[Bro] question about intel files

[Seth Hall]

> On Aug 3, 2016, at 7:22 AM, philosnef <philosnef at yahoo.com> wrote:
> 
> We have 2 10 physical core systems with 20 logical cores for a total of 40. Bro has a capture loss of sub .5% across all workers, so it seems unlikely that the box is overloaded. The capture rate of the box, per pfring is about 3.5Gb/s. We reported memory issues in the past, but those were written off as not related to the memory leak recently patched in the 24 branch and the 25 branch.

Cool, thanks for the details.  If you don't load your intelligence data, do you see any memory trouble?  That seems like the next logical step to take for testing.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/