Doc Schneider writes:
> Justin Mason wrote:
> > here's the result of a performance test of current SVN trunk with the base
> > ruleset and SARE rules:
> > 
> > normal mass-check:
> > 
> >   real   avg=51.247s min=50.767s max=52.007s count=4
> >   user   avg=49.279s min=48.979s max=49.719s count=4
> >   sys    avg=1.123s min=1.076s max=1.212s count=4
> > 
> > compiled using "sa-compile":
> > 
> >   real   avg=38.916s min=38.226s max=39.277s count=4
> >   user   avg=36.935s min=36.854s max=37.018s count=4
> >   sys    avg=1.035s min=0.912s max=1.112s count=4
> > 
> > 
> > That's a 24% speedup! nice ;)
> > 
> > --j.
> 
> Just curious but which SARE rules? But it also looks nice. I'm going to 
> try sa-compile on one of my systems and see what it does!1 8*))

good luck ;)  here's what I downloaded (via Daryl's sa-update repo):

70_sare_adult_cf_sare_sa-update_dostech_net.cf
70_sare_bayes_poison_nxm_cf_sare_sa-update_dostech_net.cf
70_sare_evilnum0_cf_sare_sa-update_dostech_net.cf
70_sare_evilnum1_cf_sare_sa-update_dostech_net.cf
70_sare_genlsubj_cf_sare_sa-update_dostech_net.cf
70_sare_header_cf_sare_sa-update_dostech_net.cf
70_sare_header_eng_cf_sare_sa-update_dostech_net.cf
70_sare_html_cf_sare_sa-update_dostech_net.cf
70_sare_obfu_cf_sare_sa-update_dostech_net.cf
70_sare_oem_cf_sare_sa-update_dostech_net.cf
70_sare_random_cf_sare_sa-update_dostech_net.cf
70_sare_specific_cf_sare_sa-update_dostech_net.cf
70_sare_spoof_cf_sare_sa-update_dostech_net.cf
70_sare_stocks_cf_sare_sa-update_dostech_net.cf
70_sare_unsub_cf_sare_sa-update_dostech_net.cf
70_sare_uri_cf_sare_sa-update_dostech_net.cf
70_sc_top200_cf_sare_sa-update_dostech_net.cf
72_sare_bml_post25x_cf_sare_sa-update_dostech_net.cf
72_sare_redirect_post3_0_0_cf_sare_sa-update_dostech_net.cf
99_fvgt_tripwire_cf_sare_sa-update_dostech_net.cf
99_sare_fraud_post25x_cf_sare_sa-update_dostech_net.cf
bogus-virus-warnings_cf_sare_sa-update_dostech_net.cf
updates_spamassassin_org.cf

--j.

Reply via email to