Snort mailing list archives

Re: SO rules vs regular rules


From: Joel Esler <jesler () sourcefire com>
Date: Mon, 1 Feb 2010 13:08:39 -0500

I have heard that there isn't a performance improvement, but I'd let VRT
speak.

J

On Mon, Feb 1, 2010 at 12:23 PM, Mike Cox <mike.cox52 () gmail com> wrote:

I never heard back on this.   Does anybody have any insight?

Thanks.

Thanks.

-Mike Cox


On Thu, Jan 14, 2010 at 2:10 PM, Mike Cox <mike.cox52 () gmail com> wrote:

Lately I have considered taking some of the poorer performing snort
rules and making them shared object rules.  The purpose of this would
be to improve performance but my question is, will it?  Are there any
performance metrics associated with SO rules vs regular rules?

Thanks.

-Mike Cox




------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the
business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs




-- 
Joel Esler
------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs

Current thread: