Matt Kettler wrote:

Regex suggestion: the ^.* at the beginning is pointless. Why force-match the
start of a line, but allow any number of any character immediately following?
/bulk Body=/s will have the exact same matches, and do it faster with less 
memory.
Good point.

For optimization sake, perhaps this would be better:

header    X_DCC_SCORE ALL =~ /^X-DCC-.{1,64}-Metrics:.{1,100}bulk Body=/s

<snip>
Note that when you use ALL, the actual header names are in the text so you can
match on the header name itself.
Thanks Matt. This detail is what I missed. I didn't realize the header name would be part of the text so it was very unclear how this might be done.

--
Paul ([EMAIL PROTECTED])

Reply via email to