[Snort-devel] Unused code?

Steven Sturges steve.sturges at ...402...
Mon Oct 27 16:42:58 EDT 2008


It determined whether the rule had been evaluated previously
(within the same packet) -- intended to improve performance.

That is handled differently code-wise in ac-bnfa.

snort user wrote:
> Thanks for the reply.
> Can you please explain what the function did when MWM was used?
> 
> On Mon, Oct 27, 2008 at 4:27 PM, Steven Sturges
> <steve.sturges at ...402...> wrote:
>> That was use when Wu-Manber pattern matcher was in Snort.
>>
>> When that was removed, the non-default cases were removed.
>> The function was kept with the notion that it might be needed
>> in the future for other pattern match engines.
>>
>> Cheers
>>
>> snort user wrote:
>>> Hello and greetings !
>>>
>>> In snort 2.8 release --
>>>
>>> In fpdetect.c, there are calls to function, mpseSetRuleMask but the
>>> function does not seem to be doing much.
>>> Can anyone explain the reason for this function?
>>>
>>> Thanks ahead for any info.
>>>
>>>
>>>
>>> void mpseSetRuleMask ( void *pvoid, BITOP * rm )
>>> {
>>>   MPSE * p = (MPSE*)pvoid;
>>>
>>>   switch( p->method )
>>>    {
>>>      default:
>>>        return ;
>>>    }
>>>
>>>
>>> }
>>>
>>> -------------------------------------------------------------------------
>>> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
>>> Build the coolest Linux based applications with Moblin SDK & win great prizes
>>> Grand prize is a trip for two to an Open Source event anywhere in the world
>>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
>>> _______________________________________________
>>> Snort-devel mailing list
>>> Snort-devel at lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/snort-devel
>>>
> 




More information about the Snort-devel mailing list