Method for matching mode in invading detection

The method comprises: setting two ternary content addressable memories (TCAM), one of the two is a header TCAM, and another one is a end TCAM; inputting each mode character used in mode matching into header TCAM; inverting the character string inputted to the header TCAM, and then inputting the inverted character string into end TCAM; said header TCAM and end TCAM respectively and simultaneously takes mode matching in turn from header and end of data to be tested to its middle; reporting the matching result to the system.