On Wed, 29 May 2019, Karsten Bräckelmann wrote:

On Wed, 2019-05-29 at 12:47 +0200, Stoiko Ivanov wrote:
On Wed, 29 May 2019 11:31:42 +0200 Matthias Egger <maeg...@ee.ethz.ch> wrote:
On 28.05.19 10:31, Stoiko Ivanov wrote:
with a recent update to the ruleset, we're encountering certain
mails, which cause the rule-evaluation to use 100% cpu.

Thanks for the report, Stoiko.


Your sample just triggered the error and therefore the system started
blowing off partially :-) So next time, please paste that example to
e.g. pastebin or github or some website and link to it ;-)

Aye - sorry for that! I first wanted to open a bug-report at bugzilla,
but since the one which dealt with a similar issue contained the
suggestion to contact the user-list with problems for single rules - I
did just that - without considering those implications!

Next time I'll definitely take the pastebin-option!

Both is good advice, filing a bug report

...for rules that generate runaway scan times. General complaints about FPs should go to the list first.

as well as generally using pastebin or similar external method to provide samples...

Definitely.


--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  If you are "fighting for social justice," then you are defining
  yourself as someone who considers regular old everyday
  *equal* justice to be something you don't want.       -- GOF at TSM
-----------------------------------------------------------------------
 8 days until the 75th anniversary of D-Day

Reply via email to