Snort mailing list archives
Re: SO rules vs regular rules
From: Joel Esler <jesler () sourcefire com>
Date: Mon, 1 Feb 2010 13:08:39 -0500
I have heard that there isn't a performance improvement, but I'd let VRT speak. J On Mon, Feb 1, 2010 at 12:23 PM, Mike Cox <mike.cox52 () gmail com> wrote:
I never heard back on this. Does anybody have any insight? Thanks. Thanks. -Mike Cox On Thu, Jan 14, 2010 at 2:10 PM, Mike Cox <mike.cox52 () gmail com> wrote:Lately I have considered taking some of the poorer performing snort rules and making them shared object rules. The purpose of this would be to improve performance but my question is, will it? Are there any performance metrics associated with SO rules vs regular rules? Thanks. -Mike Cox------------------------------------------------------------------------------ The Planet: dedicated and managed hosting, cloud storage, colocation Stay online with enterprise data centers and the best network in the business Choose flexible plans and management services without long-term contracts Personal 24x7 support from experience hosting pros just a phone call away. http://p.sf.net/sfu/theplanet-com _______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs
-- Joel Esler
------------------------------------------------------------------------------ The Planet: dedicated and managed hosting, cloud storage, colocation Stay online with enterprise data centers and the best network in the business Choose flexible plans and management services without long-term contracts Personal 24x7 support from experience hosting pros just a phone call away. http://p.sf.net/sfu/theplanet-com
_______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs
Current thread:
- SO rules vs regular rules Mike Cox (Jan 14)
- Re: SO rules vs regular rules Mike Cox (Feb 01)
- Re: SO rules vs regular rules Joel Esler (Feb 01)
- Re: SO rules vs regular rules Brian Caswell (Feb 01)
- Re: SO rules vs regular rules Patrick Mullen (Feb 03)
- Re: SO rules vs regular rules Mike Cox (Feb 03)
- http rule is not always triggering Sven Wurth (Feb 16)
- Re: http rule is not always triggering JJ Cummings (Feb 16)
- Re: http rule is not always triggering Sven Wurth (Feb 17)
- Re: SO rules vs regular rules Patrick Mullen (Feb 03)
- Re: SO rules vs regular rules Mike Cox (Feb 01)