roadmap of PFAC

3 views
Skip to first unread message

Lung-Sheng Chien

unread,
Mar 9, 2011, 8:15:47 PM3/9/11
to pfacForum
I think we can collect ideas to future release.
so far, we still are doing
1) AC algorithm on GPU, and compare its performance to PFAC.
2) some type of regular expression
3) space-effiicient version

and MUST-HAVE features of pattern file include
1) handle escape character
2) carriage return of windows system
3) full set of regular expression

What are candidates in next release r1.1?

Cheng-Hung Lin

unread,
Mar 9, 2011, 8:37:34 PM3/9/11
to pfac...@googlegroups.com
For handling escape character, Kaiba has given us a function "fgetc_ext".We can integrate it to our library.


2011/3/10 Lung-Sheng Chien <lungshe...@gmail.com>



--
Sincerely,
Cheng-Hung Lin (林政宏)


Lung-Sheng Chien

unread,
Mar 9, 2011, 8:57:47 PM3/9/11
to pfacForum
I know, but I found that
\?
\e
\E
\[
\{

are also accepted in C/C++,
so what is full set of escape sequence in regular eppression?

We should check this, kaiba does not give me an answer.



On 3月10日, 上午9時37分, Cheng-Hung Lin <bruceli...@gmail.com> wrote:
> For handling escape character, Kaiba has given us a function "fgetc_ext".We
> can integrate it to our library.
>
> 2011/3/10 Lung-Sheng Chien <lungshengch...@gmail.com>

Cheng-Hung Lin

unread,
Mar 9, 2011, 9:24:54 PM3/9/11
to pfac...@googlegroups.com
Because Snort adopts PCRE, we should refer to http://perldoc.perl.org/perlre.html for all escape sequences.

Lung-Sheng Chien

unread,
Mar 9, 2011, 9:45:48 PM3/9/11
to pfacForum
os what is the full set of escape sequence that we should support?
Should we support following sequence?

\x{263a} long hex char (example: Unicode SMILEY)
\N{name} named Unicode character
\N{U+263D} Unicode character (example: FIRST QUARTER
\l lowercase next char (think vi)
\u uppercase next char (think vi)
\L lowercase till \E (think vi)
\U uppercase till \E (think vi)
\E end case modification (think vi)
\Q quote (disable) pattern metacharacters till \E



On 3月10日, 上午10時24分, Cheng-Hung Lin <bruceli...@gmail.com> wrote:
> Because Snort adopts PCRE, we should refer tohttp://perldoc.perl.org/perlre.htmlfor all escape sequences.
> Cheng-Hung Lin (林政宏)- 隱藏被引用文字 -
>
> - 顯示被引用文字 -
Reply all
Reply to author
Forward
0 new messages