[Snort-sigs] Re: Snort-sigs digest, Vol 1 #1687 - 4 msgs

Ureleet Ureleet ureleet at ...2420...
Fri May 26 05:51:03 EDT 2006

BTW, I saw that the pcre in my original rule was put into contents in
two different rules.  Is it faster to run two rules instead of one?
Please explain?  I know contents are faster because of WM and AC, but,
is two rules faster than one?

More information about the Snort-sigs mailing list