Squashed commit of the following:
commit
f1e74ea89089c180ee2ed823daa009d19954b922
Author: russ <rucombs@cisco.com>
Date: Sat Jun 29 17:49:25 2019 -0400
profiler: convert ips options to use optional profiles
Avoid the perf hit and double counting (with rule_eval) for detection
options with normal builds. Not deleted since it could be helpful
to see individual options in some cases despite the issues. Due to a
bug, this is commented out but should be made a build option once
fixed.
commit
b06b0aebed47a2f8676346e4a7c3dcb2dd522f75
Author: russ <rucombs@cisco.com>
Date: Thu Jun 27 10:28:44 2019 -0400
profiler: split out paf from stream_tcp
PAF (Protocol Aware Flushing) is the delegation by stream_tcp of flush point
determination by service inspectors which encapsulate PDU analysis. This
change splits out the scanning portion of the PAF interface. Reassembly
will be dealt with later. http_inspect will be the biggest contributor to
PAF since it front-loads considerable to the scanning phase.
commit
9dfdc6c399eddd925185e4a0e1dbeec1df91ba5d
Author: russ <rucombs@cisco.com>
Date: Wed Jun 26 21:36:37 2019 -0400
profiler: track DAQ message receives and finalizes
commit
8ec66593d58130bca89071a2d4a2a0429af57223
Author: russ <rucombs@cisco.com>
Date: Wed Jun 26 17:28:57 2019 -0400
profiler: eliminate deep profiling
Deep profiling creates broken totals, impacts performance, and is not a
good substitute for actual profiling with gprof etc. Furthermore, shallow
profiling (ie a single bucket per component and subsystem) provides enough
information to tune Snort effectively.