[Snort-devel] How the rules are organized for packets matching?

Peter Peng peterpy8 at ...2499...
Sat Jul 30 23:22:07 EDT 2011


We aim to adopt the GPU using OpenCL to accelerate the pcre_exec() operation. How the rules are organized for packets matching? As far as i see, the pcre_exec is called by function ruleMatch(void *p, Rule *rule), in which only one rule will be used to test for the packet. I wonder there is a loop calling ruleMatch() with different rules? Thx. 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20110731/fb4cf60c/attachment.html>


More information about the Snort-devel mailing list