pull request #425 from theopolis/feature-catching-exceptions
...
Fix unwind exception catching
2014-11-14 01:43:55 -08:00
Teddy Reed
02841f5e7f
Add kernel userland-API inet_diag header
2014-11-14 01:42:34 -08:00
Teddy Reed
565bce3c07
Fix unwind exception catching
2014-11-14 01:42:00 -08:00
Teddy Reed
968e4331f0
Merge pull request #428 from vmauge/fix_genapi
...
Fix genapi to support DataType
2014-11-14 00:06:02 -08:00
Vincent Mauge
73d7500b8d
Fix genapi to support DataType
...
PR #414 (commit a5ef6a1
) changed column type from string to Datatype
2014-11-13 22:43:06 -08:00
Teddy Reed
0c675b23f2
Fix testing (only requireInstance) for DBHandle once
2014-11-13 09:33:13 -08:00
Teddy Reed
417bc8d222
Merge pull request #424 from vmauge/cpuid_default_value
...
Set ouput_bit to 0 instead of cast error
2014-11-12 23:17:22 -08:00
Vincent Mauge
632151d56a
Set ouput_bit to 0 instead of cast error
2014-11-12 22:02:04 -08:00
Teddy Reed
be26c999ad
Merge pull request #420 from theopolis/feature-better-logging
...
More control over logging
2014-11-12 17:27:03 -08:00
Teddy Reed
153cc7208f
More control over logging
2014-11-12 18:19:22 -07:00
Teddy Reed
aa933491d2
Merge pull request #416 from theopolis/hack_fix_386
...
[Fix #386 ] This is a hack to fix Ubuntu unwinding
2014-11-12 16:43:18 -08:00
Teddy Reed
b419c79791
[ Fix #386 ] This is a hack to fix Ubuntu unwinding
2014-11-12 17:12:37 -07:00
Mike Arpaia
10a4430f00
Merge pull request #419 from facebook/pretty-print-unicode
...
Support for multi-byte characters in osqueryi results
2014-11-12 16:51:48 -05:00
mike@arpaia.co
a8832482b3
implementation for #360
2014-11-12 16:51:14 -05:00
mike@arpaia.co
b423286297
failing test
2014-11-12 16:30:18 -05:00
Mike Arpaia
5f5b916ba9
Merge pull request #418 from facebook/homebrew-formula
...
including the formula file
2014-11-12 16:19:16 -05:00
mike@arpaia.co
b8566f557e
including the formula file
2014-11-12 16:18:27 -05:00
Mike Arpaia
40f060a1c0
Merge pull request #417 from facebook/osx-crap
...
only use most active version of a dependency
2014-11-12 16:08:43 -05:00
mike@arpaia.co
019e9e25de
only use most active version of a dependency
2014-11-12 16:07:31 -05:00
Teddy Reed
a5ef6a1f70
Merge pull request #414 from theopolis/feature-use-sqltypes
...
Use SQLite types
2014-11-12 11:07:50 -08:00
Teddy Reed
0d8b9d3eaa
Use SQLite types
2014-11-12 11:07:24 -08:00