[Bro] Version: 2.0-907 -- Bro manager memory exhaustion
tritium.cat at gmail.com
Wed Aug 1 14:59:12 PDT 2012
I was going to try capturing from an interface with little to no traffic.
On Wed, Aug 1, 2012 at 9:39 PM, Martin Holste <mcholste at gmail.com> wrote:
> It ought to be easy enough to tell if it is indeed disk logging IO
> that's the bottleneck. I would think simply disabling all logs or
> sending all logs to /dev/null via symlink or even putting the logging
> directory on /dev/shm for a bit would all be ways of seeing if the raw
> IO is the problem.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro