Texte vergleichen

Finden Sie den Unterschied zwischen zwei Textdateien

Real-time diff

Unified diff

Collapse lines

Highlight change

Syntax highlighting

Onlinewerkzeuge

Diffchecker Desktop The most secure way to run Diffchecker. Get the Diffchecker Desktop app: your diffs never leave your computer!Get Desktop

diff lowmem.cc

Created about a year agoDiff never expires

Lines
Total
Removed

Words
Total
Removed

To continue using this feature, upgrade to Diffchecker Pro View Pricing

136 lines

Lines
Total
Added

Words
Total
Added

To continue using this feature, upgrade to Diffchecker Pro View Pricing

176 lines

//--------------------------------------------------------------------------

// This program is free software; you can redistribute it and/or modify it

// under the terms of the GNU General Public License Version 2 as published

// by the Free Software Foundation. You may not use, modify or distribute

// this program under any other version of the GNU General Public License.

// This program is distributed in the hope that it will be useful, but

// WITHOUT ANY WARRANTY; without even the implied warranty of

// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU

// General Public License for more details.

// You should have received a copy of the GNU General Public License along

// with this program; if not, write to the Free Software Foundation, Inc.,

// 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.

//--------------------------------------------------------------------------

* An abstracted interface to the Multi-Pattern Matching routines,

* thats why we're passing 'void *' objects around.

* Marc A Norton <mnorton@sourcefire.com>

* Updates:

* 3/06 - Added AC_BNFA search

// lowmem.cc author Russ Combs <rucombs@cisco.com>

#include "log/messages.h"

#include "framework/mpse.h"

#include "sfksearch.h"

#include <deque>

using namespace snort;

//-------------------------------------------------------------------------

// "lowmem"

//-------------------------------------------------------------------------

class LowmemMpse : public Mpse

{

private:

KTRIE_STRUCT* obj;

std::deque<int> dbg_match_dq, dbg_match_want_dq;

public:

LowmemMpse(const MpseAgent* agent) : Mpse("lowmem")

{ obj = KTrieNew(0, agent); }

{

obj = KTrieNew(0, agent);

dbg_match_want_dq = std::deque<int>({35, 3, 32, 7, 10, 58, 1});

obj->can_debug = false;

}

~LowmemMpse() override

{ KTrieDelete(obj); }

{

KTrieDelete(obj);

}

int add_pattern(

const uint8_t* P, unsigned m, const PatternDescriptor& desc, void* user) override

{

return KTrieAddPattern(obj, P, m, desc.no_case, desc.negated, user);

int ans = KTrieAddPattern(obj, P, m, desc.no_case, desc.negated, user);

return ans;

}

int prep_patterns(SnortConfig* sc) override

{

return KTrieCompile(sc, obj);

int ans = KTrieCompile(sc, obj);

return ans;

}

int _search(

const uint8_t* T, int n, MpseMatch match,

void* context, int* current_state) override

{

*current_state = 0;

return KTrieSearch(obj, T, n, match, context);

if (dbg_match_dq == dbg_match_want_dq) {

obj->can_debug = true;

}

int ans = KTrieSearch(obj, T, n, match, context);

dbg_match_dq.push_back(ans);

if (dbg_match_dq.size() > dbg_match_want_dq.size()) dbg_match_dq.pop_front();

if (obj->can_debug) {

obj->can_debug = false;

printf("search finished: matches = %d\n", ans);

printf("number of patterns: %d\n", KTriePatternCount(obj));

printf("T = ");

for (int i = 0; i < n; i++) printf("%d ", T[i]);

printf("\n");

}

return ans;

}

int get_pattern_count() const override

{ return KTriePatternCount(obj); }

{

int ans = KTriePatternCount(obj);

return ans;

}

};

//-------------------------------------------------------------------------

// api

//-------------------------------------------------------------------------

static Mpse* lm_ctor(const SnortConfig*, class Module*, const MpseAgent* agent)

{

return new LowmemMpse(agent);

}

static void lm_dtor(Mpse* p)

{

delete p;

}

static void lm_init()

{

KTrie_init_xlatcase();

KTrieInitMemUsed();

}

static void lm_print()

{

if ( !KTrieMemUsed() )

return;

double x = (double)KTrieMemUsed();

LogMessage("[ LowMem Search-Method Memory Used : %g %s ]\n",

(x > 1.e+6) ? x/1.e+6 : x/1.e+3,

(x > 1.e+6) ? "MBytes" : "KBytes");

}

static const MpseApi lm_api =

{

PT_SEARCH_ENGINE,

sizeof(MpseApi),

SEAPI_VERSION,

API_RESERVED,

API_OPTIONS,

"lowmem",

"Keyword Trie (low memory, moderate performance) MPSE",

nullptr,

nullptr

MPSE_BASE,

nullptr,

lm_ctor,

lm_dtor,

lm_init,

lm_print,

nullptr

};

const BaseApi* se_lowmem = &lm_api.base;

Gespeicherten Diffs

Original text

Datei öffnen

//--------------------------------------------------------------------------
// Copyright (C) 2014-2024 Cisco and/or its affiliates. All rights reserved.
// Copyright (C) 2002-2013 Sourcefire, Inc.
//
// This program is free software; you can redistribute it and/or modify it
// under the terms of the GNU General Public License Version 2 as published
// by the Free Software Foundation.  You may not use, modify or distribute
// this program under any other version of the GNU General Public License.
//
// This program is distributed in the hope that it will be useful, but
// WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
// General Public License for more details.
//
// You should have received a copy of the GNU General Public License along
// with this program; if not, write to the Free Software Foundation, Inc.,
// 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
//--------------------------------------------------------------------------

