[Bro] logger large memory usage

Bowen Li newfire.bw at gmail.com
Mon May 8 07:16:13 PDT 2017


Hey all,

I`m running a bro cluster in 10G network, writing logs to redis
server directly use plugins,  when the cluster is running, the memory usage
of the logger has been growing larger and larger(hundreds of Gb), seems
like the logger cannot handle the huge number of the log messages, so the
question is what`s the processing capacity of the logger? In my case, 25000
msgs/sec to redis. And why not use more loggers in one cluster but only one?

Any insight would be helpful.

Bowen Li
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170508/739961d9/attachment.html 


More information about the Bro mailing list