[PATCH 1/4] RFC: fast string matching infrastrure for netfilter

Pablo Neira pablo at eurodev.net
Sun Jan 9 23:23:09 CET 2005


Hi,

I've finished a first usable version of a infrastructure to look for 
matchings in a packet. Features:

* A library consisting in three public functions: constructor, 
destructor and searching.
* Boyer-moore algorithm to perform fast matchings.
* Brute force search on the edges of two fragments to look for 
fragmented matches, that is O(m) searchs where m is the size of the 
pattern, it's not that bad for small pattern I think. It's fragment 
aware by means of rusty's skb_iter functions.

Comments welcome.

--
Pablo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: string-match.patch
Type: text/x-patch
Size: 7683 bytes
Desc: not available
Url : /pipermail/netfilter-devel/attachments/20050109/3b8f50b4/string-match.bin


More information about the netfilter-devel mailing list