> 1099602683.735772 Global_sizes total: 138583K > > Possible help me ? What exactly is the problem you're referring to? Bro can certainly use up 100s of MBs if it's monitoring a busy (1000s pps) link, or if you run it for a long period of time without engaging its various state timeout mechanisms. Vern