IPDB: Troubleshoot IPDB Extractor

Document created by RSA Information Design and Development on Jul 25, 2016
Version 1Show Document
  • View in full screen mode
 

This topic provides information about possible issues you may encounter while using the IPDB Extractor.

Possible Issues

               
ProblemPossible CausesSolutions
In a Linux environment, when IPDB Extractor is installed on a Virtual Machine, it fails to load and you are not able to view the meta to define an IPDB rule.

<dyou at="" can="" in="" log="" look="" the="">/var/log/messages file where the following message is displayed: Unable to allocate any memory in MemPages constructor. </dyou>
The IPDB Extractor service may not be able to allocate sufficient memory to the parser.To change the pool settings:
  1. In the Security Analytics menu, select AdministrationServices> IPDB Extractor > View> Explore.
  2. Change the value of /ipdbextractor/config/pool. packet.pages to a value lower than the existing configuration.
  3. Change the value of /ipdbextractor/config/pool.session.pages to a value lower than the existing configuration.
  4. Restart the  IPDBExtractor Service.

Recommended Values

                            
Virtual Machine Memory SizePacket pagesSession pages
>=24GB5000025000
>=17GB3000010000
>=9GB200007000
>=4GB100005000

Note: The above values are suggestions only. If the problem exists even after changing the configuration values, consider decreasing the values further.

You are here: Troubleshoot IPDB Extractor

Attachments

    Outcomes