[Bro] Version: 2.0-907 -- Bro manager memory exhaustion

Tritium Cat tritium.cat at gmail.com
Wed Aug 1 14:59:12 PDT 2012


I was going to try capturing from an interface with little to no traffic.

--TC

On Wed, Aug 1, 2012 at 9:39 PM, Martin Holste <mcholste at gmail.com> wrote:

> It ought to be easy enough to tell if it is indeed disk logging IO
> that's the bottleneck.  I would think simply disabling all logs or
> sending all logs to /dev/null via symlink or even putting the logging
> directory on /dev/shm for a bit would all be ways of seeing if the raw
> IO is the problem.
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20120801/f9f1b42e/attachment.html 


More information about the Bro mailing list