Groups | Search | Server Info | Keyboard shortcuts | Login | Register


Groups > comp.compilers > #144

Re: Inverse grep

Path csiph.com!x330-a1.tempe.blueboxinc.net!feeder1.hal-mli.net!news.glorb.com!news-out.readnews.com!news-xxxfer.readnews.com!news.misty.com!news.iecc.com!nerds-end
From Chris F Clark <cfc@shell01.TheWorld.com>
Newsgroups comp.compilers
Subject Re: Inverse grep
Date Sun, 12 Jun 2011 14:16:30 -0400
Organization The World Public Access UNIX, Brookline, MA
Lines 19
Sender news@iecc.com
Approved comp.compilers@iecc.com
Message-ID <11-06-018@comp.compilers> (permalink)
References <11-06-015@comp.compilers>
NNTP-Posting-Host news.iecc.com
X-Trace gal.iecc.com 1307943384 89833 64.57.183.58 (13 Jun 2011 05:36:24 GMT)
X-Complaints-To abuse@iecc.com
NNTP-Posting-Date Mon, 13 Jun 2011 05:36:24 +0000 (UTC)
Keywords lex, comment
Posted-Date 13 Jun 2011 01:36:24 EDT
X-submission-address compilers@iecc.com
X-moderator-address compilers-request@iecc.com
X-FAQ-and-archives http://compilers.iecc.com
Xref x330-a1.tempe.blueboxinc.net comp.compilers:144

Show key headers only | View raw


Actually, most "intrusion detection systems" (IDSes, e.g. Snort) and
virus scanners (e.g.  ClamAV) are essentially just that.  Given a
packet, the contents of the packet are inspected to see which if any
patterns are matched and if so, the relevant pattern [numbers] are
reported.  Generally, the technology used does not actually build a
single pattern from the | of the patterns and run that FA, because
there aren't known efficient solutions to that problem for large
pattern sets.  One either suffers space or time explosion to do so.

Hope this helps,
-Chris

******************************************************************************
Chris Clark                  email: christopher.f.clark@compiler-resources.com
Compiler Resources, Inc.  Web Site: http://world.std.com/~compres
23 Bailey Rd                 voice: (508) 435-5016
Berlin, MA  01503 USA      twitter: @intel_chris
[On machines with gigabyte memories, does the space explosion for
large patterns still matter? -John]

Back to comp.compilers | Previous | NextPrevious in thread | Next in thread | Find similar


Thread

Inverse grep glen herrmannsfeldt <gah@ugcs.caltech.edu> - 2011-06-08 23:01 +0000
  Re: Inverse grep Chris F Clark <cfc@shell01.TheWorld.com> - 2011-06-12 14:16 -0400
    Re: Inverse grep Tony Finch <dot@dotat.at> - 2011-06-13 17:48 +0100
  Re: Inverse grep torbenm@diku.dk (Torben Ægidius Mogensen) - 2011-06-14 11:16 +0200
    Re: Inverse grep anton@mips.complang.tuwien.ac.at (Anton Ertl) - 2011-06-15 12:28 +0000
    Matching very large patterns, was Re: Inverse grep Chris F Clark <cfc@shell01.TheWorld.com> - 2011-06-19 21:45 -0400
      Re: Matching very large patterns, was Re: Inverse grep glen herrmannsfeldt <gah@ugcs.caltech.edu> - 2011-06-20 04:52 +0000

csiph-web