[Snort-users] Snort is using a lot of memory

Joel Esler (jesler) jesler at cisco.com
Tue Sep 19 12:55:46 EDT 2017

Are you sure that you are referring to the correct snort.conf?

We need more information.

Joel Esler | Talos: Manager | jesler at cisco.com<mailto:jesler at cisco.com>

On Sep 19, 2017, at 9:25 AM, Anna <Anna at sonru.com<mailto:Anna at sonru.com>> wrote:


OS: Centos 7

Recently Snort started to use a lot of memory, and it is constantly on 29-30% of usage, it did not happen before (even when Snort was using more memory at the beginning - it went down after an hour or two), the only change to the server was a Centos upgrade

I put the memcap in the snort.conf —> stream5: global and restarted snort, but the memory usage did not go down. It is as Snort is ignoring the config

Any help with this?

<Screen Shot 2017-09-19 at 14.15.49.png>

Thank you

Snort-users mailing list
Snort-users at lists.snort.org<mailto:Snort-users at lists.snort.org>
Go to this URL to change user options or unsubscribe:

Please visit http://blog.snort.org to stay current on all the latest Snort news!

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20170919/7bc99100/attachment.html>

More information about the Snort-users mailing list