[Bro] Detecting heartbleed activity

[sangdrax8]

It appears that the master branch was merged into this heartbeat
branch.  Does this by chance include the memleak-fix merge you
mentioned?  Is this possibly a test before merging these changes into
master its self?

Also, it has been a while since I did my install, and I can't recall.
If I do this on my master, then run the broctrl install, does it push
the new install to all the nodes?  I know the configurations get
pushed out, but I can't recall if the entire install is pushed, or
just configuration files.

Thank you!



On Thu, Apr 17, 2014 at 11:14 AM, Vlad Grigorescu <vladg at cmu.edu> wrote:
> John,
>
> Try merging in this branch: https://github.com/bro/bro/tree/topic/jsiwek/ascii-log-memleak-fix
>
> A number of people have tested it and reported that it fixed the memory issue.
>
>   --Vlad
>
>
> On Apr 16, 2014, at 1:17 PM, John Hoyt <john.h.hoyt at gmail.com> wrote:
>
>> Seth,
>>
>> Any luck on a fix for this memory leak?  Currently, this is causing my Bro server to come to a slow death.
>>
>> Thanks,
>> John
>>
>>
>> On Thu, Apr 10, 2014 at 10:42 PM, Seth Hall <seth at icir.org> wrote:
>>
>> On Apr 10, 2014, at 7:19 PM, Alex Waher <alexwis at gmail.com> wrote:
>>
>> > I had the heartbeat branch running for a few hours (very successfully detecting activity!) and noticed it eventually had the manager worker consuming +70gb of memory. Wasn't sure if the leak was from the heartbeat capability itself or something else along the current git repo.. ymmv!
>>
>> Sorry about that.  We’ve been battling a bug in git master for a while now that causes high memory use on the manager of clusters (production-only memory leaks are really difficult).
>>
>>   .Seth
>>
>> --
>> Seth Hall
>> International Computer Science Institute
>> (Bro) because everyone has a network
>> http://www.bro.org/
>>
>>
>> _______________________________________________
>> Bro mailing list
>> bro at bro-ids.org
>> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>>
>> _______________________________________________
>> Bro mailing list
>> bro at bro-ids.org
>> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro