Feedback

Your feedback is important to keep improving our website and offer you a more reliable experience.

详情

发行日期: 
Jun 08, 2016
版本: 
v1
类型: 
Hyperscan Snort Patch

Hyperscan integration for Snort 2.9.8.2

This patch adds Hyperscan acceleration support for a number of pattern matching tasks in Snort 2.9.8.2.

It uses Hyperscan in three modules within Snort:

  1. A multi-pattern (MPSE) literal matcher, called "hyperscan".
  2. A faster single-pattern content string matcher, replacing the Boyer-Moore approach used by default.
  3. A prefilter for PCRE, where Hyperscan is used as a prefilter check for regex options before PCRE is run. Expressions that are expensive to evaluate in PCRE may be avoided entirely depending on the result of the prefilter.
Project: