[Oisf-devel] Mem leaks

Martin Holste mcholste at gmail.com
Fri Oct 14 18:12:02 UTC 2011


> Have you tried ac-gfbs with "full"?

Never, trying now.  Looks like it's using about 10G of ram with "full"
to start with.

> I can't think on anything here, except maybe that the traffic profile
> might change radically and Suricata somehow chokes on this traffic?
> Backups for example?

Nope, definitely not backups.  Again, I'm comparing performance with
known traffic numbers, and that's what makes it so weird.  Maybe
something to do with neutrinos going faster than light or something.
Perhaps this means that the missing CPU cycles are where Suricata goes
forward in time and pre-detects traffic ;)



More information about the Oisf-devel mailing list