[flow-tools] performance question

Craig A. Finseth fin@finseth.com
Tue, 28 Jan 2003 15:43:17 -0600 (CST)


   There is a potential performance increase if the results of a test
   are cached, consider

   match src-ip-addr test-address
   match dst-ip-addr test-address
   match exporter-ip-addr test-prefix
   or
   match src-ip-addr test-address
   match exporter-ip-addr test-prefix
   match src-ip-port test-port

OK, makes sense.

	...
   The first example is pretty far fetched because complex filter rules are
   not typically used.  The second one is probably worth looking into.

Up to you, of course.

Craig