Mark Stemm 6a4e4eaa4f Finish moving token bucket impl from falco to libs ...

It took a while, but we remembered to finish moving the token_bucket
from falco engine to libs. There were 2 copies for a while.

This brings over one change to libs--to have an optional timer
function.

Co-authored-by: Leonardo Grasso <me@leonardograsso.com>
Co-authored-by: Loris Degioanni <loris@sysdig.com>
Signed-off-by: Mark Stemm <mark.stemm@gmail.com>

2021-11-12 18:27:59 +01:00

..

lua

update(userspace/engine): support jsonpointer escaping in rule parser

2021-11-11 18:36:21 +01:00

banned.h

feat(userspace): Add BAN_ALTERNATIVE macro to banned.h.

2020-02-13 18:01:39 +01:00

CMakeLists.txt

Finish moving token bucket impl from falco to libs

2021-11-12 18:27:59 +01:00

config_falco_engine.h.in

update: license headers

2019-10-08 16:02:26 +02:00

falco_common.cpp

Use factories to provide filters/formatting

2021-10-12 17:59:38 +02:00

falco_common.h

Use factories to provide filters/formatting

2021-10-12 17:59:38 +02:00

falco_engine_version.h

Update falco engine checksum

2021-10-12 17:59:38 +02:00

falco_engine.cpp

Add a default ruleset version of evttypes_for_ruleset

2021-10-12 17:59:38 +02:00

falco_engine.h

Add a default ruleset version of evttypes_for_ruleset

2021-10-12 17:59:38 +02:00

falco_utils.cpp

new: hardware_concurrency helper

2020-07-07 13:42:09 +02:00

falco_utils.h

new(userspace/engine): likely/unlikely macros in utils

2021-04-19 16:56:53 +02:00

formats.cpp

falco_formats only formats events now, no lua bindings

2021-10-12 17:59:38 +02:00

formats.h

falco_formats only formats events now, no lua bindings

2021-10-12 17:59:38 +02:00

json_evt.cpp

Make json_event_formatter a gen_event_formatter

2021-10-12 17:59:38 +02:00

json_evt.h

Make json_event_formatter a gen_event_formatter

2021-10-12 17:59:38 +02:00

lpeg.h

update: license headers

2019-10-08 16:02:26 +02:00

lyaml.h

update: license headers

2019-10-08 16:02:26 +02:00

OWNERS

docs: specify labels that apply to each area

2019-09-16 10:11:25 +02:00

rules.cpp

Add ability to check if field is defined

2021-10-12 17:59:38 +02:00

rules.h

Add ability to check if field is defined

2021-10-12 17:59:38 +02:00

ruleset.cpp

Don't track event "tags" i.e. event types in rulesets

2021-10-12 17:59:38 +02:00

ruleset.h

Don't track event "tags" i.e. event types in rulesets

2021-10-12 17:59:38 +02:00