[Aide] regexp or multiple rules?

Marc Haber mh+aide at zugschlus.de
Wed Jan 17 19:14:45 EET 2007


On Wed, Jan 17, 2007 at 05:47:30PM +0100, Richard van den Berg wrote:
> Marc Haber wrote:
> > When generating a file, it is probably easier to generate two disting
> > rules - will this wreck AIDE performance?
> 
> I am not sure. Regex compares are said to be expensive operations. The
> more rules you have, the more compares aide will do. You could do some
> testing with 10 regexes and 100 regexes to see if you notice a
> difference. My gut feeling says that the disk operations (stats) are the
> limiting factor, not the regex compares on modern CPUs.

Agreed. Which way to do it do you find more elegant?

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835


More information about the Aide mailing list