Performance Evaluation of TCAM Based Pattern-Matching Algorithm

Split-TCAM mechanism for storing patterns efficiently

“…We applied our Split-TCAM mechanism to both R-TCAM and Jumping Window algorithm using Snort v2.8. 5.…”

“…Thus, flexible and high performance algorithm for the DPI is needed not to degrade the line-speed while inspecting the packets. Recently, hardware based approaches [2,3,4,5] using ternary content addressable memory (TCAM) have been proposed to guarantee real time inspection on multi-gigabit Ethernet.…”

“…To improve the inspection speed, algorithms such as Rotating TCAM (R-TCAM) [3] and Jumping Window [4,5] have attempted to shift the window multi-bytes at a time. However, since the approaches must consider the every positions where patterns can appear, they waste significant amount of memory to make room for shifted-patterns that contain redundant bytes, "don't care," when they store rules in a TCAM.…”