99% Memory Useage

stephenw10

Mmm, something is very wrong there. Try this. Run top -aSH at the command line, so probably via SSH.

Then when it's running hit o to change the sort order and then type size to sort by size. Hit q to quit. Copy paste that here.

Steve

Snowaks

Yes Cisco I have did not change. I've some how fixed the problem I have suricata on even higher setting.
Then I had be for when they where stock. Ive also install Squid proxy. like 12 more Pf blockers Lists so thing On pfsense side cause a memory leak.
I've been stable at 10-20% memory now With Lan/Wan with Suricata on high, Max pending packets on 10k.
Also Set Pattern Matcher Algorithm off auto to hyper scan. I did this to try and see if it Suricata Or to see if I
could get what was happening in 2-3day to happen in 1. Pf blocker was change to Dlev.

Snowaks

If you guys still want to see if I can reproduce the problem I can go back to bone stock suricata setup.
I also disable DNS Forwarder and just set unbound to do every thing it was split be for.
So maybe this was the cause and not the packages I can re enable DNS forwarder and see if my memory goes back to what was seen.

stephenw10

If you can pin down a memory leak it would be good to know about it.

Steve

Snowaks

Well with the Update to 2.4.4 I can not reproduce this memory leak not sure what was the root cause
but pretty sure it was Dns Unbound and Dns forwarder, Not playing nice with each other.
I have try removing the packages and just setting both to run.
I have no more use for forwarder so it is now disabled. Pretty much was using
Dns Forwarder to Query Dns servers sequentially. Not sure if I was ruing just a really odd
config or using some thing for that it was not its intended use. If this pop's up again I will install
my config on a 2nd system to do a test bench to find the problem.