Sorry, you need to enable JavaScript to visit this website.


Release Date: 
Jun 08, 2016


Hyperscan Snort Patch

Hyperscan integration for Snort

This patch adds Hyperscan acceleration support for a number of pattern matching tasks in Snort

It uses Hyperscan in three modules within Snort:

  1. A multi-pattern (MPSE) literal matcher, called "hyperscan".
  2. A faster single-pattern content string matcher, replacing the Boyer-Moore approach used by default.
  3. A prefilter for PCRE, where Hyperscan is used as a prefilter check for regex options before PCRE is run. Expressions that are expensive to evaluate in PCRE may be avoided entirely depending on the result of the prefilter.