Snort mailing list archives

Re: Snort searching algorithm


From: Y M <snort () outlook com>
Date: Fri, 9 May 2014 20:25:15 +0000

From the documentation: http://manual.snort.org/node16.html#SECTION00313000000000000000. Look for "config detection: 
[search-method <method>]", this should help.
YM

Date: Fri, 9 May 2014 14:32:27 -0400
From: bontupalliv1 () udayton edu
To: snort-users () lists sourceforge net
Subject: [Snort-users] Snort searching algorithm

Dear snort users,

Could anyone please tell me what pattern matching algorithm(s) snort use in detection engine for detecting malicious 
packet content against its rules content.




------------------------------------------------------------------------------
Is your legacy SCM system holding you back? Join Perforce May 7 to find out:
• 3 signs your SCM is hindering your productivity
• Requirements for releasing software faster
• Expert tips and advice for migrating your SCM now
http://p.sf.net/sfu/perforce
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!                                        
  
------------------------------------------------------------------------------
Is your legacy SCM system holding you back? Join Perforce May 7 to find out:
&#149; 3 signs your SCM is hindering your productivity
&#149; Requirements for releasing software faster
&#149; Expert tips and advice for migrating your SCM now
http://p.sf.net/sfu/perforce
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: