Memory pb on 09a7 ?

Zeek
1

Hi,

Im use last bro 09a7

but bro memory use :

VSZ RSS CMD
96368 90568 /usr/local/bin/bro09a7_micro -i fxp1 bro.init mt http-request http-reply profiling dns

look prof.log :

0.000000 ------------------------
0.000000 Command line: /usr/local/bin/bro09a7_micro -i fxp1 bro.init mt http-request http-reply profiling dns
0.000000 ------------------------
0.000000 Memory: total=9656K total_adj=0K malloced: 0K
0.000000 Run-time: user+sys=0.0 user=0.0 sys=0.0 real=0.0
0.000000 Conns: total=0 current=0/0 mem=0K avg=NaN table=0K connvals=0K
0.000000 Conns: tcp=0/0 udp=0/0 icmp=0/0
0.000000 TCP-States: Inact. Syn. SA Part. Est. Fin. Rst.
0.000000 TCP-States:Inact.
0.000000 TCP-States:Syn.
0.000000 TCP-States:SA
0.000000 TCP-States:Part.
0.000000 TCP-States:Est.
0.000000 TCP-States:Fin.
0.000000 TCP-States:Rst.
0.000000 Connections expired due to inactivity: 0
0.000000 Total reassembler data: 0K
0.000000 Timers: current=2 max=2 mem=0K lag=0.00s
0.000000 NetworkTimer = 1
0.000000 ProfileTimer = 1
0.000000 Global_sizes > 100k: 0K
0.000000 Global_sizes total: 461K
1099436883.565372 ------------------------

...

1099602683.735772 ------------------------
1099602683.735772 Memory: total=90588K total_adj=80932K malloced: 0K
1099602683.735772 Run-time: user+sys=5120.8 user=4992.5 sys=128.3 real=165801.2
1099602683.735772 Conns: total=1838447 current=25325/25325 mem=37206K avg=1504.4 table=38701K connvals=25386K
1099602683.735772 Conns: tcp=25135/31084 udp=190/2502 icmp=0/0
1099602683.735772 TCP-States: Inact. Syn. SA Part. Est. Fin. Rst.
1099602683.735772 TCP-States:Inact. 10 1011 1
1099602683.735772 TCP-States:Syn. 117 7 1
1099602683.735772 TCP-States:SA
1099602683.735772 TCP-States:Part. 8 6 1
1099602683.735772 TCP-States:Est. 17384 5617 2
1099602683.735772 TCP-States:Fin. 2 860 41 23
1099602683.735772 TCP-States:Rst. 4 40
1099602683.735772 Connections expired due to inactivity: 1033831
1099602683.735772 Total reassembler data: 203K
1099602683.735772 Timers: current=37759 max=62252 mem=3884K lag=0.00s
1099602683.735772 ConnectionDeleteTimer = 70
1099602683.735772 ConnectionInactivityTimer = 190
1099602683.735772 DNSExpireTimer = 190
1099602683.735772 NetworkTimer = 1
1099602683.735772 ProfileTimer = 1
1099602683.735772 ScheduleTimer = 5124
1099602683.735772 TCPConnectionAttemptTimer = 594
1099602683.735772 TCPConnectionExpireTimer = 31558
1099602683.735772 TCPConnectionResetTimer = 32
1099602683.735772 Global_sizes > 100k: 0K
1099602683.735772 DNS::dns_sessions = 366K (291 entries)
1099602683.735772 distinct_low_ports = 604K (6721 entries)
1099602683.735772 distinct_ports = 656K (7499 entries)
1099602683.735772 FTP::ftp_data_expected = 99680K (1075 entries)
1099602683.735772 FTP::ftp_sessions = 118K (5 entries)
1099602683.735772 DNS::consistency_table = 1887K (4833 entries)
1099602683.735772 num_distinct_low_ports = 855K (6608 entries)
1099602683.735772 active_conn = 27983K (25213 entries)
1099602683.735772 HTTP::http_sessions = 2451K (2153 entries)
1099602683.735772 num_distinct_ports = 887K (6907 entries)
1099602683.735772 DNS::dns_history = 2533K (4833 entries)
1099602683.735772 Global_sizes total: 138583K

Possible help me ?

Regards

Rmkml@Wanadoo.fr

2

All,

Anybody saw this? Any ideas?

bro-0.9a7$ make
cd . && /bin/sh /home/anton/bro-0.9a7/missing --run autoheader
configure.in:367: warning: AC_TRY_RUN called without default to allow cross compiling
/usr/bin/autoheader: Symbol `RETSIGVAL' is not covered by /usr/share/autoconf/acconfig.h
/usr/bin/autoheader: Symbol `ns_msg' is not covered by /usr/share/autoconf/acconfig.h
make: *** [stamp-h.in] Error 1

anton$ cat /etc/redhat-release
Red Hat Linux release 7.3 (Valhalla)

anton$ uname -a
Linux bastion 2.4.18-3 #1 Thu Apr 18 07:37:53 EDT 2002 i686 unknown

Best,

3

Hey Anton,

nope sorry -- I'll try to find a RH 7.3 machine around to try to
reproduce this. Thanks for pointing out. Can you post the version number
of your autoconf?

Cheers,
Christian.

4

reproduce this. Thanks for pointing out. Can you post the version number
of your autoconf?

autoconf-2.13-17

Best,

5

Anoton,

   Would it be possible for you to upgrade your autotools suite? ( 2.13
came out in Jan of 1999, which makes it almost 6 years old!) The minimal
requirements that I have been using with bro are autoconf 2.53 (which came
out in 2002) and automake 1.5 (2001) and I know that bro will work with
autoconf 2.59 and automake 1.8.5 (both about a year old).

Cheers,
jason

Anton Chuvakin, Ph.D. wrote:

6

came out in Jan of 1999, which makes it almost 6 years old!) The minimal
requirements that I have been using with bro are autoconf 2.53 (which came

I just linked autoconf to point to 2.53 version and get the same error...