Snort mailing list archives
RE: Snort v2.1.1 Memory Leakage?
From: "zacktoh" <zacktoh () gw nd net fujitsu co jp>
Date: Tue, 20 Jul 2004 08:26:40 +0900
Dear Sekure, I installed Snort v2.1.3 and ran it with the command "snort -A none -dev -l log -h 192.168.0.0/24 -c etc/snort.conf" the problem of memory leakage still exist. The rate of leakage was much slower than that of v2.1.1 but it still goes at the rate of 16k/min. I let it run over the weekend and when I came back, it had killed itself. By the way, I had 4 concurrent hping running all the while simulating an attack packet. I tried also to install Snort v2.2.0 but the memory leakage sky rocketed with the 4 concurrent hping running and within one minute, it had killed itself. Hping commands: 1. hping2 -SF 192.168.0.21 -a 192.168.0.29 2. hping2 -2SF 192.168.0.21 -a 192.168.0.29 3. hping2 -SFU 192.168.0.21 -a 192.168.0.29 4. hping2 -2SFU 192.168.0.21 -a 192.168.0.29 Please advice. Cheers, Zack Toh -----Original Message----- From: sekure [mailto:sekure () gmail com] Sent: Friday, July 16, 2004 9:32 PM To: zacktoh Cc: snort-users () lists sourceforge net; bmc () snort org; jh () snort org; Masatsune Wake; Nishida; Takenaga Subject: Re: [Snort-users] Snort v2.1.1 Memory Leakage? This isn't normal behavior. Why don't you upgrade to the newest version and see if you still have the issue? 2.1.3 is the latest stable releases and there is 2.2.0-RC1 if you want to live on the edge. ----- Original Message ----- From: zacktoh <zacktoh () gw nd net fujitsu co jp> Date: Fri, 16 Jul 2004 15:29:08 +0900 Subject: [Snort-users] Snort v2.1.1 Memory Leakage? To: snort-users () lists sourceforge net, bmc () snort org, jh () snort org Cc: Masatsune Wake <wake () nd net fujitsu co jp>, Nishida <nishida.maiko () jp fujitsu com>, Takenaga <takenaga () soft net fujitsu co jp> Dear All, I would like to enquire if any of your have tried running snort and monitoring system resources at the same time. I installed a snort v2.1.1 on my FreeBSD 4.9 system and found that it eats up about 48-81 K of my memory every minute. This had resulted in very high memory consumption by snort and eventually killing itself overtime. I would like to know if this is a normal symptom of snort or is it that there is some memory leakage from within snort? Please advice. Cheers, Zack Toh. ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort v2.1.1 Memory Leakage? zacktoh (Jul 15)
- Re: Snort v2.1.1 Memory Leakage? sekure (Jul 16)
- RE: Snort v2.1.1 Memory Leakage? zacktoh (Jul 19)
- Re: Snort v2.1.1 Memory Leakage? sekure (Jul 16)