From: Pablo Neira <pablo@eurodev.net>
To: Thomas Graf <tgraf@suug.ch>
Cc: Jamal Hadi Salim <hadi@cyberus.ca>,
Patrick McHardy <kaber@trash.net>,
netdev@oss.sgi.com
Subject: Re: [RFC] string matching ematch
Date: Thu, 27 Jan 2005 21:17:39 +0100 [thread overview]
Message-ID: <41F94C63.7010800@eurodev.net> (raw)
In-Reply-To: <20050126150714.GL31837@postel.suug.ch>
Hi Thomas,
Thomas Graf wrote:
>I'd like to discuss the string matching ematch, I don't care about the
>algorithm used but rather whether to make it stateful, match over
>fragments, etc. I attached a simple stateless string matching ematch
>using the Knuth-Morris-Pratt algorithm as a starting point.
>
>
I've posted something similar after christmas in netfilter-devel[1].
It's fragment aware, actually my implementation uses boyer-moore to look
for matches in the payload, and it uses brute force together with
Rusty's skb_iter stuff to look for matches on the edges. The worst case
is not that bad for small patterns. Anyway I'm still looking for
alternatives solutions. BTW, Harald Welte is also interested in this stuff.
I'll give it more spins these days since I've got some spare time. I'll
also have a look at your work. I think that we could join efforts and
push something good, thoughts?
References:
https://lists.netfilter.org/pipermail/netfilter-devel/2005-January/018034.html
--
Pablo
next prev parent reply other threads:[~2005-01-27 20:17 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-01-26 15:07 [RFC] string matching ematch Thomas Graf
2005-01-26 21:03 ` David S. Miller
2005-01-26 21:41 ` Thomas Graf
2005-01-26 23:26 ` David S. Miller
2005-01-27 14:20 ` Thomas Graf
2005-01-27 20:17 ` Pablo Neira [this message]
2005-01-27 20:51 ` Thomas Graf
2005-01-31 13:59 ` jamal
2005-02-01 1:26 ` Pablo Neira
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=41F94C63.7010800@eurodev.net \
--to=pablo@eurodev.net \
--cc=hadi@cyberus.ca \
--cc=kaber@trash.net \
--cc=netdev@oss.sgi.com \
--cc=tgraf@suug.ch \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).