[Snort-devel] v2 mem usage chages?

Erek Adams erek at ...835...
Tue Mar 18 07:54:12 EST 2003


On Tue, 18 Mar 2003, Rich Adamson wrote:

>
> Has there been any changes in snort v2 that would dramatically
> increase memory requirements?
>
> I'm working with the Win32 port (with Chris) and see:
>
> v1.9.1 consumes 12 meg RAM (per Task Manager)
> v2 consumes 61 meg RAM

Yep.  That's normal.

Sounds like you have spp_conversation, spp_portscan, stream4 and frag2
running.  Remove those and you'll be down to the 1.9.1 amounts of usage.

For almost all of those, there are memcaps that you can set.  Check out
the info in snort.conf for info on how to set that.

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson




More information about the Snort-devel mailing list