Open andrewkroh opened 7 years ago
It would be nice to benchmark the parser by itself to see what kind of throughput it has. Based on those results we could consider whether it would be worth it to try writing a parser with https://www.colm.net/open-source/ragel/ or https://github.com/alecthomas/participle.
(edit: I did a ragel spike in https://github.com/andrewkroh/go-libaudit/tree/ragel-parser. Not much of a change in perf.)
any updates on the test? I'm looking forward to see performance comparison of Auditbeat and similar tools like Falco
@danmx I don't see something like that happening. The project suddenly seems to have some activity, other than that, it's been stale for around a year.
There should be a stress test framework to find the limits of the library with and without the parser in the loop.