[Oisf-users] Suricata memory leakage?

Victor Julien victor at inliniac.net
Sat Jul 23 18:35:13 UTC 2011

On 07/22/2011 10:35 PM, Fernando Ortiz wrote:
> Has anyone had problem with suricata regarding memory leakage? I am running
> Suricata version 1.1beta2 (rev e5cc68a) in an Arch Linux kernel 2.6.32-lts.
> This happens only when I have Suricata running, so it looks like a Suricata
> issue but I can't say for sure. I have not tested keep the server running
> without Suricata for a very long period. Is there any way I can catch te
> source of the problem?

I'm not convinced yet there is a problem. Suricata has some memcaps in
the yaml file, the growing memory usage might be well within those limits.

> This is a graph that shows the memory increasing, and what happens when I
> restart Suricata http://puu.sh/3zVf.
> This is a "top" capture of the server in the last point of the graph.
> (Suricata is down) http://puu.sh/3zVS
> This is a capture of minutes ago after I restarted the server
> http://puu.sh/3zXH
> As you can see in the fist graph, everything was find for a week and then
> memory usage started to increase in the next days.
> In what OS do you recommend to run Suricata?

Any Linux should be fine. BSD works too, as does Mac OS X.

Victor Julien
PGP: http://www.inliniac.net/victorjulien.asc

More information about the Oisf-users mailing list