Snort memory leak ?



  • Hello,
    on my 1.2 pfsense box, I always have a problem with snort.
    I've already read many posts on this forum, I also tried to increase my ram. but whatever I do, sooner or later I have the problem below

    system log:
    May 13 19:31:55 kernel: pid 12048 (snort), uid 0, was killed: out of swap space
    May 13 19:31:55 kernel: swap_pager_getswapspace(16): failed
    May 13 19:30:38 login: login on ttyv0 as root
    May 13 19:28:55 SnortStartup[12065]: Ram free BEFORE starting Snort: 49M – Ram free AFTER starting Snort: 49M -- Mode ac-sparsebands -- Snort memory usage:

    Thanks in advance for your help

    Pipol



  • Do you have enough memory to run snort?  Snort is an awfully memory intensive tool and if you can't feed the pig, you'll run into problems.



  • You were right, the first time I increased memory I did not add enough

    Finally, I add 400M Memory and is working fine now,

    thanks for your help


Log in to reply