Re: Memory leak -- StreamPolicyInitTcp

["Gaurav Nagare (gnagare)" <gnagare () cisco com>]

Hi Jon,

Check following code from addStreamTcpPolicyToList(), I believe it does
free of policy list.

// copy the existing policies to new list, free old list and point to
new...
        memcpy( tmpPolicyList, config->policy_list, policyListSize -
sizeof( StreamTcpPolicy * ) );
        free( config->policy_list );
        config->policy_list = tmpPolicyList;


C
Thanks
Gaurav


On 19/04/16, 5:01 AM, "Jon Larson" <jon () catbird com> wrote:

> For each policy, ConfigurePreprocessors calls StreamPolicyInitTcp calls
> StreamTcpPolicyInit.  The structure allocated in ConfigurePreprocessors
> is added onto the config->policy_list and freed when snort exits.
> However, if a config reload occurs (as when snort receives a SIGHUP
> signal), a new StreamTcpPolicy is allocated (for each policy), but the
> previous one isn't freed.  The StreamTcpPolicy structure is approx 2MB
> so memory gets eaten up quickly with numerous config reloads.
>
> The Is this a known issue?
>
>
> --------------------------------------------------------------------------
> ----
> Find and fix application performance issues faster with Applications
> Manager
> Applications Manager provides deep performance insights into multiple
> tiers of
> your business applications. It resolves application problems quickly and
> reduces your MTTR. Get your free trial!
> https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
> _______________________________________________
> Snort-devel mailing list
> Snort-devel () lists sourceforge net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
> Archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel
>
> Please visit http://blog.snort.org for the latest news about Snort!


------------------------------------------------------------------------------
Find and fix application performance issues faster with Applications Manager
Applications Manager provides deep performance insights into multiple tiers of
your business applications. It resolves application problems quickly and
reduces your MTTR. Get your free trial!
https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!