Project

General

Profile

Bug #2791

OOM errors on low end devices

Added by Shivani Bhardwaj 25 days ago. Updated 5 days ago.

Status:
Closed
Priority:
High
Target version:
Affected Versions:
Effort:
Difficulty:

Description

As per a recent discussion on the mailing list, suricata-update takes up too much memory to run and causes OOM errors on low end devices like RPi.

History

#1

Updated by Shivani Bhardwaj 25 days ago

  • Status changed from New to Assigned
#2

Updated by Victor Julien 25 days ago

Perhaps there are multiple issues. The 'test' step where Suricata itself validates the new rules spins up a new Suricata next to a running one. This will lead to duplicate mem use for Suricata itself. This would not be suricata-update's fault of course.

#3

Updated by Jason Ish 5 days ago

  • Status changed from Assigned to Closed
  • Target version changed from Soon to 1.0.4

Marking closed for now. I think we've addressed all the low hanging fruit items we can without a redesign of the internals. Feedback from the user shows he is able to update the rules, without these changes, but has to use the --no-test parameter.

https://github.com/OISF/suricata-update/commit/5cea9cf4f29fca00ede5c0882f2f9356415f3aba

Also available in: Atom PDF