Before i pull my hair out doing bench/resource test, i was wondering if
anyone out there knew if there was much of a speed/resource usage
difference between the following way of writing the same rule.


Method A:
body    rule_a          /(?:feh|meh|bleh)/i

vs.

Method B:

bod             __rule_a        /(?:feh)/i
body    __rule_b        /(?:meh)/i
body    __rule_c        /(?:bleh)/i

meta    rule_d          (__rule_a || __rule_b || __rule_c)


There probably isn't much difference using just 3 rules, but i'm thinking
more along the lines of large(500+) lists and it isn't limited to just body
stuff.  So if anyone has some realworld benching/experience with what is
preferred or if the developers know which is faster for SA, i would love
the input.

-Rocky
-- 
______________________________________________________________________


what's with today, today?

Email:  [EMAIL PROTECTED]
PGP:    http://rocky.mindphone.org/rocky_mindphone.org.gpg

Attachment: signature.asc
Description: Digital signature

Reply via email to