"I Write Mass Surveillance Software"

[Michael Holstein]

> http://www.reddit.com/r/IAmA/comments/9kwph/i_am_a_guy_who_writes_covert_software_that_runs/
>
> Thoughts?

The mention of "C like" code and the DPI makes me think the hardware 
uses Intel's IPX series network processors. For those, the ruleset is 
basically written in C and uploaded to the device.

SANS has a whitepaper on doing Snort IDS with them, a fairly similar 
application to the above (this is for the 24xx series @ 2.5gbps)

http://www.sans.org/reading_room/whitepapers/detection/intel_ixp_network_processor_based_intrusion_detection_32919

The IXP2800 can do line-rate 10gbps
http://download.intel.com/design/network/ProdBrf/27905403.pdf

Cheers,

Michael Holstein
Cleveland State University