[Snort-users] Overhead caused by PCRE?

Jeff McCarthy intel1914a at ...131...
Mon Feb 28 17:27:37 EST 2005


I have a question regarding using PCRE in Snort rules.
If I write 100 rules using content: and 100 using
PCRE, will there be a noticable difference in
processing time or CPU utilization?


Jeff M.

Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 

More information about the Snort-users mailing list