Snort mailing list archives

Re: memory utilization under 1.9 looks HUGE


From: Jason Haar <Jason.Haar () trimble co nz>
Date: Thu, 19 Sep 2002 14:13:50 +1200

On Thu, Sep 19, 2002 at 01:20:47PM +1200, Jason Haar wrote:
I've just got snort-1.9 up and running for the first time (beta6) and I'm
amazed by the amount of RAM it's using.

Under 1.8.7, snort used 10-11Mb RAM, now under 1.9, it's using 52M!


I figured it out. Obviously I had to re-do the configuration for 1.9, and I
didn't realise I had re-enabled the portscan preprocessor (portscan2 to be
precise). That appears to be the cause of all the RAM loss.

Now that I've disabled portscanning, memory usage is back down to 11M.

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


-------------------------------------------------------
This SF.NET email is sponsored by: AMD - Your access to the experts
on Hammer Technology! Open Source & Linux Developers, register now
for the AMD Developer Symposium. Code: EX8664
http://www.developwithamd.com/developerlab
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: