These benchmarks were performed with Vendor IPS signatures that unfortunately can’t be distributed, and I’m fairly sure they were performed using an internal benchmarking tool. Certainly (if you’re scanning network traffic in a PCAP file) it’s possible to perform simple single-threaded benchmarks with the pcapscan example code we distribute with Hyperscan:
We are currently working on a more sophisticated benchmarking tool (derived from our internal tools) that will be distributed with future releases and will allow you to collect more data and easily do multi-threaded benchmarking. I’d expect this to ship with the next Hyperscan release, and we’ll probably make it available even earlier.
I read https://networkbuilders.intel.com/docs/1645-Hyperscan-Performance-Benchmark-on-Intel-Xeon-Processors.pdf, where the excellent results of hyperscan are show cased.
I was wondering whether the code and rules used to perform the benchmark are accessible.
This electronic message may contain proprietary and confidential information of Verint Systems Inc., its affiliates and/or subsidiaries.
The information is intended to be for the use of the individual(s) or
entity(ies) named above. If you are not the intended recipient (or authorized to receive this e-mail for the intended recipient), you may not use, copy, disclose or distribute to anyone this message or any information contained in this message. If you have received this electronic message in error, please notify us by replying to this e-mail.