Snort mailing list archives

Re: SNORT has memory leak on Linux Red hat 9


From: twig les <twigles () yahoo com>
Date: Fri, 27 Feb 2004 14:55:19 -0800 (PST)


--- ypwhich <ypwhich () paunix org> wrote:
Chances are Linux and SNORT are behaving.  You may be reading
the output
of "free -t" or "procinfo" incorrectly....which is easy to do,
especially
if coming to Linux from a Win32s environment.  The two systems
manage
memory differently.

Unless you're noticing a major performance hit after killing
SNORT,
chances are you're fine.  If you like copy the output of "free
-t" to
email after killing SNORT, will have a look at it.

-yp

The easiest way (IMO) to tell is to use top.  Here's my output:
  PID USERNAME     PRI NICE  SIZE    RES STATE  C   TIME   WCPU 
  CPU COMMAND
  145 snort          4   0 40904K 39128K bpf    0  90:45  0.59% 
0.59% snort

So my proc is using ~40 megs of memory.

=====
-----------------------------------------------------------
With a few exceptions, secrecy is deeply incompatible with
democracy and with science.
     --Carl Sagan  
-----------------------------------------------------------

__________________________________
Do you Yahoo!?
Get better spam protection with Yahoo! Mail.
http://antispam.yahoo.com/tools


-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: