[Bro] Bro Memory Consumtion

[Powell, Scott]

Seth,

Thanks. I'm now running without the DNS scripts and have profiling enabled. I will see how it goes. Right now Bro is using about 4.5GB between the manager, proxy and my three workers (all running on the same system w/click splitting up the tap). I was restarting each day at 1am but I have commented out the cron. I'll check it in the morning and see if things are cleaning up after themselves.

Thanks,
Scott

-----Original Message-----
From: Seth Hall [mailto:hall.692 at osu.edu] 
Sent: Thursday, March 18, 2010 9:51 AM
To: Powell, Scott
Cc: Justin Azoff; bro at ICSI.Berkeley.EDU
Subject: Re: [Bro] Bro Memory Consumtion


On Mar 18, 2010, at 9:25 AM, Powell, Scott wrote:

> I synced my scripts up with the latest and greatest from Seth's  
> repository but am still seeing Bro consume all 16gb of memory after  
> only an hour or two. When time permits I will try to debug further  
> to see if I can narrow it down to a particular script/policy.


I just moved both of the dns scripts into the testing/ directory to  
clear up any confusion about their stability. :)  When I get time and  
make them better with memory I'll move them back to the main directory.

   .Seth

---
Seth Hall
Network Security - Office of the CIO
The Ohio State University
Phone: 614-292-9721