Snort mailing list archives
Re: Theoretical questions about snort
From: sekure <sekure () gmail com>
Date: Thu, 23 Dec 2004 11:47:19 -0500
For starters, check out: http://www.sourcefire.com/products/library.html On Thu, 23 Dec 2004 17:34:14 +0100 (MET), mosquitooth () gmx net <mosquitooth () gmx net> wrote:
so, is there a white paper (or a book) out there, that covers especially the internal programming and behaviour of snort?
...
So, how is it done? How is Snort able to check for so many rules per packet in such a small time? Is there any trick behind it?
------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://productguide.itmanagersjournal.com/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Theoretical questions about snort mosquitooth (Dec 23)
- Re: Theoretical questions about snort sekure (Dec 23)
- Re: Theoretical questions about snort Matt Kettler (Dec 23)
- Re: Theoretical questions about snort Wes Young (Dec 23)