Pattern matching vs Regular expression

Ashley Thomas athomas at unity.ncsu.edu
Fri May 24 12:59:20 PDT 2002


That's really nice.

I was trying to do a comparison of Bro with Snort
trying to compare the good and not so good
qualities of each..

I'll be tuned for all news :))

thanks



On Thu, 23 May 2002, Vern Paxson wrote:

> > Apart from that speed-wise is reg-exp matching still much faster than
> > simple sring matching like Bayer-moore or similar algos ??
>
> Regular expression matching is comparable in speed to simple string
> matching, and (generally) slower than Boyer-Moore *for single strings*.
> Where it can gain performance is that it can efficiently match a lot of
> strings in parallel.  Robin Sommer & I are now working on using this to
> significantly enhance Bro's signature-matching capabilities - stay tuned.
>
> 		Vern
>




More information about the Bro mailing list