Based upon my understanding I don't think this is expected behavior. Can you share a minimal proof of concept which shows this happening?
-- WXS > On May 17, 2017, at 8:18 AM, tofbaas...@gmail.com wrote: > > Hello again , > > I'm using yara python to match rules against a lot of files . The problem is > when the number of files gets big the performance is really horrible . > > When doing some profiling I noticed that when running 12319 files against > about a 1000 to 1500 rules the yara callback function gets called 151991822 > times ? > Does the callback function get called for each matching string of a rule ? > In my test I only had 28 matches so it's not that I'm doing any heavy lifting > if there's a match > Is there anything I can do about this , or is this behaviour to be expected > with this number of files ? I haven't compared against native yara yet ... > > Thank you > > > > > -- > You received this message because you are subscribed to the Google Groups > "YARA" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to yara-project+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. -- You received this message because you are subscribed to the Google Groups "YARA" group. To unsubscribe from this group and stop receiving emails from it, send an email to yara-project+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.