[Oisf-devel] Mem leaks

[Peter Manev]

On Tue, Oct 18, 2011 at 12:38 PM, Chris Wakelin
<c.d.wakelin at reading.ac.uk>wrote:

> On 18/10/11 11:27, Anoop Saldanha wrote:
> >>
> >> And this with a non-optimized ac-gfbs.  With optimizations it should
> >> fare a lot better.  Would be interesting to see how much out of 10gigs
> >> is taken by ac.  I recollect the engine not crossing 1.8gigs on 13k
> >> rules with ac-gfbs:full and 350megs with single.  Of course there's no
> >> absolute co-relation between no of rules and ac mem usage though, but
> >> would be good to profile it.
> >>
> >> --
> >> Anoop Saldanha
> >>
> >
> > Any more perf reports/stats with ac-gfbs + high traffic?
> >
>
> Memory usage was less, starting at 2GB or so but gradually increasing to
> 5GB as opposed to 8-9GB with ac. However, it seemed I was missing more
> alerts, which might be due to other factors - I'm running with "ac" at
> the moment and still seem to be missing some. None of my cores are
> particular busy with either ac or ac-gfbs.
>
> Best Wishes,
> Chris
>
> --
> --+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+-
> Christopher Wakelin,                           c.d.wakelin at reading.ac.uk
> IT Services Centre, The University of Reading,  Tel: +44 (0)118 378 2908
> Whiteknights, Reading, RG6 6AF, UK              Fax: +44 (0)118 975 3094
> _______________________________________________
> Oisf-devel mailing list
> Oisf-devel at openinfosecfoundation.org
> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-devel
>

Hi Chris,

If you can, could you please send me a single  rule for example where you
are sure you are missing an alert from?
(privately if you want works as well).

Thanks

-- 
Peter Manev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-devel/attachments/20111018/2cf0e286/attachment-0002.html>