9.2.9 Snort Memory Bug [message #145127] |
Tue, 26 February 2019 06:03 |
billybob
Messages: 35 Registered: October 2018
|
|
|
|
I beta tested 9.2.9 and the snort / Intrusion Protection memory footprint has changed after the beta. I don't use snort since kerio is not my edge firewall, however I use it for content filtering which uses snort openAppId for application awareness.
During the beta, application analysis uses around 180 mb ram but goes to about 430 mb if you enable intrusion protection. This behavior has changed after the release of 9.2.9. Snort consumes the same amount of memory even though I don't have IPS enabled and I am only using application awareness. It doesn't make sense that snort application awareness would use the same ram as a fully loaded IPS system with all the snort rules.
Regards
Bill Seb
|
|
|