Re: Snort memory usage

["Jain, Siddhartha" <Siddhartha.Jain () kla-tencor com>]

Thanks for that pointer. Stupid of me not to have gone thru the FAQ
first. Switched to the "lowmem" option for search_method and the
utilization dropped to 17M. 


Thanks,

- Siddhartha
  408.875.8582 



-----Original Message-----
From: snort-users-bounces () lists sourceforge net
[mailto:snort-users-bounces () lists sourceforge net] On Behalf Of Joel
Esler
Sent: Thursday, September 28, 2006 2:12 PM
To: Jain, Siddhartha
Cc: snort-users () lists sourceforge net
Subject: Re: [Snort-users] Snort memory usage

Snort 2.6 has a much larger memory foot print than < 2.6.

I encourage a browse through the faq on Snort.org for more info on this
one.

Joel


On Thu, Sep 28, 2006 at 02:06:06PM -0700, Jain, Siddhartha apparently
sent me:
> Hi,
>
> I am running Snort (2.6.0.2) on an old Sun Ultra 5 with Solaris 7
> (32-bit). The memory usage is running to 200M even without any
traffic.
> Is that normal for snort?
>
>
> Thanks & Regards,
>
> - Siddhartha Jain
>   408.875.8582
------------------------------------------------------------------------
-
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to
share your
> opinions on IT & business topics through brief surveys -- and earn
cash
>
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDE
V
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users




+---------------------------------------------------------------------+
joel esler          senior security consultant         1-706-627-2101
Sourcefire    Security for the /Real/ World -- http://www.sourcefire.com
       Snort - Open Source Network IPS/IDS -- http://www.snort.org
         gpg key: http://demo.sourcefire.com/jesler.pgp.key
           aim:eslerjoel  ymsg:eslerjoel gtalk:eslerj
+---------------------------------------------------------------------+

------------------------------------------------------------------------
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share
your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDE
V
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users