本书共14章，详细分析了snort2.2在windows系统下的源代码，对数据包截获、系统初始化、数据包处理、系统配置和规则库建立于匹配等等，详细的进行了分析。对源代码中重要的函数一句句的注释分析。-The book has 14 chapters, detailed analysis snort2.2 of source code in windows system, packet capture, system initialization, packet processing, system configuration and rule base established in the match, a detailed analysis. Comment on the important function of a sentence in the source code.