Fwd: argus-clients-3.0.7.4 memory consumption

[Woody K.]

Some added information I missed.

System:  Linux localhost 2.6.32-279.19.1.el6.x86_64 #1 SMP Wed Dec 19
07:05:20 UTC 2012 x86_64 x86_64 x86_64 GNU/Linux
Arch:    x86_64
Paths:    /usr/local/bin/ra /usr/bin/make /usr/bin/gmake /usr/bin/gcc
/usr/bin/cc
GCC:     Using built-in specs.
Target: x86_64-redhat-linux
Configured with: ../configure --prefix=/usr --mandir=/usr/share/man
--infodir=/usr/share/info
--with-bugurl=http://bugzilla.redhat.com/bugzilla--enable-bootstrap
--enable-shared --enable-threads=posix
--enable-checking=release --with-system-zlib --enable-__cxa_atexit
--disable-libunwind-exceptions --enable-gnu-unique-object
--enable-languages=c,c++,objc,obj-c++,java,fortran,ada
--enable-java-awt=gtk --disable-dssi
--with-java-home=/usr/lib/jvm/java-1.5.0-gcj-1.5.0.0/jre
--enable-libgcj-multifile --enable-java-maintainer-mode
--with-ecj-jar=/usr/share/java/eclipse-ecj.jar --disable-libjava-multilib
--with-ppl --with-cloog --with-tune=generic --with-arch_32=i686
--build=x86_64-redhat-linux
Thread model: posix
gcc version 4.4.6 20120305 (Red Hat 4.4.6-4) (GCC)


On Mon, Jan 21, 2013 at 5:36 PM, Woody K <woodyk at gmail.com> wrote:

> Hello,
>
> I would like to start off by saying that the netflow v9 support in version
> 3.0.7.4 appears to be spot on.  I am however running into an issue with
> rabins consuming large amounts of RAM when it has been running for over 4
> hours.  If I allow it to continue it will consume all available RAM and
> crash. Here is how I am currently using argus and details on the system it
> is on.
>
> Version: argus-clients 3.0.7.4
> Installation: ./configure && make && make install
> System Memory: 64GB
> System CPU: Dual Intel(R) Xeon(R) E5-2690 0 @ 2.90GHz 8 Core
> Flows p/s: ~750
> Netflow version: v9 and v5
>
> /usr/local/bin/radium -d -C 5000 -P 555
> /usr/local/bin/rabins -S localhost:555 -m proto daddr/32 -B 1m -M hard
> time 1m -p0 -s stime proto daddr spkts sbytes -n -u -c, - dst net
> 192.168.10.0/24 or 172.16.10.0/24 or 192.168.1.0/24 or 192.168.50.0/24
>
> Any suggestions would be appreciated.  If there is any specific output or
> information that would be useful to you please let me know.  Thanks.
>
> --
> Woody
>
>


-- 
- Woody
- woodyk at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130121/2a3c19db/attachment.html>