Re: Memory Leak

[James Nonya <slave_tothe_box () yahoo com>]

On Mon, 14 Jul 2003 08:02:25 -0400
"Chris Green" <cmg () sourcefire com> wrote:

> "Jim Gifford" <maillist () jg555 com> writes:
>
> > > > I have been experience a memory leak on my
system, I have tracked it
> > > > down to snort. Here is the problem the way I
see it.
> > > > snort starts out running on my system at 40mb.
> > > >
> > > > 3202 root       9   0 43580  40m 1152 S  0.0 
4.0   0:05.66 snort
> > > > After a day of running and a half of running
snort goes up to 140+mb and
> > > > locks the system up.
> > > >
> > > >
> > > > Any suggestions or patches.
>
> Disable portscan2 & spp_conversation or adjust your
limits well
> downwards.

Heh...I should be so lucky ;-) 
7624 root      15   0  258M  36M 36568 R     2.5 14.7 
39:13 snort.

Also, my snort 2 takes about 2 minutes to initialize
as well..
<snip>
Jul 13 12:09:40 gateway snort: Portscan2 config:  
Jul 13 12:09:40 gateway snort:     log:
/var/log/snort/scan.log  
Jul 13 12:09:40 gateway snort:     scanners_max: 256  
Jul 13 12:09:40 gateway snort:     targets_max: 300  
Jul 13 12:09:40 gateway snort:     target_limit: 3  
Jul 13 12:09:40 gateway snort:     port_limit: 150  
Jul 13 12:09:40 gateway snort:     timeout: 60  
Jul 13 12:11:33 gateway snort: Snort initialization
completed successfully

James


__________________________________
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com


-------------------------------------------------------
This SF.Net email sponsored by: Parasoft
Error proof Web apps, automate testing & more.
Download & eval WebKing and get a free book.
www.parasoft.com/bulletproofapps1
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users