Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort

Snort Forums Archive

Archive Home » Rules » content text or binary bytecode

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

content text or binary bytecode


Posted by ajstables on March 17, 2005 03:08:53

when using content within rules is it better/faster for snort to use binary bytecode rather than text?

thanks

Posted by roesch on March 19, 2005 17:50:36

They're all just bytes as far as Snort is concerned, it doesn't matter which way you format them in the rule.

-Marty