[Bro] Bro Memory Consumtion

Powell, Scott powellsm at musc.edu
Thu Mar 18 10:25:50 PDT 2010


Thanks. I'm now running without the DNS scripts and have profiling enabled. I will see how it goes. Right now Bro is using about 4.5GB between the manager, proxy and my three workers (all running on the same system w/click splitting up the tap). I was restarting each day at 1am but I have commented out the cron. I'll check it in the morning and see if things are cleaning up after themselves.


-----Original Message-----
From: Seth Hall [mailto:hall.692 at osu.edu] 
Sent: Thursday, March 18, 2010 9:51 AM
To: Powell, Scott
Cc: Justin Azoff; bro at ICSI.Berkeley.EDU
Subject: Re: [Bro] Bro Memory Consumtion

On Mar 18, 2010, at 9:25 AM, Powell, Scott wrote:

> I synced my scripts up with the latest and greatest from Seth's  
> repository but am still seeing Bro consume all 16gb of memory after  
> only an hour or two. When time permits I will try to debug further  
> to see if I can narrow it down to a particular script/policy.

I just moved both of the dns scripts into the testing/ directory to  
clear up any confusion about their stability. :)  When I get time and  
make them better with memory I'll move them back to the main directory.


Seth Hall
Network Security - Office of the CIO
The Ohio State University
Phone: 614-292-9721

More information about the Bro mailing list