Hello jburzenski,

Thursday, May 13, 2004, 6:27:31 AM, you wrote:

jac> What is more efficient from a processing perspective, having a single large
jac> rule or multiple smaller rules?  What is the ideal size for a rule? 
jac> Im simplest terms:
jac> /one|t(?:wo|hree)|four/
jac> Or
jac> /one/
jac> /t(?:wo|hree)/
jac> /four/

From our experience with BigEvil, /one|t(?:wo|three)|four/ is more
efficient than the three separate rules.

From our experience with BigEvil and other rulesets, the difference is
important when you're dealing with hundreds or thousands of rules. If
you're only dealing with dozens, don't worry about it.

Bob Menschel



Reply via email to