![snort logo](/images/snort-logo.png)
Snort mailing list archives
Snort faster with rules containing a lot of content parameters
From: Carl Nykvist via Snort-sigs <snort-sigs () lists snort org>
Date: Wed, 1 May 2019 11:22:08 +0200
Hi! Me and a friend is doing a project with some testing, and we see that Snort has higher throughput(Packets/second) when the number of rules with content parameter increases, and when the number of rules with content parameter are very few, Snort has very low throughput. Does anyone know the reason for this? Regards, Carl
_______________________________________________ Snort-sigs mailing list Snort-sigs () lists snort org https://lists.snort.org/mailman/listinfo/snort-sigs Please visit http://blog.snort.org for the latest news about Snort! Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a href=" https://snort.org/downloads/#rule-downloads">emerging threats</a>!
Current thread:
- Snort faster with rules containing a lot of content parameters Carl Nykvist via Snort-sigs (May 01)
- Re: Snort faster with rules containing a lot of content parameters Alex McDonnell (May 01)