Snort mailing list archives
Overhead caused by PCRE?
From: Jeff McCarthy <intel1914a () yahoo com>
Date: Mon, 28 Feb 2005 17:22:43 -0800 (PST)
Hello, I have a question regarding using PCRE in Snort rules. If I write 100 rules using content: and 100 using PCRE, will there be a noticable difference in processing time or CPU utilization? Thanks, Jeff M. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- No netmask specified for home network Peter Rodger (Feb 23)
- <Possible follow-ups>
- Re: No netmask specified for home network Sean Brown (Feb 23)
- Overhead caused by PCRE? Jeff McCarthy (Feb 28)
- Re: Overhead caused by PCRE? Matt Kettler (Mar 01)
- Re: [Snort-sigs] Overhead caused by PCRE? Brian (Mar 02)
- Overhead caused by PCRE? Jeff McCarthy (Feb 28)
- RE: No netmask specified for home network Peter Rodger (Feb 25)