[Snort-sigs] Overhead caused by PCRE?

Jeff McCarthy intel1914a at ...144...
Tue Mar 1 08:16:45 EST 2005


Hello,

I have a question regarding using PCRE in Snort rules.
If I write 100 rules using content: and 100 using
PCRE, will there be a noticable difference in
processing time or CPU utilization?

Thanks,

Jeff M.

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 




More information about the Snort-sigs mailing list