https://redmine.openinfosecfoundation.org/https://redmine.openinfosecfoundation.org/favicon.ico?17011170022013-10-26T10:21:21ZOpen Information Security FoundationSuricata - Feature #845: Memory consumption in stats.loghttps://redmine.openinfosecfoundation.org/issues/845?journal_id=36122013-10-26T10:21:21ZVictor Julienvictor@inliniac.net
<ul><li><strong>Target version</strong> set to <i>TBD</i></li></ul> Suricata - Feature #845: Memory consumption in stats.loghttps://redmine.openinfosecfoundation.org/issues/845?journal_id=60232016-01-01T18:18:00ZAndreas Herzoisf@herzandreas.de
<ul><li><strong>Assignee</strong> set to <i>OISF Dev</i></li></ul> Suricata - Feature #845: Memory consumption in stats.loghttps://redmine.openinfosecfoundation.org/issues/845?journal_id=123042019-05-28T21:35:21ZAndreas Herzoisf@herzandreas.de
<ul></ul><p>This would be really helpful but would it also increase the load to calculate it each time?</p> Suricata - Feature #845: Memory consumption in stats.loghttps://redmine.openinfosecfoundation.org/issues/845?journal_id=123052019-05-28T21:46:14ZPeter Manevpetermanev@gmail.com
<ul></ul><p>Most of these mem stats are already in :</p>
<pre>
tcp.memuse | Total | 2240000000
tcp.reassembly_memuse | Total | 384780288
http.memuse | Total | 260882
ftp.memuse | Total | 696
flow.memuse | Total | 7612575672
</pre> Suricata - Feature #845: Memory consumption in stats.loghttps://redmine.openinfosecfoundation.org/issues/845?journal_id=123062019-05-28T21:54:28ZAndreas Herzoisf@herzandreas.de
<ul></ul><p>So we have still missing:</p>
<p>- dns<br />- defrag<br />- host table<br />- ippair</p>
<p>stream is covered by the tcp ones.<br />At least this is the list I could come up with based on possible memory settings in the suricata.yaml.</p>
<p>Do you see any others?</p> Suricata - Feature #845: Memory consumption in stats.loghttps://redmine.openinfosecfoundation.org/issues/845?journal_id=123072019-05-28T22:32:58ZPeter Manevpetermanev@gmail.com
<ul></ul><p>For some of those we have memcaps counters(dns for example) so it still helps a bit. Don't see any others for now.</p> Suricata - Feature #845: Memory consumption in stats.loghttps://redmine.openinfosecfoundation.org/issues/845?journal_id=293072023-07-21T08:25:01ZPhilippe Antoine
<ul><li><strong>Target version</strong> changed from <i>TBD</i> to <i>8.0.0-beta1</i></li></ul><p>Looking for <code>memcap</code> in suricata .yaml.in</p>
<p>We have<br />- ftp : in stats<br />- http : in stats<br />- http.byterange : TODO also to put in MemcapCommand in unix socket<br />- datasets : TODO<br />- defrag : TODO (only stats, already for socket)<br />- flow : ok<br />- stream : ok<br />- reassembly : TODO (only stats, already for socket)<br />- host : TODO (only stats, already for socket)<br />- ippair : TODO (only stats, already for socket)</p>