Snort mailing list archives
Re: PATCH: more compact ac-bnfa trans list
From: Russ Combs <rcombs () sourcefire com>
Date: Wed, 27 Oct 2010 17:30:14 -0400
Thanks for submitting the patch. It certainly looks interesting. I'm going to bug this internally so it can fall into the standard development cycle. Do you have any supporting data I can add to this? Russ On Wed, Oct 27, 2010 at 6:25 AM, Fingle Nark <finglenark () gmail com> wrote:
This patch reduces the size of the ac-bnfa matcher's compact trans list by about 25% (with the standard snort ruleset) by storing the state number for match states only. In my tests it makes no measurable difference to matching speed. ~~finglenark ------------------------------------------------------------------------------ Nokia and AT&T present the 2010 Calling All Innovators-North America contest Create new apps & games for the Nokia N8 for consumers in U.S. and Canada $10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store http://p.sf.net/sfu/nokia-dev2dev _______________________________________________ Snort-devel mailing list Snort-devel () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-devel
------------------------------------------------------------------------------ Nokia and AT&T present the 2010 Calling All Innovators-North America contest Create new apps & games for the Nokia N8 for consumers in U.S. and Canada $10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store http://p.sf.net/sfu/nokia-dev2dev
_______________________________________________ Snort-devel mailing list Snort-devel () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-devel
Current thread:
- PATCH: more compact ac-bnfa trans list Fingle Nark (Oct 27)
- Re: PATCH: more compact ac-bnfa trans list Russ Combs (Oct 27)
- Re: PATCH: more compact ac-bnfa trans list Fingle Nark (Oct 28)
- Re: PATCH: more compact ac-bnfa trans list Russ Combs (Oct 27)