FTD snort memory allocation "Policy Configuration Memory"

[Alex-Pr]

Hi Cisco Community

Is there a way to get a more broken down view to see what is actually consuming the most memory in the "Policy Configuration Memory"

I am getting some warnings about it using too much memory so we tried to delete some ACLs that were not in use plus there was a few ACLs that had huge object lists but it didn't make that big of a difference.  

What I'd like to see is what is really the biggest memory consumers within "Policy Configuration Memory"

Thanks,

[ckleopa · Accepted solution]

Yes, escalations has certainly some tools around this, so it maybe better to open a TAC case to better assist you on better balancing your memory usage within snort. Just a general suggestion though, snort3 is using much less memory than snort2 so if you are in that version right now, I would look into upgrading to the newer snort engine.