[Snort-devel] search algorithm performance

Ryan Jordan ryan.jordan at ...402...
Mon Jan 25 10:32:20 EST 2010


Jules,

Have you checked out the Rule Profiling stuff? It might save you a lot of
time. Directions are in doc/README.PerfProfiling.

-Ryan

On Mon, Jan 25, 2010 at 5:49 AM, Jules Pagna Disso <jules at ...3073...>wrote:

> hi there,
>
> I would like to work out the exact time Snort spend searching through the
> rules. Would this be possible? if Yes where in the code can I add my
> counters. If it is not possible would you tell me why?
>
> is there a better way to achieve this?
>
>
> Thanks,
> Jules
>
>
> ------------------------------------------------------------------------------
> Throughout its 18-year history, RSA Conference consistently attracts the
> world's best and brightest in the field, creating opportunities for
> Conference
> attendees to learn about information security's most important issues
> through
> interactions with peers, luminaries and emerging and established companies.
> http://p.sf.net/sfu/rsaconf-dev2dev
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20100125/732dca3d/attachment.html>


More information about the Snort-devel mailing list