SO rules vs regular rules

[Mike Cox <mike.cox52 () gmail com>]

Lately I have considered taking some of the poorer performing snort
rules and making them shared object rules.  The purpose of this would
be to improve performance but my question is, will it?  Are there any
performance metrics associated with SO rules vs regular rules?

Thanks.

-Mike Cox

------------------------------------------------------------------------------
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs