[Bro-Dev] [JIRA] (BIT-1150) X509 updates

[Jon Siwek (JIRA)]

    [ https://bro-tracker.atlassian.net/browse/BIT-1150?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15751#comment-15751 ] 

Jon Siwek commented on BIT-1150:
--------------------------------

I see similar:

{noformat}
jsiwek at brotestbed:build (master) $ perf stat -e instructions bro -r ~/2009-M57-day11-18.trace 

 Performance counter stats for 'bro -r /home/jsiwek/2009-M57-day11-18.trace':

    61,627,649,626 instructions              #    0.00  insns per cycle        

      21.226079244 seconds time elapsed

jsiwek at brotestbed:build (topic/bernhard/file-analysis-x509) $ perf stat -e instructions bro -r ~/2009-M57-day11-18.trace

 Performance counter stats for 'bro -r /home/jsiwek/2009-M57-day11-18.trace':

    61,971,043,004 instructions              #    0.00  insns per cycle        

      20.798635594 seconds time elapsed

$ perf stat -e instructions bro -r ~/2009-M57-day11-18.trace local
WARNING: No Site::local_nets have been defined.  It's usually a good idea to define your local networks.

 Performance counter stats for 'bro -r /home/jsiwek/2009-M57-day11-18.trace local':

   360,108,745,169 instructions              #    0.00  insns per cycle        

      90.165166702 seconds time elapsed

jsiwek at brotestbed:build (topic/bernhard/file-analysis-x509) $ perf stat -e instructions bro -r ~/2009-M57-day11-18.trace local
WARNING: No Site::local_nets have been defined.  It's usually a good idea to define your local networks.

 Performance counter stats for 'bro -r /home/jsiwek/2009-M57-day11-18.trace local':

   598,916,494,754 instructions              #    0.00  insns per cycle        

     150.838914725 seconds time elapsed

{noformat}

If fields were added to either the connection or fa_file record, then it makes sense that the MHR script spends more time cloning values.  Though the degree to which it increased is surprising.  The faster-mhr branch should solve the immediate problem, but maybe there actually is something grossly inefficient about how certain Vals are cloned that deserves investigation.

> X509 updates
> ------------
>
>                 Key: BIT-1150
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-1150
>             Project: Bro Issue Tracker
>          Issue Type: Problem
>          Components: Bro
>            Reporter: Robin Sommer
>            Assignee: Seth Hall
>             Fix For: 2.3
>
>




--
This message was sent by Atlassian JIRA
(v6.2-OD-10-004-WN#6253)