分析了数据包调用检测函数匹配规则节点的平均次数计算函数，并用该函数对Snort系统规则树进行了优化，减少了数据包过滤匹配次数，极大提高了入侵检测效率-Analysis of packet matching rules called detection function of the average number of nodes the calculation function, and the system function of the Snort rules tree is optimized to reduce the number of packets matching filter, which greatly improved the efficiency of intrusion detection