[Bro] troubleshooting bro memory usage?

Vlad Grigorescu vladg at cmu.edu
Sun Aug 11 18:02:31 PDT 2013


On Aug 11, 2013, at 8:39 AM, Aaron Gee-Clough <lists at g-clef.net> wrote:

> I have two vanilla 
> securityonion installs (no custom .bro scripts added, just the ones that 
> came with securityonion), watching just traffic to two different DNS 
> resolvers

What traffic rate do you see?

> right now one of the worker parent processes (according to 
> "broctl top") on each securityonion box grows monotonically in RAM usage 
> until it gets killed by Linux (and is then restarted by broctl's cron job).

How much RAM is in the box?

  --Vlad




More information about the Bro mailing list