Re: Re: [opm] memory leak?

--- David Leadbeater <[email protected]> wrote:

> ongeboren wrote:
> [..]
> > <lirbopm> Number of connects: 275848
> (366.95/minute)
> [..]
> 
> > So, lets get back to the point and try to
> determine if
> > this is a leak and if this is the case fix it.
> 
> Just consider what BOPM is doing for a second, it is
> scanning
> several ports for each connection the number
> dependant on how
> many ports you have set in the configuration.
> 
> Say for example you have 10 ports for each host,
> this is 3670
> ports per minute. The default timeout is 30 seconds
> and say
> for example half of all connections have a drop all
> firewall
> (no idea how realistic that is), you could assume
> that a single
> connection will stay around for about 15 seconds.
> This means a
> scanner needs just over 900 fds to even have a hope
> of keeping up with
> your load.
> 
> I'm of course assuming you have been quite
> conservative here
> and are only scanning 10 ports on each host.
> 
> The output of fdstat interesting to see as well as
> knowing how you
> have BOPM setup..
> 

You did a very realistic approximation for the FDs!
I tried _once_ just for fun to scan more than 30 ports
on each host and the FDs in use jumped to about 12000.

Please, read my previous e-mail to the list for the
answers on your questions. Let me know if you would
need more details.

Regards,
ongeboren

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com