mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
26 lines
949 B
Plaintext
26 lines
949 B
Plaintext
DETECTION ENGINE:
|
|
- create a detection_engine_ctx for storing the sig list, packet entry point, other stuff
|
|
- many group heads seem to have the same number of sigs. See if we can save memory by detecting similars... the savings are in the pattern matcher.
|
|
-> this is done, and works. However it can be taken further. It's not the group heads that should be compared, but the mpm contexts...
|
|
|
|
- implement flow as a prefilter
|
|
- implement protocol as a prefilter
|
|
- implement src and dst ports as prefilters
|
|
|
|
- speed up initialization with many address groups present
|
|
|
|
WU-MANBER:
|
|
- Consider using dynamic/variable hash sizes. A wm_ctx is quite big (512kb) even for small pattern sets.
|
|
|
|
ADDRESSES:
|
|
- support [1.2.3.4,2.3.4.5] notation: cleanup (memory!) and unittest
|
|
|
|
MAIN:
|
|
- move packet preallocation into it's own function
|
|
- create a cleanup function
|
|
|
|
|
|
CUSTOM LOGGING:
|
|
- idea: add a logging module that can be told to output things based on flowvars
|
|
|