These forums have been switched to read-only mode as of March 1, 2011. The content that already existed here will be retained for posterity. No new posts will be accepted here. For more information and for the address of the new forums, see this page: http://snort.org/community/groups
Forums → Snort Development →

pcre dfa

Subscribe to pcre dfa 3 post(s), 2 voice(s)

 
08 Feb, 2010 11:39 PM
Avatar xwang 1 post(s)

Empty_starEmpty_starEmpty_starEmpty_starEmpty_star

Hi there,
I noticed that the pcre plugin is using pcre_exec(), is there any consideration between choosing pcre_exec() and pcre_dfa_exec()? Also any thought about using the partial match feature provided in the pcre library(PCRE_PARTIAL)?

Thanks!
 
04 Mar, 2010 10:14 AM
Avatar eboev 3 post(s)

Empty_starEmpty_starEmpty_starEmpty_starEmpty_star

Hello! I can’t find the code of pcre_exec. Only declaration:
PCRE_EXP_DECL int pcre_exec(const pcre *, const pcre_extra *, PCRE_SPTR,
int, int, int, int *, int); in pcre.h
Where the pcre_exec() code?
 
04 Mar, 2010 02:35 PM
Avatar eboev 3 post(s)

Empty_starEmpty_starEmpty_starEmpty_starEmpty_star

I found: pcre.dll :)
Forums → Snort Development →

©2009 Snort and Sourcefire are registered trademarks of Sourcefire, Inc. All rights reserved. Terms of Use | Privacy Policy