/*
*   An abstracted interface to the Multi-Pattern Matching routines,
*   thats why we're passing 'void *' objects around.
*
*   Marc A Norton <mnorton@sourcefire.com>
*
*   Updates:
*   3/06 - Added AC_BNFA search
*/
// lowmem.cc author Russ Combs <rucombs@cisco.com>

#include "log/messages.h"
#include "framework/mpse.h"

#include "sfksearch.h"

using namespace snort;

//-------------------------------------------------------------------------
// "lowmem"
//-------------------------------------------------------------------------

class LowmemMpse : public Mpse
{
private:
    KTRIE_STRUCT* obj;

public:
    LowmemMpse(const MpseAgent* agent) : Mpse("lowmem")
    { obj = KTrieNew(0, agent); }

~LowmemMpse() override
    { KTrieDelete(obj); }

int add_pattern(
        const uint8_t* P, unsigned m, const PatternDescriptor& desc, void* user) override
    {
        return KTrieAddPattern(obj, P, m, desc.no_case, desc.negated, user);
    }

int prep_patterns(SnortConfig* sc) override
    {
        return KTrieCompile(sc, obj);
    }

int _search(
        const uint8_t* T, int n, MpseMatch match,
        void* context, int* current_state) override
    {
        *current_state = 0;
        return KTrieSearch(obj, T, n, match, context);
    }

int get_pattern_count() const override
    { return KTriePatternCount(obj); }
};

//-------------------------------------------------------------------------
// api
//-------------------------------------------------------------------------

static Mpse* lm_ctor(const SnortConfig*, class Module*, const MpseAgent* agent)
{
    return new LowmemMpse(agent);
}

static void lm_dtor(Mpse* p)
{
    delete p;
}

static void lm_init()
{
    KTrie_init_xlatcase();
    KTrieInitMemUsed();
}

static void lm_print()
{
    if ( !KTrieMemUsed() )
        return;

double x = (double)KTrieMemUsed();

LogMessage("[ LowMem Search-Method Memory Used : %g %s ]\n",
        (x > 1.e+6) ?  x/1.e+6 : x/1.e+3,
        (x > 1.e+6) ? "MBytes" : "KBytes");
}

static const MpseApi lm_api =
{
    {
        PT_SEARCH_ENGINE,
        sizeof(MpseApi),
        SEAPI_VERSION,
        0,
        API_RESERVED,
        API_OPTIONS,
        "lowmem",
        "Keyword Trie (low memory, moderate performance) MPSE",
        nullptr,
        nullptr
    },
    MPSE_BASE,
    nullptr,
    nullptr,
    nullptr,
    nullptr,
    lm_ctor,
    lm_dtor,
    lm_init,
    lm_print,
    nullptr
};

const BaseApi* se_lowmem = &lm_api.base;

Geänderter text

Datei öffnen

#include "log/messages.h"
#include "framework/mpse.h"

#include "sfksearch.h"

#include <deque>

using namespace snort;

//-------------------------------------------------------------------------
// "lowmem"
//-------------------------------------------------------------------------

class LowmemMpse : public Mpse
{
private:
    KTRIE_STRUCT* obj;

std::deque<int> dbg_match_dq, dbg_match_want_dq;

public:
    LowmemMpse(const MpseAgent* agent) : Mpse("lowmem")
    {
        obj = KTrieNew(0, agent);

dbg_match_want_dq = std::deque<int>({35, 3, 32, 7, 10, 58, 1});
        obj->can_debug = false;
    }

~LowmemMpse() override
    {
        KTrieDelete(obj);
    }

int add_pattern(
        const uint8_t* P, unsigned m, const PatternDescriptor& desc, void* user) override
    {
        int ans = KTrieAddPattern(obj, P, m, desc.no_case, desc.negated, user);

return ans;
    }

int prep_patterns(SnortConfig* sc) override
    {
        int ans = KTrieCompile(sc, obj);

return ans;
    }

int _search(
            const uint8_t* T, int n, MpseMatch match,
        void* context, int* current_state) override
    {
        *current_state = 0;

if (dbg_match_dq == dbg_match_want_dq) {
            obj->can_debug = true;
        }

int ans = KTrieSearch(obj, T, n, match, context);

dbg_match_dq.push_back(ans);
        if (dbg_match_dq.size() > dbg_match_want_dq.size()) dbg_match_dq.pop_front();

if (obj->can_debug) {
            obj->can_debug = false;

printf("search finished: matches = %d\n", ans);
            printf("number of patterns: %d\n", KTriePatternCount(obj));
            printf("T = ");
            for (int i = 0; i < n; i++) printf("%d ", T[i]);
            printf("\n");
        }

return ans;
    }

int get_pattern_count() const override
    {
        int ans = KTriePatternCount(obj);

return ans;
    }
};

//-------------------------------------------------------------------------
// api
//-------------------------------------------------------------------------

static Mpse* lm_ctor(const SnortConfig*, class Module*, const MpseAgent* agent)
{
    return new LowmemMpse(agent);
}

static void lm_dtor(Mpse* p)
{
    delete p;
}

static void lm_init()
{
    KTrie_init_xlatcase();
    KTrieInitMemUsed();
}

static void lm_print()
{
    if ( !KTrieMemUsed() )
        return;

double x = (double)KTrieMemUsed();

LogMessage("[ LowMem Search-Method Memory Used : %g %s ]\n",
        (x > 1.e+6) ?  x/1.e+6 : x/1.e+3,
        (x > 1.e+6) ? "MBytes" : "KBytes");
}

const BaseApi* se_lowmem = &lm_api.base;