[Oisf-devel] Mem leaks

Victor Julien victor at inliniac.net
Thu Oct 6 18:56:28 UTC 2011


On 10/06/2011 08:02 PM, Chris Wakelin wrote:
> On 06/10/11 19:00, Eric Leblond wrote:
>> Hello,
>>
>> On Thu, 2011-10-06 at 18:55 +0100, Chris Wakelin wrote:
>>> I've tried running the latest git master with PF_RING autofp (I didn't
>>> hit Martin's problem as I'd specified interface and cluster_id on the
>>> command line) on both machines (students and campus) and it seems pretty
>>> OK.
>>>
>>> Memory on both reached 9.8GB and stayed there, and killing suricata on
>>> the students machine (after 40 minutes) didn't segfault, I think, though
>>> I had core dumping disabled.
>>>
>>> I'm now trying "workers" with 6 threads. It seems broadly similar to
>>> Will's "single" mode. Is that correct? What is the difference between
>>> these and "single" in the git master?
>>
>> None :) but "single" is mono thread and "workers" is a set of "single"
>> threads.
>>
>> BR,
>>
> 
> So "single" is the same as "workers" with "threads=1", and "workers" is
> pretty much the same as Will's "single"?

Yeah with the clarification that "single" is truely single threaded. So
it won't work with multiple devices as that would need more threads.

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------




More information about the Oisf-devel mailing list