[Snort-devel] Re: libsplay

Martin Roesch roesch at ...48...
Wed Oct 25 02:11:50 EDT 2000


Any progress on libsplay?  I can think of some good uses for it... :)

   -Marty

Dragos Ruiu wrote:
> 
> Hi... sorry for the delay in getting back to you.
> I was trying to wrap up some code for you last night,
> but late in the day a couple of items (including a surprise
> suspected DDOS client at a customer) popped up on
> me and kept me busy until the wee hours.  I'll try to
> wrap the code into a library form for you tonight.
> If you use the versions from the defragger as a base
> the library will drop in nicely.  Essentially, the only
> addition will be the passing of a compare function
> pointer (*compare_func()) to the splay and other
> functions to deal with arbitrary tree node contents.
> 
> The library user may have to provide a couple of other
> functions (potentially for free()'ing a node)  but none
> that should affect your code now imho. I'll spend some
> time on it and snort in general tonight.
> 
> cheers,
> --dr
> 
> On Mon, 16 Oct 2000, you wrote:
> > Dragos,
> >
> > How is the work on libsplay coming?  I've been thinking I need to modify
> > the tcp stream reassembly code so that it at least uses a hash, but if
> > the splay tree library is going to be available soon, I would like to
> > write to that instead.
> >
> > Thanks,
> > Chris
> >
> > On Wed, 20 Sep 2000, Dragos Ruiu wrote:
> >
> > > I need a generic spaly tree library to avoid some code bloat.
> > > Any requests or contributions in this area are welcome...
> > >
> > > Hmmm.... what are good library features I've seen? Clever
> > > function interface ideas welcome.
> > >
> > > Bill mentioned the idea first and I've been thinking I need one
> > > for a while...
> > >
> > > cheers,
> > > --dr
> > >
> > > --
> > > Dragos Ruiu <dr at ...9...>   dursec.com ltd. / kyx.net - we're from the future
> > > gpg/pgp key on file at wwwkeys.pgp.net
> > >
> --
> Dragos Ruiu <dr at ...9...>   dursec.com ltd. / kyx.net - we're from the future
> gpg/pgp key on file at wwwkeys.pgp.net
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> http://lists.sourceforge.net/mailman/listinfo/snort-devel

-- 
Martin Roesch
roesch at ...48...
http://www.snort.org



More information about the Snort-devel mailing list