Re: Snort 1.8.6 -vs- Snort 1.9.0 Memmory Usage

[Chris Green <cmg () snort org>]

"Steven P. Donegan" <donegan () donegan org> writes:

> I've been working on an embedded snort - and came to a very rude awakening
> when I tried Snort 1.9.0 - 1.8.6 seemed to be quite happy in a 64M space -
> Snort 1.9.0 however uses almost 50 megabytes - thus leaving my little
> swapless embedded hardware with a whopping 6M of free RAM. What caused the
> sudden increase in RAM usage? And more to the point is there anything that
> can be done to reduce it's footprint a bit?

Disable portscan2/conversation.  Snort 2.0 will consume quite a bit
more.

The ps2 target representation is very suboptimal and will be replaced
soon hopefully.
-- 
Chris Green <cmg () sourcefire com>
A good pun is its own reword.


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users