[Bro] Detecting heartbleed activity

Vlad Grigorescu vladg at cmu.edu
Thu Apr 17 08:14:27 PDT 2014


John,

Try merging in this branch: https://github.com/bro/bro/tree/topic/jsiwek/ascii-log-memleak-fix

A number of people have tested it and reported that it fixed the memory issue.

  --Vlad


On Apr 16, 2014, at 1:17 PM, John Hoyt <john.h.hoyt at gmail.com> wrote:

> Seth,
> 
> Any luck on a fix for this memory leak?  Currently, this is causing my Bro server to come to a slow death.  
> 
> Thanks,
> John
> 
> 
> On Thu, Apr 10, 2014 at 10:42 PM, Seth Hall <seth at icir.org> wrote:
> 
> On Apr 10, 2014, at 7:19 PM, Alex Waher <alexwis at gmail.com> wrote:
> 
> > I had the heartbeat branch running for a few hours (very successfully detecting activity!) and noticed it eventually had the manager worker consuming +70gb of memory. Wasn't sure if the leak was from the heartbeat capability itself or something else along the current git repo.. ymmv!
> 
> Sorry about that.  We’ve been battling a bug in git master for a while now that causes high memory use on the manager of clusters (production-only memory leaks are really difficult).
> 
>   .Seth
> 
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro.org/
> 
> 
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
> 
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140417/08d4b69c/attachment.bin 


More information about the Bro mailing list