[Snort-users] More on the Possible Mem leak
cliff at ...1366...
Thu Apr 19 01:05:34 EDT 2001
i'm not one of the developers, but depending on your OS,
try something like strace. it should give u some indication
of what snort is up to when it is sucking up the CPU. you
can also try attaching gdb and trace though it.
gdb snort pid
even if u don't have a good handle on the source code, you can
backtrace (bt), and get an idea what part of the code it
is drudging through.
this might give the developers a little more of a clue what
is happening on your system.
___cliff rayman___cliff at ...1367...://www.genwax.com/
Len Burns wrote:
> On Wed, 18 Apr 2001, Martin Roesch wrote:
> > Question: how many people who are seeing memory leaks are using the
> > database plugin too?
> I am, I am also seeing something else odd that I am not quite sure how
> to track down. From time to time, I find snort eating 97 or 98% of
> the cpu, in an environment where it is not receiving an overwhelming
> number of packets. At times it can go for several days normally, and
> att others, this condition developes with in several hours. It does
> not crash. Suggestions?
More information about the Snort-users