[Bro] hyperscan and bro
seth at icir.org
Thu Nov 17 06:18:57 PST 2016
> On Nov 15, 2016, at 4:36 AM, erik clark <philosnef at gmail.com> wrote:
> Anyone looked into doing hyperscan for pattern matching in Bro? The current pattern matching is very MEH, and it makes me wonder if it might be possible to use hyperscan and a plugin to do more intense pattern matching.
Is there something in particular that you are unable to do that hyperscan would enable?
International Computer Science Institute
(Bro) because everyone has a network
More information about the Bro