On Tue, Dec 16, 2008 at 14:39, Henrik K <h...@hege.li> wrote: > On Tue, Dec 16, 2008 at 06:18:50AM -0800, John Hardin wrote: >> >> We don't have any information on available disk, so I was assuming it >> was limited. >> ... >> "no swap" was specified, which also suggests limited disk. > > Flash is cheap, I would expect it to be in the GB range. :) > > Given that even perl itself takes tens and minimal system hundreds of MBs, a > 5MB bayes DB doesn't hurt. You won't need more tokens with the resources > available.
actually, Bayes would be a good one to drop. If you also remove AWL, and comment out both "loadplugin" lines, you will remove the need to load the DB_File database module too. commenting plugins and removing rulesets is definitely the way to go. you may be able to keep some net rules active -- trading long scan times and latency for low memory. --j.