# Serious problem running bro-pub-0.8a48 on OpenBSD 3.3

**URL:** <https://community.zeek.org/t/serious-problem-running-bro-pub-0-8a48-on-openbsd-3-3/442>\
**Category:** Zeek\
**Created:** [December 16, 2003, 5:08pm UTC](https://community.zeek.org/t/serious-problem-running-bro-pub-0-8a48-on-openbsd-3-3/442 "2003-12-16T17:08:44Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Vern](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/vern/32/630_2.png) [@Vern](https://community.zeek.org/u/Vern)\
**Post date:** [December 16, 2003, 5:08pm UTC](https://community.zeek.org/t/serious-problem-running-bro-pub-0-8a48-on-openbsd-3-3/442/1 "2003-12-16T17:08:44Z")

</div>

My apologies for dropping the ball on this thread :-(.

> - I am running this on a P3-600 MHz, 200 MB memory system. Is that too  
> slow?

It crticially depends on your traffic volume. In my experience, a machine  
like that should be able to monitor a network on the order of a hundred  
machines with a 100 Mbps link; but that's somewhat a guess, as most of my  
experience is with bigger/faster networks.

> - The size of the 'bro.core' file upon the seg-fault is of the order of 500  
> MB.  
> Isn't that weird?

This very likely indicates that Bro is crashing because you've reached  
the process "datasize" limit. See what "limit datasize" reports.

> The response time of my system also increases drastically

That's because, given 200 MB of real memory, when Bro grows beyond that  
towards 500 MB, you suffer a great deal of paging.

It appears very likely that you are encountering a memory leak.  
Try (1) running the latest release (I just announced 0.8a58),  
and, if the problem persists, turning on memory statistics, which  
you can do by including "statistics.bro" as a policy script on the  
command line or via @load.

&nbsp;&nbsp;&nbsp;&nbsp;Vern

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:36pm UTC](https://community.zeek.org/t/serious-problem-running-bro-pub-0-8a48-on-openbsd-3-3/442/2 "2022-05-06T15:36:53Z")

</div>