Picking pesky parameters: optimizing regular expression matching in practice
Snort - Lightweight Intrusion Detection for Networks