[Oisf-users] Suricata memory leakage?

[Victor Julien]

On 07/22/2011 10:35 PM, Fernando Ortiz wrote:
> Has anyone had problem with suricata regarding memory leakage? I am running
> Suricata version 1.1beta2 (rev e5cc68a) in an Arch Linux kernel 2.6.32-lts.
> This happens only when I have Suricata running, so it looks like a Suricata
> issue but I can't say for sure. I have not tested keep the server running
> without Suricata for a very long period. Is there any way I can catch te
> source of the problem?

I'm not convinced yet there is a problem. Suricata has some memcaps in
the yaml file, the growing memory usage might be well within those limits.

> This is a graph that shows the memory increasing, and what happens when I
> restart Suricata http://puu.sh/3zVf.
> 
> This is a "top" capture of the server in the last point of the graph.
> (Suricata is down) http://puu.sh/3zVS
> 
> This is a capture of minutes ago after I restarted the server
> http://puu.sh/3zXH
> 
> As you can see in the fist graph, everything was find for a week and then
> memory usage started to increase in the next days.
> 
> In what OS do you recommend to run Suricata?

Any Linux should be fine. BSD works too, as does Mac OS X.

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------