# Memory consumption of a single table entry

**URL:** <https://community.zeek.org/t/memory-consumption-of-a-single-table-entry/712>\
**Category:** Zeek\
**Created:** [March 1, 2005, 10:21am UTC](https://community.zeek.org/t/memory-consumption-of-a-single-table-entry/712 "2005-03-01T10:21:58Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Roman\_Hiestand](https://avatars.discourse-cdn.com/v4/letter/r/f0a364/32.png) [@Roman\_Hiestand](https://community.zeek.org/u/Roman_Hiestand)\
**Post date:** [March 1, 2005, 10:21am UTC](https://community.zeek.org/t/memory-consumption-of-a-single-table-entry/712/1 "2005-03-01T10:21:58Z")

</div>

hello!

I'm using Bro since quite a while and so far I'm quite happy with the tool.

Now, I have a questions concerning the memory consumption. I'm running my own  
Bro script which is given below. I have installed the latest version 0.9a8 of  
Bro on a Suse Linux.

I started Bro, sent 9'844 packets to random IPs. Afterwards, prof.log gives me  
the following information:

1109672099.923449 Global\_sizes \> 100k: 0K  
1109672099.923449 test\_table = 1340K (9844 entries)

The tables is, as given below, indexed by destination IP and the entries are of  
type bool. One entry uses 139 Bytes (= 1340 KB / 9844 entries).  
I do not understand why one entry uses that much of memory. An IP can be stored  
in 4 Byte and the table content of type bool in 1 bit. I can imagine that Bro  
uses memory for the Hash or other information. But this does not require 139  
Bytes.

Can you please explain me, why Bro uses this much of memory for one table entry  
and what I can do to avoid this high memory consumption.

Cheers,  
Roman

#script test.bro

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:37pm UTC](https://community.zeek.org/t/memory-consumption-of-a-single-table-entry/712/2 "2022-05-06T15:37:24Z")

</div>


