[Snort-users] 2.8.4 performance improvements
Shawn.Jefferson at ...14448...
Mon Apr 27 12:53:09 EDT 2009
One of things that was talked about in the webcast on 2.8.4 was a performance improvement, but the trade-off is that rules with Any -> Any won't be processed by some of the pre-processor's (like Stream5). I was curious about how many rules are Any -> Any, and in my configuration (files with none are removed):
So, my question is, is it worth turning this new feature on? Is anyone else using it yet? Better performance sounds good...
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users