[Snort-devel] search algorithm performance

Jules Pagna Disso jules at ...3073...
Mon Jan 25 10:43:33 EST 2010


Thanks Ryan,

I will check it out.

Jules

2010/1/25 Ryan Jordan <ryan.jordan at ...402...>

> Jules,
>
> Have you checked out the Rule Profiling stuff? It might save you a lot of
> time. Directions are in doc/README.PerfProfiling.
>
> -Ryan
>
> On Mon, Jan 25, 2010 at 5:49 AM, Jules Pagna Disso <jules at ...3073...>wrote:
>
>> hi there,
>>
>> I would like to work out the exact time Snort spend searching through the
>> rules. Would this be possible? if Yes where in the code can I add my
>> counters. If it is not possible would you tell me why?
>>
>> is there a better way to achieve this?
>>
>>
>> Thanks,
>> Jules
>>
>>
>> ------------------------------------------------------------------------------
>> Throughout its 18-year history, RSA Conference consistently attracts the
>> world's best and brightest in the field, creating opportunities for
>> Conference
>> attendees to learn about information security's most important issues
>> through
>> interactions with peers, luminaries and emerging and established
>> companies.
>> http://p.sf.net/sfu/rsaconf-dev2dev
>> _______________________________________________
>> Snort-devel mailing list
>> Snort-devel at lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/snort-devel
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20100125/69226131/attachment.html>


More information about the Snort-devel mailing list