On 28 November 2016 at 17:30, Sascha Steinbiss <sa...@debian.org> wrote: > > I spent some time last week to assess how much effort it would be to enable > Hyperscan support for Debian's suricata packages. Robert Haist has been so > kind > to provide a package for Hyperscan, available on the currently supported > architectures. I would consider it quite useful to provide a performance- > optimised variant of Suricata on architectures that support it, and make use > of > Robert's work bringing Hyperscan into Debian (surely with Suricata in mind). >
Thanks Sascha and Robert. > > Arturo suggested that it might be cleaner to reduce redundancy by just > switching out the /usr/bin/suricata binary with a separate one linked against > libhyperscan, e.g. via a diversion. I implemented this approach in my > 'hyperscan-with-diversion' branch in the same repo [2] and I think this might > indeed be a better way to accomplish what I was trying to do, keeping changes > as minimal as possible. > That looks good. > I would be curious to learn what the maintainers' and community thoughts are, > and would appreciate any comments you might have. > Just posted to debian-devel to give a bit of visibility to our issue. I, as well, would like to get a bit of feedback from other fellow developers to know if there is a better approach. regards.
