[Snort-sigs] SO rules vs regular rules

Joel Esler jesler at ...435...
Mon Feb 1 13:08:39 EST 2010


I have heard that there isn't a performance improvement, but I'd let VRT
speak.

J

On Mon, Feb 1, 2010 at 12:23 PM, Mike Cox <mike.cox52 at ...2420...> wrote:

> I never heard back on this.   Does anybody have any insight?
>
> Thanks.
>
> Thanks.
>
> -Mike Cox
>
>
> On Thu, Jan 14, 2010 at 2:10 PM, Mike Cox <mike.cox52 at ...2420...> wrote:
>
>> Lately I have considered taking some of the poorer performing snort
>> rules and making them shared object rules.  The purpose of this would
>> be to improve performance but my question is, will it?  Are there any
>> performance metrics associated with SO rules vs regular rules?
>>
>> Thanks.
>>
>> -Mike Cox
>>
>
>
>
> ------------------------------------------------------------------------------
> The Planet: dedicated and managed hosting, cloud storage, colocation
> Stay online with enterprise data centers and the best network in the
> business
> Choose flexible plans and management services without long-term contracts
> Personal 24x7 support from experience hosting pros just a phone call away.
> http://p.sf.net/sfu/theplanet-com
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
>
>


-- 
Joel Esler
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20100201/dfdf252c/attachment.html>


More information about the Snort-sigs mailing list