bro crashes with memory error

Zeek
1

Running bro 2.5.3 on ubuntu 17.10. I have a 8Gb of memory on an intel based platform.

This is a single mode instance and I compiled 2.5.3 from scratch.

I get the following when using broctl deploy

src/central_freelist.cc:333] tcmalloc: allocation failed 16384
src/central_freelist.cc:333] tcmalloc: allocation failed 8192
out of memory in new.
fatal error: out of memory in new.

out of memory in new.
fatal error: out of memory in new.

If I run with pf_ring as the load balancer the manager crashes but bro processes will run until time to rotate files.

2

Hi Ludwig!

I think you're going to have to give more information. A process table when the box is low on memory would be helpful. Run this...

ps auwwxf | grep bro

   .Seth