[Bro-Dev] [JIRA] (BIT-1150) X509 updates

[Bernhard Amann (JIRA)]

    [ https://bro-tracker.atlassian.net/browse/BIT-1150?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15743#comment-15743 ] 

Bernhard Amann commented on BIT-1150:
-------------------------------------

Ok, I am really surprised by the increase in the timing results.

The branch does not really do _that_ much more than the previous implementation. Basically, things were shifted to the file analysis framework, plus a few additional extensions are parsed (and events raised).

Extension parsing should not really incur any significant CPU load (we basically already did that before, we just have a few more special cases).

...so... could it be possible that just handling stuff in the file analysis framework, instead of handling it inline in the ssl protocol parser incurs that overhead?

I would look into it, but I am a bit at a loss on where to start with this...

> X509 updates
> ------------
>
>                 Key: BIT-1150
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-1150
>             Project: Bro Issue Tracker
>          Issue Type: Problem
>          Components: Bro
>            Reporter: Robin Sommer
>            Assignee: Seth Hall
>             Fix For: 2.3
>
>




--
This message was sent by Atlassian JIRA
(v6.2-OD-10-004-WN#6253)