[Bro] Time Machine RAM usage question

[Justin Azoff]

On Tue, Oct 26, 2010 at 02:01:24PM -0400, Martin Holste wrote:
> I've got a question on tm's RAM usage, and I was hoping someone could
> point me in the right direction:  I'm trying to get as much duration
> as possible out of tm so that I can go back many hours or even days
> for packets.  I have a lot of disk to throw at it, and a fair amount
> of RAM.  The problem I'm running into is that when I move the
> conn_timeout up to 86400 but keep the mem settings low, tm still
> consumes a massive amount of RAM.

I don't think you need conn_timeout set that high.  I use:

    conn_timeout 180;

and then

    cutoff 5k;
    disk 4g;
    filesize 128m;
    mem 512m;

works fine for the most part.

-- 
-- Justin Azoff
-- Network Security & Performance Analyst