I believe I had this problem starting with 8.1 and then I stopped using snort altogether and didn't test it for 8.2 beta so here is the problem again for 8.3 beta.
Reloading snort uses significantly more ram compared to a normal start.
1.The first screenshot below shows the memory usage after regular start by enabling IPS in webadmin.
2 & 3. Reload IPS by adding another interface or change an attack pattern rule and two instances of snort spawn. This consumes large amounts of cpu and ram and finally only one instance is left. But the memory consumption increases dramatically after the reload.
Regards
Bill.
