[Bro] Bro2 Random Crashes

Chris Crawford christopher.p.crawford at gmail.com
Thu Mar 1 06:30:42 PST 2012

I am using broctl to manage a single, local instance of bro.  Would it
make a difference if I just ran bro by hand, without broctl?


On Thu, Mar 1, 2012 at 9:16 AM, Seth Hall <seth at icir.org> wrote:
> On Mar 1, 2012, at 9:02 AM, Chris Crawford wrote:
>> After taking a look at one of my crash reports, Seth suggested that
>> I'm running out of memory.
> …snip...
>> ==== stderr.log
>> listening on eth1, capture length 8192 bytes
>> terminate called after throwing an instance of 'std::bad_alloc'
>> what():  std::bad_alloc
> For a bit of extra context, this was the line that made me think he was running out of memory.  I used to see this more often than I wish I ever did when I ran an extremely memory starved cluster (and before many of the memory leaks were fixed for 2.0).
>  .Seth
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro-ids.org/

More information about the Bro mailing list