Sorry, you need to enable JavaScript to visit this website.

Feedback

Your feedback is important to keep improving our website and offer you a more reliable experience.

详情

发行日期: 
Jan 17, 2017
版本: 
v3
类型: 
Hyperscan Snort Patch

Hyperscan integration for Snort 2.9.8.2

This patch adds Hyperscan acceleration support for a number of pattern matching tasks in Snort (versions 2.9.8.2 and 2.9.9.0 tested).

It uses Hyperscan in three modules within Snort:

  1. A multi-pattern (MPSE) literal matcher, called "hyperscan".
  2. A faster single-pattern content string matcher, replacing the Boyer-Moore approach used by default.
  3. A prefilter for PCRE, where Hyperscan is used as a prefilter check for regex options before PCRE is run. Expressions that are expensive to evaluate in PCRE may be avoided entirely depending on the result of the prefilter.

This release fixes a bug where Hyperscan was not correctly protecting its scratch data structures during a reload (e.g. on receipt of a HUP signal).

Project: