[Bro] crash with std::bad_alloc

[Robin Sommer]

On Mon, Nov 24, 2008 at 18:29 +0100, Peter Wurzinger wrote:

> I have applied suggestion (a) and set sig_max_group_size = 10. That
> greatly improved the situation. I have been running Bro with my
> signature set for a week now without a problem concerning memory

Great to hear, thanks for the update. Do you see any significant
change in CPU usage after the change? I'm wondering whether it might
make send to change the default value. 

Robin

-- 
Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org 
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org