Skip to content

Flexbit exhaustion - MMAP_DEFAULT 10k #88

@bryant-smith

Description

@bryant-smith

The MMAP_DEFAULT is set to 10,000 on the sensor. When we receive an alert in the console for flexbit exhaustion, I went to the sensor and used saganpeek to see the active vs inactive counts. The active flexbits are only at 852 but the combined active and inactive are above the 10k threshold, 17227.

$ sudo saganpeek  | grep "Signature:" | wc -l
852
$ sudo saganpeek -a  | grep "Signature:" | wc -l
17227

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions