Slashdot Mirror


Compiling Snort Rules

Sergei Egorov writes "Good people at Fidelis Security Systems developed SNORTRAN, an optimizing compiler for Snort rules. By combining several compilation techniques, SNORTRAN is able to translate a set of Snort rules into a high-performance intrusion detection engine. SNORTRAN-generated engines are 4 to 6 times faster than Snort's own detection engine; this translates into 3 to 5 overall speedup factor for a complete Snort system (benchmarks are here)."

1 of 10 comments (clear)

  1. Snort ? by mystran · · Score: 0, Flamebait

    Whatta heck is snort anyway ?

    --
    Software should be free as in speech, but if we also get some free beer, all the better.