[Bro-Dev] Timing regression?

[Robin Sommer]

On Tue, Apr 26, 2016 at 01:23 -0400, you wrote:

> That was my thought too.  I'll have to look into DFA state creations
> to see if we've walked into that problem again.

Turns out it's the entropy analysis. The change below makes execution
times go down again.

That seems ok then? It's an optional policy script that the regression
testing pulls in, but users won't see a difference unless they decide
to load the script -- in which case it's reasonable to expect a
performance impact due to doing additional analysis.

Robin

--------- cut -------------------------------------------------------

diff --git a/scripts/policy/frameworks/files/entropy-test-all-files.bro b/scripts/policy/frameworks/files/entropy-test-all-files.bro
index fd02b9e..f66e2e9 100644
--- a/scripts/policy/frameworks/files/entropy-test-all-files.bro
+++ b/scripts/policy/frameworks/files/entropy-test-all-files.bro
@@ -11,10 +11,10 @@ export {

 event file_new(f: fa_file)
        {
-       Files::add_analyzer(f, Files::ANALYZER_ENTROPY);
+       # Files::add_analyzer(f, Files::ANALYZER_ENTROPY);
        }



-- 
Robin Sommer * ICSI/LBNL * robin at icir.org * www.icir.org/robin