[Bro-Dev] #574: More exessive memory usage

Bro Tracker bro at tracker.bro-ids.org
Thu Sep 15 07:50:15 PDT 2011

#574: More exessive memory usage
  Reporter:  gregor   |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  High     |  Milestone:  Bro1.6
 Component:  Bro      |    Version:  git/master
Resolution:           |   Keywords:  beta

Comment (by gregor):

 >  Another fix in [d656e2a8c49445beeddee3ad996aecb581901995] (which is in
 >  master).  I would appreciate any feedback on it.  My experience so far
 >  been a very dramatic reduction in memory use.  Maybe *now* we can close
 >  this ticket...

 Testing it right now. Will report once traffic ramps up for the day.

 However, it looks to me that the store is only ever access by a script in
 *policy*. So if only run with default scripts, that shouldn't make any
 difference, right?

 Yesterday (before the commit) I was also running my bro's without the
 normal ssl scripts (bare mode with everything but SSL) and just added a
 single ssl event so that the ssl analyzer runs but non of the default
 scripts for it. I could still see the memory usage, which would indicate
 that it's a problem in the core.

 From earlier test I'm also quite sure that it's not a real leak but rather
 large per connection memory usage that's freed after a connection

 Note though that all the fixes so far have helped a bit, but there's still
 more left that's causing memory usage.


Ticket URL: <http://tracker.bro-ids.org/bro/ticket/574#comment:9>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker

More information about the bro-dev mailing list