]> git.ipfire.org Git - thirdparty/snort3.git/commit
Merge pull request #1732 in SNORT/snort3 from ~RUCOMBS/snort3:rule_statez to master
authorRuss Combs (rucombs) <rucombs@cisco.com>
Mon, 9 Sep 2019 22:04:40 +0000 (18:04 -0400)
committerRuss Combs (rucombs) <rucombs@cisco.com>
Mon, 9 Sep 2019 22:04:40 +0000 (18:04 -0400)
commit52b6e4e871a4293b49d458550451fee99a14e7f6
treeea9c4c2ac3887e347855640e6f7886799cde4d25
parent0a1627f2cf2b27f2e8ba083270d035a11d635b7f
Merge pull request #1732 in SNORT/snort3 from ~RUCOMBS/snort3:rule_statez to master

Squashed commit of the following:

commit 8f66afffc52f4eecc0436d23359f2eccd3ff18f2
Author: russ <rucombs@cisco.com>
Date:   Wed Sep 4 17:53:18 2019 -0400

    doc: add bullets for $var parameter names and maxXX limits.

commit ff4bca6a07a6b5446332ce0d41272b9299f08998
Author: russ <rucombs@cisco.com>
Date:   Wed Sep 4 16:59:12 2019 -0400

    rule_state: switch from regex parameter names to simpler parsing

    Performance when loading large rule sets (20K+ rules) with regex is unacceptable.
    Switch from regex to $var parameter names with name matching delegated to module.
    In this case, $gid_sid is used for rule_state["1:23456"] type configurations.  As
    you might have guessed, $ indicates parameters with variable names.
doc/params.txt
src/detection/rules.cc
src/framework/module.h
src/framework/parameter.h
src/main/modules.cc
src/managers/module_manager.cc