-
Notifications
You must be signed in to change notification settings - Fork 2
Resource Usage
autoban can use a significant amount of memory on the host you run it on. The more traffic you have and the more data you configure autoban to look at, the more it will use (possibly hundreds or thousands of MB).
autoban can max out all of your cpus/cores. Some tasks fork, such as searching for data on ip addresses. The number of forks is configurable in autoban.conf and you will need to see what values work best for your use case.
To diagnose the resources usage, you can use time -l autoban.pl on OS X or time -v autoban.pl on linux.
Lastly, depending on your ES cluster and how much data you are analyzing, this can put a high load on your ES cluster (or maybe crash it...).
The autoban project © Jeremy Falling. Published under the GNU General Public License version 3