Snort mailing list archives

Re: SO Rules


From: Nigel Houghton <nhoughton () sourcefire com>
Date: Wed, 29 Jul 2009 19:06:32 -0400

On Wed, Jul 29, 2009 at 6:40 PM, Jefferson,
Shawn<Shawn.Jefferson () bcferries com> wrote:
What is the benefit of using SO rules?  Is it only speed?

There is flexibility you do not have in text rules. No, nothing to do
with speed.

Is there any overlap with the text-based rules?

no

-- 
Nigel Houghton
Head Mentalist
SF VRT
http://vrt-sourcefire.blogspot.com && http://www.snort.org/vrt/

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: