On 2018-06-26, RLW <seran...@o2.pl> wrote: > Hello, > > info: OpenBSD 4.8 (em interface) and 6.3 (ix interface), arpalert-2.0.12 > (downloaded and compiled).
Not related to this problem, but 4.8 is *really* old now, there have been many security fixes since then. > problem: When arpalert is running disk space is being consumed, when > arpalert is stopped (after 20 minutes of being active) disk space is > freed (~3MB) (~10mb per hour). > > Is there something wrong with this program or is it a normal behavior > when bpf is used? (some buffer grows??) I don't know arpalert, but that's not normal for things using bpf. What files does it have open? You can run fstat and get the filesystem mountpoint and inode number of any open files, then use find to locate them: # find /mountpoint -inum 1234 That might give some clues as to what's happening.