RE: Snort v2.1.1 Memory Leakage?

["zacktoh" <zacktoh () gw nd net fujitsu co jp>]

Dear Sekure,

I installed Snort v2.1.3 and ran it with the command "snort -A none -dev -l
log -h 192.168.0.0/24 -c etc/snort.conf" the problem of memory leakage still
exist. The rate of leakage was much slower than that of v2.1.1 but it still
goes at the rate of 16k/min. I let it run over the weekend and when I came
back, it had killed itself. By the way, I had 4 concurrent hping running all
the while simulating an attack packet.

I tried also to install Snort v2.2.0 but the memory leakage sky rocketed
with the 4 concurrent hping running and within one minute, it had killed
itself.

Hping commands:
1. hping2 -SF 192.168.0.21 -a 192.168.0.29
2. hping2 -2SF 192.168.0.21 -a 192.168.0.29
3. hping2 -SFU 192.168.0.21 -a 192.168.0.29
4. hping2 -2SFU 192.168.0.21 -a 192.168.0.29

Please advice.


Cheers,
Zack Toh


-----Original Message-----
From: sekure [mailto:sekure () gmail com] 
Sent: Friday, July 16, 2004 9:32 PM
To: zacktoh
Cc: snort-users () lists sourceforge net; bmc () snort org; jh () snort org;
Masatsune Wake; Nishida; Takenaga
Subject: Re: [Snort-users] Snort v2.1.1 Memory Leakage?

This isn't normal behavior.  Why don't you upgrade to the newest
version and see if you still have the issue?  2.1.3 is the latest
stable releases and there is 2.2.0-RC1 if you want to live on the
edge.


----- Original Message -----
From: zacktoh <zacktoh () gw nd net fujitsu co jp>
Date: Fri, 16 Jul 2004 15:29:08 +0900
Subject: [Snort-users] Snort v2.1.1 Memory Leakage?
To: snort-users () lists sourceforge net, bmc () snort org, jh () snort org
Cc: Masatsune Wake <wake () nd net fujitsu co jp>, Nishida
<nishida.maiko () jp fujitsu com>, Takenaga
<takenaga () soft net fujitsu co jp>




Dear All,

 

I would like to enquire if any of your have tried running snort and
monitoring system resources at the same time.

I installed a snort v2.1.1 on my FreeBSD 4.9 system and found that it
eats up about 48-81 K of my memory every minute. This had resulted in
very high memory consumption by snort and eventually killing itself
overtime.

 

I would like to know if this is a normal symptom of snort or is it
that there is some memory leakage from within snort?

 

Please advice.

 

Cheers,

Zack Toh.



-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users