# accept failed, Too many open files 24 **URL:** \ **Category:** Zeek\ **Created:** [November 1, 2016, 3:06pm UTC](https://community.zeek.org/t/accept-failed-too-many-open-files-24/4458 "2016-11-01T15:06:09Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Matt\_Clemons](https://avatars.discourse-cdn.com/v4/letter/m/8c91f0/32.png) [@Matt\_Clemons](https://community.zeek.org/u/Matt_Clemons)\ **Post date:** [November 1, 2016, 3:06pm UTC](https://community.zeek.org/t/accept-failed-too-many-open-files-24/4458/1 "2016-11-01T15:06:09Z")
Lo All, Started receiving this error after adding a worker yesterday. If I remove the worker and deploy, no issues. Communications.log: “accept failed, Too many open files 24” Running CentOS6. Bro 2.4.1. 17 Physical worker systems. 150 total worker processes. When adding the 18th worker (6 additional worker processes) logs slow to a crawl and the communications log is filled with the failure message. I’ve experimented with limits.conf and set a high soft and hard limits of open files. Also tried doubling the defaults, and many different combinations to no avail. Most of these caused bro to hang and stop logging. Others had no affect on the problem. Has anyone had to deal with this issue or have some ideas? Is there some hidden setting in bro where I can set open file limits? ---
**Author:** ![Seth\_Hall3](https://avatars.discourse-cdn.com/v4/letter/s/d6d6ee/32.png) [@Seth\_Hall3](https://community.zeek.org/u/Seth_Hall3)\ **Post date:** [November 1, 2016, 8:25pm UTC](https://community.zeek.org/t/accept-failed-too-many-open-files-24/4458/2 "2016-11-01T20:25:04Z")
There was an issue with file handles being left open when they weren't needed which will be fixed in 2.5 (and is fixed in the 2.5 beta). Also, in 2.5 you can run a cluster with a dedicated "logger" node which should improve some of the cluster behavior with such a large cluster. I would recommend jumping in and trying out the beta.   .Seth ---
**Author:** ![Azoff\_Justin\_S](https://avatars.discourse-cdn.com/v4/letter/a/dec6dc/32.png) [@Azoff\_Justin\_S](https://community.zeek.org/u/Azoff_Justin_S)\ **Post date:** [November 1, 2016, 9:16pm UTC](https://community.zeek.org/t/accept-failed-too-many-open-files-24/4458/3 "2016-11-01T21:16:21Z")
> > Has anyone had to deal with this issue or have some ideas? Is there some hidden setting in bro where I can set open file limits > > There was an issue with file handles being left open when they weren't needed which will be fixed in 2.5 (and is fixed in the 2.5 beta). Also, in 2.5 you can run a cluster with a dedicated "logger" node which should improve some of the cluster behavior with such a large cluster. > > I would recommend jumping in and trying out the beta. The 2 file descriptor leakage fixes were committed just after the 2.5 beta was released commit 520ed43eae4ce7bcd8bb22cfd9cb6d138c4a4fd7 Author: Daniel Thayer \ ---
**Author:** ![James\_inthe\_box](https://avatars.discourse-cdn.com/v4/letter/j/6f9a4e/32.png) [@James\_inthe\_box](https://community.zeek.org/u/James_inthe_box)\ **Post date:** [November 2, 2016, 2:13pm UTC](https://community.zeek.org/t/accept-failed-too-many-open-files-24/4458/4 "2016-11-02T14:13:32Z")
Give this a look: [http://posidev.com/blog/2009/06/04/set-ulimit-parameters-on-ubuntu/](http://posidev.com/blog/2009/06/04/set-ulimit-parameters-on-ubuntu/) James ---
**Author:** ![Matt\_Clemons](https://avatars.discourse-cdn.com/v4/letter/m/8c91f0/32.png) [@Matt\_Clemons](https://community.zeek.org/u/Matt_Clemons)\ **Post date:** [November 2, 2016, 3:53pm UTC](https://community.zeek.org/t/accept-failed-too-many-open-files-24/4458/5 "2016-11-02T15:53:47Z")
James, I tried all those options. Bro would hang when I changed the soft limit, and no matter what hard limit I set, it still produced errors. I’m going to do a parallel install of 2.5 and see if that fixes it. I have already tested, but was waiting for the full release. Thanks for you responses. ---
**Author:** ![James\_inthe\_box](https://avatars.discourse-cdn.com/v4/letter/j/6f9a4e/32.png) [@James\_inthe\_box](https://community.zeek.org/u/James_inthe_box)\ **Post date:** [November 2, 2016, 5:07pm UTC](https://community.zeek.org/t/accept-failed-too-many-open-files-24/4458/6 "2016-11-02T17:07:04Z")
You bet...sorry it didn't help. Would like to know what the resolution was once you find it. James ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\ **Post date:** [May 6, 2022, 3:44pm UTC](https://community.zeek.org/t/accept-failed-too-many-open-files-24/4458/7 "2022-05-06T15:44:14Z")