Re: All I can say is WOW. How many filters are these people trying to hit?

[Matt Kettler <mk...@evi-inc.com>]

At 03:32 PM 2/9/2004, Keith Dowell wrote:
>I'm surprised sa didn't blow up on this (running on a 266 with 64 megs of
>ram).
>
>Here's the results. Not gonna put people through the email itself.

<snip very large report>

Why would SA blow up on it??? Are you _that_ used to software from Microsoft???

Even on a 64mb box, you'd be more likely to blow up spawning the process in 
the first place, without any regard for the input. You won't likely blow up 
trying to keep track of all the rule hits.. The entire report, in even in 
verbose text format, is under 20k. 

Re: All I can say is WOW. How many filters are these people trying to hit?

[Ralf Vitasek <vi...@tqsoft.de>]

it can.

about 2 weeks ago i had a "blown up" SA process that was stuck at 
consuming 320+MB of ram. :S


Matt Kettler wrote:
> At 03:32 PM 2/9/2004, Keith Dowell wrote:
> 
>> I'm surprised sa didn't blow up on this (running on a 266 with 64 megs of
>> ram).
>>
>> Here's the results. Not gonna put people through the email itself.
> 
> 
> <snip very large report>
> 
> Why would SA blow up on it??? Are you _that_ used to software from 
> Microsoft???
> 
> Even on a 64mb box, you'd be more likely to blow up spawning the process 
> in the first place, without any regard for the input. You won't likely 
> blow up trying to keep track of all the rule hits.. The entire report, 
> in even in verbose text format, is under 20k.
>