Hacker News new | ask | show | jobs
by dr_zoidberg 3540 days ago
We tested last week, distorm3 and yara bindings for python are the big things that just didn't work (yet again) with our test case (the volatility memory forensics framework). We got them installed with pip, but they just didn work. Volatility still runs without them, it just complains a bit.

Also, startup time of volatility exploded for no apparent reason (4 seconds CPython vs 12 seconds PyPy, latest 2.7 branch). Real analysis time was indeed faster (~30 seconds CPython vs ~15 seconds PyPy), but half the plugins won't work.

Plus, in the end (startup+analysis), both CPython and PyPy got close results (though arguably PyPy was some about 15% faster).

1 comments

Might be worth reporting since you have a reproducible failure and a use case for which the performance is not satisfactory. You can tune some of the JIT behavior with command line options -- that might make it kick in sooner and you might see a net benefit.