[Snort-users] Memory Leak

James Nonya slave_tothe_box at ...131...
Tue Jul 15 09:20:02 EDT 2003


On Mon, 14 Jul 2003 08:02:25 -0400
"Chris Green" <cmg at ...1935...> wrote:

> "Jim Gifford" <maillist at ...6454...> writes:
> 
> >> > I have been experience a memory leak on my
system, I have tracked it
> >> > down to snort. Here is the problem the way I
see it.
> >> >
> >> > snort starts out running on my system at 40mb.
> >> >
> >> > 3202 root       9   0 43580  40m 1152 S  0.0 
4.0   0:05.66 snort
> >> >
> >> > After a day of running and a half of running
snort goes up to 140+mb and
> >> > locks the system up.
> >> >
> >> >
> >> > Any suggestions or patches.
> 
> Disable portscan2 & spp_conversation or adjust your
limits well
> downwards.
> 
> 

Heh...I should be so lucky ;-) 
7624 root      15   0  258M  36M 36568 R     2.5 14.7 
39:13 snort.

Also, my snort 2 takes about 2 minutes to initialize
as well..
<snip>
Jul 13 12:09:40 gateway snort: Portscan2 config:  
Jul 13 12:09:40 gateway snort:     log:
/var/log/snort/scan.log  
Jul 13 12:09:40 gateway snort:     scanners_max: 256  
Jul 13 12:09:40 gateway snort:     targets_max: 300  
Jul 13 12:09:40 gateway snort:     target_limit: 3  
Jul 13 12:09:40 gateway snort:     port_limit: 150  
Jul 13 12:09:40 gateway snort:     timeout: 60  
Jul 13 12:11:33 gateway snort: Snort initialization
completed successfully

James


__________________________________
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com




More information about the Snort-users mailing list