[Bro] Detecting heartbleed activity
Vlad Grigorescu
vladg at cmu.edu
Thu Apr 17 08:14:27 PDT 2014
John,
Try merging in this branch: https://github.com/bro/bro/tree/topic/jsiwek/ascii-log-memleak-fix
A number of people have tested it and reported that it fixed the memory issue.
--Vlad
On Apr 16, 2014, at 1:17 PM, John Hoyt <john.h.hoyt at gmail.com> wrote:
> Seth,
>
> Any luck on a fix for this memory leak? Currently, this is causing my Bro server to come to a slow death.
>
> Thanks,
> John
>
>
> On Thu, Apr 10, 2014 at 10:42 PM, Seth Hall <seth at icir.org> wrote:
>
> On Apr 10, 2014, at 7:19 PM, Alex Waher <alexwis at gmail.com> wrote:
>
> > I had the heartbeat branch running for a few hours (very successfully detecting activity!) and noticed it eventually had the manager worker consuming +70gb of memory. Wasn't sure if the leak was from the heartbeat capability itself or something else along the current git repo.. ymmv!
>
> Sorry about that. We’ve been battling a bug in git master for a while now that causes high memory use on the manager of clusters (production-only memory leaks are really difficult).
>
> .Seth
>
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro.org/
>
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140417/08d4b69c/attachment.bin
More information about the Bro
mailing list