Pattern matching vs Regular expression

Vern Paxson vern at icir.org
Mon May 27 08:46:42 PDT 2002


> I have just read some source code, and found In snort, an implementation
> of a Aho-Corasick like Boyer-Moore Style Searching Algorthim has given,
> it allows multiple patterns to be searched for in a packet at the same
> time.and the snort content rules are placed in a Aho-Corasick like keyword
> search tree that overlaps similar prefixes.

Right - we're aiming for something along those lines, though a bit different.

		Vern



More information about the Bro mailing list