Code Generation for Packet Header Intrusion Analysis on the IXP1200 Network Processor [chapter]

Ioannis Charitakis, Dionisios Pnevmatikatos, Evangelos Markatos, Kostas Anagnostakis
2003 Lecture Notes in Computer Science  
We present a software architecture that enables the use of the IXP1200 network processor in packet header analysis for network intrusion detection. The proposed work consists of a simple and efficient run-time infrastructure for managing network processor resources, along with the S2I compiler, a tool that generates efficient C code from highlevel, human readable, intrusion signatures. This approach facilitates the employment of the IXP1200 in network intrusion detection systems while our
more » ... mental results demonstrate that provides performance comparable to hand-crafted code.
doi:10.1007/978-3-540-39920-9_16 fatcat:6bygchnifbca7ntfbofeeroy6a