Project

General

Profile

Actions

Support #3976

closed

High memory usage

Added by OB BA over 3 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Normal
Affected Versions:
Label:

Description

Hello,

I observe high memory consumption with swap usage with Suricata v4.1.2 without going down.
I know it's an old version but I can't upgrade at the moment. Could you help me to identify the root cause ?

my afpacket_f.yaml

%YAML 1.1
---
af-packet:
  - interface: eth2
    threads: 4
    cluster-id: 99
    cluster-type: cluster_cpu
    defrag: yes
    ring-size: 20000
  - interface: eth1
    threads: 4
    cluster-id: 98
    cluster-type: cluster_cpu
    defrag: yes
    ring-size: 20000
  - interface: default

vnstat -i eth1

Database updated: Tue Sep 22 11:55:35 2020

   eth1 since 02/01/19

          rx:  99.52 TiB      tx:  2.22 MiB      total:  99.52 TiB

   monthly
                     rx      |     tx      |    total    |   avg. rate
     ------------------------+-------------+-------------+---------------
       Aug '20      5.03 TiB |     140 KiB |    5.03 TiB |   16.13 Mbit/s
       Sep '20      4.44 TiB |      97 KiB |    4.44 TiB |   20.56 Mbit/s
     ------------------------+-------------+-------------+---------------
     estimated        --     |      --     |      --     |

   daily
                     rx      |     tx      |    total    |   avg. rate
     ------------------------+-------------+-------------+---------------
     yesterday    229.58 GiB |       5 KiB |  229.58 GiB |   22.29 Mbit/s
         today     98.55 GiB |       2 KiB |   98.55 GiB |   19.26 Mbit/s
     ------------------------+-------------+-------------+---------------
     estimated        --     |      --     |      --     |

Thanks


Files

capture.png (177 KB) capture.png OB BA, 09/22/2020 09:49 AM
suricata.yaml (46.6 KB) suricata.yaml OB BA, 09/28/2020 01:51 PM
Actions

Also available in: Atom PDF