On 09/09/2009 12:53 PM, Karsten Bräckelmann wrote: > > Ah, good point, Mark -- that reminds me of the infamous issue of > un-bound or nested quantifiers in RE rules. In some pathological cases, > I've even debugged these to be the culprit of bringing SA down to its > knees. > > Any custom rules? Do you still see the same timing when disabling them > temporarily? Might be worth a shot. > No really. Removing all .cf files and running it again knocked around 4 seconds off - so that isn't the cause by itself.
I also got SA-3.3dev up, but it appears sa-update doesn't support it yet, and it complained about there being no 3.3 "rules" yet, and so I copied in the last 3.2.5 rules to give it something to chew on - and it complained about that, yadda, yadda. After all that it appeared to run ~10% faster - but given the sad state 3.3 said it was in, I don't trust the result. I'm afraid I'm not up to that level of testing yet - a bit early meethinks ;-) -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
