Re: [psad-discuss] psad process high memory usage

2010-03-07 Thread Rodney McKee
- Michael Rash m...@cipherdyne.org wrote: On Mar 05, 2010, Rodney McKee wrote: Michael, - Michael Rash m...@cipherdyne.org wrote: On Mar 05, 2010, Rodney McKee wrote: William, Certainly agree with enabling the option. What is the output

Re: [psad-discuss] psad process high memory usage

2010-03-07 Thread Michael Rash
On Mar 07, 2010, Rodney McKee wrote: - Michael Rash m...@cipherdyne.org wrote: On Mar 05, 2010, Rodney McKee wrote: Michael, - Michael Rash m...@cipherdyne.org wrote: On Mar 05, 2010, Rodney McKee wrote: William, Certainly agree

Re: [psad-discuss] psad process high memory usage

2010-03-04 Thread Rodney McKee
Ok, some additional info, we do have a ridiculous/constant amount of inbound traffic on 1 ip address (port 443) over a LONG period of time that I've just been ignoring as is goes nowhere. Could this possibly be causing an issue. I recalled that sometime back looking to drop a temp web server on

Re: [psad-discuss] psad process high memory usage

2010-03-04 Thread Rodney McKee
William, Certainly agree with enabling the option. Problem is this is our quietest network. My concern is that this could be a small memory leak or that something is not being handled correctly in the process. I'm just wonder if the condition mentioned in my recent email with LOTS of