Re: Studying Snort

[Kiet Tran <kietstar () gmail com>]

Hi Thamer;

Snort calls a library, PCRE, to resolve the regular expression (RegEx)
idioms. The idea of using GPU as an RegEx offloading engine can be
implemented from the inside of libpcre source code.

You can prove my claim by putting debugging information inside
libpcre and recompiling for your system, then run Snort to see.

Have fun and success on your quest.

Regards,
Kiet



On 4/9/2012 11:58 AM, Thamer hateM wrote:
> Hi, my name is Thamer Hatem and I'm a undergraduate computer engineer
> student, for my graduation work I need to do a research about anything
> I would like, so I decide to do study about Snort, I want to change
> snort to act like an IPS using the GPU, is there anything like this in
> study by Snort team? and I was looking at source code trying to find
> out where is the string matching algorithm but I wasn't able to. I
> would appreciate if you can show me any directions.
>
> Thank you very much for your time.
>
> HATEM, Thamer;
>
> ------------------------------------------------------------------------------
> For Developers, A Lot Can Happen In A Second.
> Boundary is the first to Know...and Tell You.
> Monitor Your Applications in Ultra-Fine Resolution. Try it FREE!
> http://p.sf.net/sfu/Boundary-d2dvs2
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort news!


------------------------------------------------------------------------------
For Developers, A Lot Can Happen In A Second.
Boundary is the first to Know...and Tell You.
Monitor Your Applications in Ultra-Fine Resolution. Try it FREE!
http://p.sf.net/sfu/Boundary-d2dvs2
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!