Snort mailing list archives

Re: Snort is using a lot of memory


From: "Joel Esler \(jesler\) via Snort-users" <snort-users () lists snort org>
Date: Tue, 19 Sep 2017 16:55:46 +0000

Are you sure that you are referring to the correct snort.conf?

We need more information.

--
Joel Esler | Talos: Manager | jesler () cisco com<mailto:jesler () cisco com>






On Sep 19, 2017, at 9:25 AM, Anna <Anna () sonru com<mailto:Anna () sonru com>> wrote:



Hi,

Snort: 2.9.9.0
OS: Centos 7

Recently Snort started to use a lot of memory, and it is constantly on 29-30% of usage, it did not happen before (even 
when Snort was using more memory at the beginning - it went down after an hour or two), the only change to the server 
was a Centos upgrade

I put the memcap in the snort.conf —> stream5: global and restarted snort, but the memory usage did not go down. It is 
as Snort is ignoring the config

Any help with this?


<Screen Shot 2017-09-19 at 14.15.49.png>

Thank you

Anna
_______________________________________________
Snort-users mailing list
Snort-users () lists snort org<mailto:Snort-users () lists snort org>
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: