[Bro] Version: 2.0-907 -- Bro manager memory exhaustion

[Martin Holste]

> You might be right.  I had considered disk I/O and ran the manager on a
> decent raid-10 array (the elsa server), disk i/o did not appear to be the
> problem so much as CPU and memory.  That observation carried over to
> development builds with a threaded manager, but at an accelerated rate;
> right now I'm watching the disk I/O under threshold and the manager is
> consuming 100M of memory per second until memory exhaustion.

How much I/O from the manager have you seen thus far?  I'm not yet
convinced that writing raw text files is the bottleneck.  When you
think about writing raw pcap, it's orders of magnitude more MB/sec to
disk than logging.