[Bro-Dev] new IPv6 code

Gregor Maier gregor at majordomus.org
Wed Feb 8 19:26:10 PST 2012

> The negligible memory usage difference surprised me since they differ from previous results here: http://tracker.bro-ids.org/bro/ticket/68.  Maybe one possibility is that the scripts have changed so much since those benchmarks were run such that there's less state being tracked that involves addrs.  Or the pcap I used was likely not as robust.

I think it's quite likely that we just keep more script-level state in 
general so that the addresses don't have as much an effect.

If you want to verify that memory usage is indeed going to stay low, I 
would run master and topic/v6-addr on the same live traffic for a day or so.


More information about the bro-dev mailing list