Re: [mod-security-users] jsessionid cookie length

[Ives S. <ive...@gm...>]

Chris,

Far better response than I could have hoped for.

It's surprising that the transformation for length takes almost twice as
long. I imagine this is the parsing and interpretation of the "@gt X"
expression and not the actual length transformation itself.

As you say, i'll have to do some testing with the larger jsessoinid
strings... in the environment where it'll actually be running.

Thanks again for the detailed reply. Much appreciated.

-ives


On Sun, Jul 8, 2012 at 1:31 PM, Christian Bockermann <ch...@jw...>wrote:

>
> Am 08.07.2012 um 22:05 schrieb Christian Bockermann:
> >
> >
> +-------------+-------------+--------------+----------------+------------+
> >   |     Rule Id | Invocations |  total time  | transformation |
>  operator  |
> >
> +-------------+-------------+--------------+----------------+------------+
> >   |        1000 |        100  |       4.440  |        2.040   |
>  2.400 |
> >   |        1001 |        100  |       4.090  |        1.060   |
>  3.030 |
> >
> +-------------+-------------+--------------+----------------+------------+
> >
> > ------OUTPUT------
> >
> >
> > As you can see, the version using regular expressions takes slightly
> more time
> > compared to the one using "t:length". So, in a sense, this should answer
> your
> > question.
>
> I'm sorry, I made a small mistake.
> Of course, the numbers in the table show that the regular-expression
> version
> is slightly faster.
>
> I believe it's best to check this out on your local setup.
>
> Best regards,
>     Chris