Snort mailing list archives

Re: Snort 1.8.6 -vs- Snort 1.9.0 Memmory Usage


From: Erek Adams <erek () theadamsfamily net>
Date: Mon, 11 Nov 2002 07:45:57 -0800 (PST)

On Mon, 11 Nov 2002, Steven P. Donegan wrote:

I've been working on an embedded snort - and came to a very rude awakening
when I tried Snort 1.9.0 - 1.8.6 seemed to be quite happy in a 64M space -
Snort 1.9.0 however uses almost 50 megabytes - thus leaving my little
swapless embedded hardware with a whopping 6M of free RAM. What caused the
sudden increase in RAM usage? And more to the point is there anything that
can be done to reduce it's footprint a bit?

spp_conversation and spp_portscan2 happened.  :)

IIRC, you can tune the mem limits with converstaion which will also handle
the mem limits to ps2.

Cheers!

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: