5:42 p.m.
Dear all,
I have been trying to use hyperscan in a C program.
After couple of days, I was able to compile the program with stream mode.
However, the program is only working with on PCRE rule.
I have used the PCRE rules from the snort ruleset and with simple rules
also.
Could anyone please advice me on this fact. If someone can attach some
rule which they have tried may help me to check my program.
Thank you very much and best regards.
Rajitha L. TENNEKOON
9:59 a.m.
Hi Rajitha,
Could you give us a bit more background on what your program is using Hyperscan to do?
I'm not sure I follow your question.
It sounds like you would like to use Hyperscan to match some sort of more complex pattern,
like a Snort rule. If this is the case, then your application will have to handle the
other predicates in the Snort rule language itself -- Hyperscan is solely a regular
expression matcher. You could, of course, use Hyperscan as a building block for matching
the literal and regex portions of the rule language.
Best regards,
Justin
-----Original Message-----
From: Hyperscan [mailto:hyperscan-bounces@lists.01.org] On Behalf Of
Rajitha L. TENNEKOON
Sent: Monday, February 29, 2016 5:43 PM
To: hyperscan(a)lists.01.org
Subject: [Hyperscan] Regarding the PCRE rules
Dear all,
I have been trying to use hyperscan in a C program.
After couple of days, I was able to compile the program with stream mode.
However, the program is only working with on PCRE rule.
I have used the PCRE rules from the snort ruleset and with simple rules also.
Could anyone please advice me on this fact. If someone can attach some rule
which they have tried may help me to check my program.
Thank you very much and best regards.
Rajitha L. TENNEKOON
2393
days inactive
2393
days old
1 comments
2 participants
participants (2)
-
Rajitha L. TENNEKOON -
Viiret, Justin