# Module execution

**URL:** <https://community.zeek.org/t/module-execution/5299>\
**Category:** Zeek\
**Created:** [May 9, 2018, 10:06pm UTC](https://community.zeek.org/t/module-execution/5299 "2018-05-09T22:06:17Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Carl\_Rotenan](https://avatars.discourse-cdn.com/v4/letter/c/d78d45/32.png) [@Carl\_Rotenan](https://community.zeek.org/u/Carl_Rotenan)\
**Post date:** [May 9, 2018, 10:06pm UTC](https://community.zeek.org/t/module-execution/5299/1 "2018-05-09T22:06:17Z")

</div>

Hello,

I’m looking to squeeze every bit of performance out of my Bro implementation, and wanted to know:

1. Is there any over head that be turned off? I’m only looking to capture HTTP, SMTP, and FTP, extract any files in transit, and calculate a SHA1 hash of those files.

2. Are there any tips for writing fast event code? Are there any known slow moving operations?

3. Has anyone done any time execution analysis of their code and could share the results?

Thank you as always,

Carl

---

<div class="post-metadata">

**Author:** ![JonZeolla](https://avatars.discourse-cdn.com/v4/letter/j/ccd318/32.png) [@JonZeolla](https://community.zeek.org/u/JonZeolla)\
**Post date:** [May 9, 2018, 11:29pm UTC](https://community.zeek.org/t/module-execution/5299/2 "2018-05-09T23:29:09Z")

</div>

Are you optimizing for a specific piece of hardware? Knowing any constraints there will be helpful as there are some changes that can be made based off of the hardware setup or traffic composition/speeds.

Jon

---

<div class="post-metadata">

**Author:** ![Carl\_Rotenan](https://avatars.discourse-cdn.com/v4/letter/c/d78d45/32.png) [@Carl\_Rotenan](https://community.zeek.org/u/Carl_Rotenan)\
**Post date:** [May 10, 2018, 12:55am UTC](https://community.zeek.org/t/module-execution/5299/3 "2018-05-10T00:55:53Z")

</div>

I’m trying to get as close as I can to supporting 10Gbs. I’ve been running upwards of 18 workers supporting 1 10G Intel NIC. As I increase network traffic I’m getting packet loss, and want to explore the code as a bottleneck.

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:45pm UTC](https://community.zeek.org/t/module-execution/5299/4 "2022-05-06T15:45:46Z")

</div>


