About Sort Pattern Matching

--===============5489473291934132884==
Content-Type: multipart/alternative; boundary="00000000000012fda105926a0c9c"

--00000000000012fda105926a0c9c
Content-Type: text/plain; charset="UTF-8"

Dear All,
Can you guys tell me where exactly [function in which file] does snort
performs "content" option match of a rule with input packet data? I have
disabled all the rules but one in local.rules which has "content:Bahria"
rule option and want to calculate time for that single match against
varying length packets.

-- 
Regards,
*Muhammad Yasir*

--00000000000012fda105926a0c9c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Dear All,<br>Can you guys tell me where exactly [function =
in which file] does snort performs &quot;content&quot; option match of a ru=
le with input packet data? I have disabled all the rules but one in local.r=
ules which has &quot;content:Bahria&quot; rule option and want to calculate=
 time for that single match against varying length packets.<br clear=3D"all=
"><div><br></div>-- <br><div dir=3D"ltr" class=3D"gmail_signature" data-sma=
rtmail=3D"gmail_signature"><div dir=3D"ltr">Regards,=C2=A0<br><font face=3D=
"comic sans ms, sans-serif" color=3D"#444444"><b>Muhammad Yasir</b></font><=
/div></div></div>

--00000000000012fda105926a0c9c--

--===============5489473291934132884==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Snort-devel mailing list
[email protected]
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

--===============5489473291934132884==--