[Snort-devel] Segfault, massive memory usage in 1.8.1beta3 build 47

Seth Leger soleger at ...511...
Fri Jul 27 15:45:23 EDT 2001

Yep, this leak is definitely patched. I've been running build 56 for 
three days with no crashes and the memory usage is staying well within 
the tolerable range.

Looks good! Thanks for all the help guys. Glad you were able to help out 
in such a timely manner...

Seth Leger
soleger at ...511...

Jed Pickel wrote:

> I just committed a fix for the XML plugin memory leak. Apparently it
> was introduced in a commit on July 8th. Let me know if you have any
> more problems.
> * Jed
> On Fri, Jul 20, 2001 at 03:59:47PM -0400, Seth Leger wrote:
>> 	Ok, after looking at it some more, it looks like the memory usage is all 
>> in the XML plugin when it is using file output mode. It seems like I 
>> looked at this code some time ago and it never flushes the memory for 
>> each alert XML tree after the file is written. Instead, it maintains a 
>> sort of memory copy of the entire XML log file.
>> 	I might be able to work on a patch for this one of these days (if that's 
>> even really what's happening...) but until then I'm happy running TCP 
>> output mode for the plugin.
>> 	Thanks for the tips. Those frag2 and stream4 plugins seem to be terribly 
>> efficient with memory; after I dropped the XML plugin, the memory usage 
>> hovered around 4 MB and dropped after heavy scans completed their runs. 
>> Looking good!

More information about the Snort-devel mailing list