[Bro-Dev] #574: More exessive memory usage

Bro Tracker bro at tracker.bro-ids.org
Sun Sep 18 08:52:21 PDT 2011


#574: More exessive memory usage
----------------------+------------------------
  Reporter:  gregor   |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  High     |  Milestone:  Bro1.6
 Component:  Bro      |    Version:  git/master
Resolution:           |   Keywords:  beta
----------------------+------------------------

Comment (by gregor):

 We now have a hotfix for that. Once the SSL connection is going encrypted
 (ssl_established), we disable the analyzer from script land. After that
 the analyzer doesn't do anything else anyways.

 If you want to see that "bad" behavior comment out the disable_analyzer()
 call in scripts/base/protocols/ssl/main.bro

 This solves (most of) the symptoms but not the root cause. Will open
 another ticket to address and track down the actual cause for 2.1

 Note though, that when running in bare mode with with some ssl event
 handlers, the problem will re-appear disable_analyzer() won't be used
 then.

 cu
 Gregor

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/574#comment:14>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list