[Bro-Dev] manager crash

[Robin Sommer]

On Mon, Sep 26, 2011 at 11:11 -0500, you wrote:

> The manager processes are among the lowest for CPU utilization.  The
> workers are top.

That's what I thought, and then normally I wouldn't attribute the 
crash to the manager's load. However, I forgot that this is all
running on a single box where the manager may just not get sufficient
cycles to process what it gets.

If you see these crashes regularly, it may be worth playing with some
scheduling parameters, like pinning the manager process to its own
core.

Robin

PS: To be very clear, these 101 crashes should never happen at all;
it's a bug somewhere in the communication code that has evaded
detection for a while already. If anything, Bro should tear down the
connection regularly if it can't deal with what it gets.

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org