The new ac-split pattern matcher is much more efficient than the current default matcher, but is closer to ac-full in its memory. Snort 2.8.6 beta is up on snort.org.org. There is still some features that the dev team is planning on adding, but this beta build already serves up features that folks have been clammoring for. The ability to handle gzip compressed server response data over http connections is the ability to detect the transfer of Personally Identifiable Information (PII) through the wire.”]
Source: https://blog.talosintelligence.com/2010/01/new-year-new-snort.html