Message processing method and device based on Snort rule set

Message processing method and device based on Snort rule set

  • CN 102,045,247 A
  • Filed: 10/12/2009
  • Published: 05/04/2011
  • Est. Priority Date: 10/12/2009
  • Status: Active Application
First Claim
Patent Images

1. the message processing method based on the Snort rule set is characterized in that, described method comprises:

  • The Snort rule set is converted to the form that network interface card can discern and will change after the Snort rule set be stored in the core buffer;

    Described network interface card mates the message that receives and the rule in the Snort rule set after the described conversion, and will be added in the head of described message with the corresponding label of matching result;

    AndThe software interface storehouse determines that according to the label in the head of described message described message is whether with described Snort rule set coupling and carry out subsequent operation.

View all claims
    ×
    ×

    Thank you for your feedback

    ×
    ×