[Oisf-devel] Mem leaks

[Victor Julien]

On 10/18/2011 12:38 PM, Chris Wakelin wrote:
> On 18/10/11 11:27, Anoop Saldanha wrote:
>>>
>>> And this with a non-optimized ac-gfbs.  With optimizations it should
>>> fare a lot better.  Would be interesting to see how much out of 10gigs
>>> is taken by ac.  I recollect the engine not crossing 1.8gigs on 13k
>>> rules with ac-gfbs:full and 350megs with single.  Of course there's no
>>> absolute co-relation between no of rules and ac mem usage though, but
>>> would be good to profile it.
>>>
>>> --
>>> Anoop Saldanha
>>>
>>
>> Any more perf reports/stats with ac-gfbs + high traffic?
>>
> 
> Memory usage was less, starting at 2GB or so but gradually increasing to
> 5GB as opposed to 8-9GB with ac. However, it seemed I was missing more
> alerts, which might be due to other factors - I'm running with "ac" at
> the moment and still seem to be missing some. None of my cores are
> particular busy with either ac or ac-gfbs.

I ran a test locally here: a 700GB pcap vs up2date emerging-all.rules:

- ac +/- 8450 sec
- ac-gfbs +/- 8550 sec

Didn't monitor the memory usage.

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------