[Oisf-devel] Mem leaks

[Anoop Saldanha]

On Tue, Oct 18, 2011 at 4:08 PM, Chris Wakelin
<c.d.wakelin at reading.ac.uk> wrote:
> On 18/10/11 11:27, Anoop Saldanha wrote:
>>>
>>> And this with a non-optimized ac-gfbs.  With optimizations it should
>>> fare a lot better.  Would be interesting to see how much out of 10gigs
>>> is taken by ac.  I recollect the engine not crossing 1.8gigs on 13k
>>> rules with ac-gfbs:full and 350megs with single.  Of course there's no
>>> absolute co-relation between no of rules and ac mem usage though, but
>>> would be good to profile it.
>>>
>>> --
>>> Anoop Saldanha
>>>
>>
>> Any more perf reports/stats with ac-gfbs + high traffic?
>>
>
> Memory usage was less, starting at 2GB or so but gradually increasing to
> 5GB as opposed to 8-9GB with ac. However, it seemed I was missing more
> alerts, which might be due to other factors - I'm running with "ac" at
> the moment and still seem to be missing some. None of my cores are
> particular busy with either ac or ac-gfbs.
>

Probably FNs?!  Did you see any drops with ac-gfbs compared to ac?

> Best Wishes,
> Chris
>
> --
> --+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+-
> Christopher Wakelin,                           c.d.wakelin at reading.ac.uk
> IT Services Centre, The University of Reading,  Tel: +44 (0)118 378 2908
> Whiteknights, Reading, RG6 6AF, UK              Fax: +44 (0)118 975 3094
> _______________________________________________
> Oisf-devel mailing list
> Oisf-devel at openinfosecfoundation.org
> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-devel
>



-- 
Anoop Saldanha