Snort mailing list archives

Re: PATCH: more compact ac-bnfa trans list


From: Russ Combs <rcombs () sourcefire com>
Date: Wed, 27 Oct 2010 17:30:14 -0400

Thanks for submitting the patch.  It certainly looks interesting.  I'm going
to bug this internally so it can fall into the standard development cycle.

Do you have any supporting data I can add to this?

Russ

On Wed, Oct 27, 2010 at 6:25 AM, Fingle Nark <finglenark () gmail com> wrote:

This patch reduces the size of the ac-bnfa matcher's compact trans list by
about 25% (with the standard snort ruleset) by storing the state number for
match states only.

In my tests it makes no measurable difference to matching speed.


~~finglenark


------------------------------------------------------------------------------
Nokia and AT&T present the 2010 Calling All Innovators-North America
contest
Create new apps & games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in
marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store
http://p.sf.net/sfu/nokia-dev2dev
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel


------------------------------------------------------------------------------
Nokia and AT&T present the 2010 Calling All Innovators-North America contest
Create new apps & games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel

Current thread: