# Virtual Memory exceeded **URL:** \ **Category:** Zeek\ **Created:** [April 30, 1999, 8:02am UTC](https://community.zeek.org/t/virtual-memory-exceeded/49 "1999-04-30T08:02:39Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Vern](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/vern/32/630_2.png) [@Vern](https://community.zeek.org/u/Vern)\ **Post date:** [April 30, 1999, 8:02am UTC](https://community.zeek.org/t/virtual-memory-exceeded/49/1 "1999-04-30T08:02:39Z")
> We've got some trouble with bro... > After about 2 hours running bro (mt script), bro crash with a : > "Virtual Memory exceeded in 'new'" Error. How large a volume traffic stream are you monitoring? (how many hosts, connections/sec, raw link speed) What filter (bro -F) are you using? > Can someone suggest me what I can do about this (I've already increased > RAM and swap from 32Mb to 64Mb) ? For our environment (5000+ hosts, FDDI link) we run with a lot more memory than that. > Is there a way to check what part of bro is taking whole this memory (stream > buffers or active sessions table, ...) It will mostly be the active sessions.     Vern ---
**Author:** ![Alexandre\_Dumortier](https://avatars.discourse-cdn.com/v4/letter/a/41988e/32.png) [@Alexandre\_Dumortier](https://community.zeek.org/u/Alexandre_Dumortier)\ **Post date:** [May 3, 1999, 9:36am UTC](https://community.zeek.org/t/virtual-memory-exceeded/49/2 "1999-05-03T09:36:05Z")
> \> We've got some trouble with bro... > \> After about 2 hours running bro (mt script), bro crash with a : > \> "Virtual Memory exceeded in 'new'" Error. > > How large a volume traffic stream are you monitoring? (how many hosts, > connections/sec, raw link speed) What filter (bro -F) are you using? # hosts: about 60 # connections/sec: no idea. A lot of HTTP connections # raw link speed: 10Mb/s (ethernet-shared) Bro runs with no filter specified (bro -i eth0 mt.bro) We have 64Mb RAM and 64 Mb swap. The problem is that when Bro runs, the memory used by the application never decreases (even when the traffic decreases, during the week-end for example) Everything is ok with the size of the log files. Another remark we have. During our monitoring of the network, we get entries in bro.log: pm\_getport unknown-1073741824 (timeout) how could such a huge port number be used ? Alexandre Dumortier Patrick Verstraete Universite catholique de Louvain, Belgium ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\ **Post date:** [May 6, 2022, 3:36pm UTC](https://community.zeek.org/t/virtual-memory-exceeded/49/3 "2022-05-06T15:36:06Z")