[Bro] hyperscan and bro

Seth Hall seth at icir.org
Thu Nov 17 06:18:57 PST 2016


> On Nov 15, 2016, at 4:36 AM, erik clark <philosnef at gmail.com> wrote:
> 
> Anyone looked into doing hyperscan for pattern matching in Bro? The current pattern matching is very MEH, and it makes me wonder if it might be possible to use hyperscan and a plugin to do more intense pattern matching.

Is there something in particular that you are unable to do that hyperscan would enable?

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/




More information about the Bro mailing list