[Snort-sigs] SO rules vs regular rules

Mike Cox mike.cox52 at ...2420...
Mon Feb 1 12:23:47 EST 2010

I never heard back on this.   Does anybody have any insight?



-Mike Cox

On Thu, Jan 14, 2010 at 2:10 PM, Mike Cox <mike.cox52 at ...2420...> wrote:

> Lately I have considered taking some of the poorer performing snort
> rules and making them shared object rules.  The purpose of this would
> be to improve performance but my question is, will it?  Are there any
> performance metrics associated with SO rules vs regular rules?
> Thanks.
> -Mike Cox
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20100201/a2fdf807/attachment.html>

More information about the Snort-sigs mailing list