IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

6.x Sensor Reporting Additional RAM Useage

6.x Sensor Reporting Additional RAM Useage


Cb Response 6.x Sensors


Sensor Health Scores reporting elevated ram usage


Versions 6.0 and 6.1 of the Response server can retain significantly more information than earlier versions.  This increased retention is partly due to the fact that the server is now provided complete datasets by the sensor.

Earlier versions of the sensor constantly sent partial data to the server (which would then have to coalesce these incomplete data segments into coherent wholes, an operation that required storage space and processing time).

Instead, the new sensors store more information locally (e.g. maintaining the state of parent processes, incomplete process metadata, tracking potentially-suppressed processes, etc.) and then organize it into complete segments prior to sending the information to the server.  This means that 6.0 and higher versions of cb.exe may have a larger memory footprint and higher CPU utilization when compared to earlier versions.

The latest version of the sensors, 6.1.2-win and 6.1.2-osx, improves reporting of process memory by periodically calling memory manager functions to clean up memory overhead caused by fragmentation. The operating system often can hold onto unused memory for performance reasons and report higher consumption than the program is actually using.


Reported elevated memory usage is expected in 6.x sensors, although upgrading to 6.1.2-win and 6.1.2-osx should reduce reported usage. Sensor Health Scores will be significantly revised in a future version of the product.

Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Creation Date: