Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-09 18:18:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

GH-554: remove use of file magic in protocol-based signature logic

Browse source 
This can be a significant performance/memory improvement since
otherwise the protocol-based rule matching logic ends up superfluously
creating file-matching state per file-matcher per connection/endpoint.
This commit is contained in:
Jon Siwek 2019-08-27 16:16:39 -07:00
parent 289a1e2e8e
commit 8c9b3bd3ae
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/RuleMatcher.cc
View file

@ -732,7 +732,7 @@ RuleEndpointState* RuleMatcher::InitEndpoint(analyzer::Analyzer* analyzer,
// pattern matching to do.
if ( hdr_test->level <= RE_level )
{
for ( int i = 0; i < Rule::TYPES; ++i )
for ( int i = Rule::PAYLOAD; i < Rule::TYPES; ++i )
{
for ( const auto& set : hdr_test->psets[i] )
{