[Snort-devel] Re: libsplay
dr at ...40...
Tue Oct 17 15:41:23 EDT 2000
Hi... sorry for the delay in getting back to you.
I was trying to wrap up some code for you last night,
but late in the day a couple of items (including a surprise
suspected DDOS client at a customer) popped up on
me and kept me busy until the wee hours. I'll try to
wrap the code into a library form for you tonight.
If you use the versions from the defragger as a base
the library will drop in nicely. Essentially, the only
addition will be the passing of a compare function
pointer (*compare_func()) to the splay and other
functions to deal with arbitrary tree node contents.
The library user may have to provide a couple of other
functions (potentially for free()'ing a node) but none
that should affect your code now imho. I'll spend some
time on it and snort in general tonight.
On Mon, 16 Oct 2000, you wrote:
> How is the work on libsplay coming? I've been thinking I need to modify
> the tcp stream reassembly code so that it at least uses a hash, but if
> the splay tree library is going to be available soon, I would like to
> write to that instead.
> On Wed, 20 Sep 2000, Dragos Ruiu wrote:
> > I need a generic spaly tree library to avoid some code bloat.
> > Any requests or contributions in this area are welcome...
> > Hmmm.... what are good library features I've seen? Clever
> > function interface ideas welcome.
> > Bill mentioned the idea first and I've been thinking I need one
> > for a while...
> > cheers,
> > --dr
> > --
> > Dragos Ruiu <dr at ...9...> dursec.com ltd. / kyx.net - we're from the future
> > gpg/pgp key on file at wwwkeys.pgp.net
Dragos Ruiu <dr at ...9...> dursec.com ltd. / kyx.net - we're from the future
gpg/pgp key on file at wwwkeys.pgp.net
More information about the Snort-devel