Snort mailing list archives

Re: search algorithm performance


From: Jules Pagna Disso <jules () visionintel com>
Date: Mon, 25 Jan 2010 15:43:33 +0000

Thanks Ryan,

I will check it out.

Jules

2010/1/25 Ryan Jordan <ryan.jordan () sourcefire com>

Jules,

Have you checked out the Rule Profiling stuff? It might save you a lot of
time. Directions are in doc/README.PerfProfiling.

-Ryan

On Mon, Jan 25, 2010 at 5:49 AM, Jules Pagna Disso <jules () visionintel com>wrote:

hi there,

I would like to work out the exact time Snort spend searching through the
rules. Would this be possible? if Yes where in the code can I add my
counters. If it is not possible would you tell me why?

is there a better way to achieve this?


Thanks,
Jules


------------------------------------------------------------------------------
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for
Conference
attendees to learn about information security's most important issues
through
interactions with peers, luminaries and emerging and established
companies.
http://p.sf.net/sfu/rsaconf-dev2dev
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel



------------------------------------------------------------------------------
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel

Current thread: