Marek Stopka napsal(a):
> On Tue, Jul 14, 2009 at 4:15 PM, Peter Haag<peter.h...@switch.ch> wrote:
>
>> Hi Marek,
>>
>
> Hi,
>
>
>> The speed of the filter engine depends on various things, and a general
>> answer is rather complex. The filter tries to
>> optimise as good as possible and evaluates only required expressions and
>> skips non relevant terms. you need many hundred
>> or thousand of terms until a noticeable speed penalty occurs, as other
>> system resources are more relevant for speed,
>> such as i.O.
>>
>> The worst filter term is a single chain of .. OR .. OR .. OR .. . If this
>> reaches many hundred terms, the list syntax is
>> way more efficient:
>> .. in [ list ]
>>
>
> What is an exact syntax for list?
>
> I've tried
>
> (DST NET 88.86.96.0/19 OR
> DST NET 95.168.192.0/19) AND (IN IF 5 OR
> IN IF 79) AND ( SRC NET IN [ 95.81.192.0/19 83.240.0.0/17
> 83.97.80.0/21 89.33.72.0/21 78.140.224.0/19 95.185.162.0/24
> 194.44.186.0/24 91.188.132.0/24 85.198.88.0/22 85.233.89.0/24
> 94.140.128.0/19 62.213.0.0/19 82.179.224.0/19 93.95.164.0/24
> 91.205.44.0/22 83.149.8.0/22 91.205.192.0/24 193.192.128.0/20
> 80.75.80.0/20 80.242.64.0/19 91.211.36.0/22 82.215.67.0/24
> 212.69.96.0/19 195.22.136.0/23 212.220.82.0/23 89.42.158.0/23
> 93.95.184.0/24 194.24.240.0/24 91.206.48.0/24 ] )
>
> But nfdump tells me "line 3: syntax error at 'IN'"
>
> Thank you for all the information you've provided me, this helps me
> very much and I think I can do some optimization right away. :)
>
>
Try this
(DST NET 88.86.96.0/19 OR
DST NET 88.86.96.0/19 OR
DST NET 95.168.192.0/19) AND (IN IF 5 OR
IN IF 79) AND ( SRC NET 95.81.192.0/19 or src net 83.240.0.0/17 or src net
83.97.80.0/21 or src net 89.33.72.0/21 ...
Regards,
HOP
--
Jan Pazdera <pazdera at invea.cz>
INVEA-TECH a.s.
U Vodarny 2965/2, 61600 Brno, Czech Republic
Tel: +420 541 142 051
www.invea-tech.com
Key 0x89F62F78: 41A7 28C2 C624 FBD1 E236 6827 42EB 3694 89F6 2F78
------------------------------------------------------------------------------
Enter the BlackBerry Developer Challenge
This is your chance to win up to $100,000 in prizes! For a limited time,
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize
details at: http://p.sf.net/sfu/Challenge
_______________________________________________
Nfdump-discuss mailing list
Nfdump-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
