[Bro-Dev] new IPv6 code
gregor at majordomus.org
Wed Feb 8 19:26:10 PST 2012
> The negligible memory usage difference surprised me since they differ from previous results here: http://tracker.bro-ids.org/bro/ticket/68. Maybe one possibility is that the scripts have changed so much since those benchmarks were run such that there's less state being tracked that involves addrs. Or the pcap I used was likely not as robust.
I think it's quite likely that we just keep more script-level state in
general so that the addresses don't have as much an effect.
If you want to verify that memory usage is indeed going to stay low, I
would run master and topic/v6-addr on the same live traffic for a day or so.
More information about the bro-dev