Hi list,

  After update my mod_security from 2.6.7 to 2.7.3 and now I'm facing a very weird behavior.

 Using the same ruleset (owasp-crs 2.2.5) and configuration, the request time to process the same POST goes from
 0m1.575s (using ver 2.6.7) to 1m36.455s (using ver 2.7.3) ! 
 Looking at audit log I have the impression that rules are being evaluated in loop when running version 2.7.3, the audit file is 140k lines long against 99 lines when using 2.6.7.

 I've read the changelog and release notes from 2.6.7 to 2.7.3 and canīt find anything that could explain this behavior.

 Did someone faced something like that ?