[Snort-sigs] Overhead caused by PCRE?

Jeff McCarthy intel1914a at ...144...
Tue Mar 1 08:16:45 EST 2005


I have a question regarding using PCRE in Snort rules.
If I write 100 rules using content: and 100 using
PCRE, will there be a noticable difference in
processing time or CPU utilization?


Jeff M.

Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 

More information about the Snort-sigs mailing list