[Bro-Dev] #574: More exessive memory usage

[Bro Tracker]

#574: More exessive memory usage
---------------------+------------------------
 Reporter:  gregor   |      Owner:
     Type:  Problem  |     Status:  new
 Priority:  High     |  Milestone:  Bro1.6
Component:  Bro      |    Version:  git/master
 Keywords:           |
---------------------+------------------------
 It appears that there are still cases in which Bro uses excessive amounts
 of memory and doesn't release them when using the SSL-anlyzer (which is
 enabled by default). I couldn't pinpoint the exact reason, but it looks
 very similar to
 #565.

 My guess is that for some there is some dynamic length field so something
 in the SSL-analyzer that allocates large amounts of buffer space and which
 is particularly "expensive" for long-lived connections.

 The memory usage doesn't suddenly jump. Memory usage grows in small
 increments over longer periods of time (e.g., 500MB--2GB in 30--60min) and
 then stays high.
 (In addition I also noticed that Bro's memory footprint with SSL analyzer
 is 10%--20% higher pretty soon after startup)

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/574>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker