[Snort-devel] isn't there a memory leak in latest CVS snort?

Vitaly Osipov vosipov at ...440...
Tue Jun 19 04:59:37 EDT 2001


I just noticed that after updating snort from cvs yesterday my machine
where it resides, started to respond rather slowly... Have a look at top
results:

51 processes: 47 sleeping, 4 running, 0 zombie, 0 stopped
CPU states: 10.3% user,  2.3% system,  0.0% nice, 87.2% idle
Mem:   126708K av,  125204K used,    1504K free,       0K shrd,     844K
buff
Swap:  529160K av,  201184K used,  327976K free                   75944K
cached

  PID USER     PRI  NI  SIZE  RSS SHARE STAT %CPU %MEM   TIME COMMAND
32051 root      19   0  166M  80M 50532 R     8.1 65.3  81:15 snort
32048 root      12   0 22820  16M  9012 R     2.9 12.9  44:07 snort
21865 root       9   0   520  504   472 S     0.3  0.3   5:34 syslogd
  571 root      10   0  1056 1056   840 R     0.3  0.8   0:00 top
    1 root       8   0   124   72    68 S     0.0  0.0   0:05 init
    2 root       8   0     0    0     0 SW    0.0  0.0   0:00 keventd
<snip>

pid 32048 is snort 1.7 instance; pid 32051 is latest cvs, both run for
about one day now. There is not much traffic on the the link this box
listens to - about 1 mbit/s i guess (i did not check it). Anyway, the
difference is a bit worrying...

regards,
VItaly.




More information about the Snort-devel mailing list