diff --git a/src/detection/memory/memory_bsd.c b/src/detection/memory/memory_bsd.c index 086660e38..80a2c8ff1 100644 --- a/src/detection/memory/memory_bsd.c +++ b/src/detection/memory/memory_bsd.c @@ -11,13 +11,11 @@ const char* ffDetectMemory(FFMemoryResult* ram) { int32_t pagesFree = ffSysctlGetInt("vm.stats.vm.v_free_count", 0) + ffSysctlGetInt("vm.stats.vm.v_inactive_count", 0) + ffSysctlGetInt("vm.stats.vm.v_cache_count", 0); int64_t bytesCache = ffSysctlGetInt64("vfs.bufspace", 0); - #ifndef __DragonFly__ - int64_t bytesArc = ffSysctlGetInt64("kstat.zfs.misc.arcstats.size", 0) - ffSysctlGetInt64("kstat.zfs.misc.arcstats.c_min", 0); - #else - int64_t bytesArc = 0; - #endif + int64_t bytesArc = ffSysctlGetInt64("kstat.zfs.misc.arcstats.size", 0); + if (bytesArc > 0) bytesArc -= ffSysctlGetInt64("kstat.zfs.misc.arcstats.c_min", 0); + if (bytesArc < 0) bytesArc = 0; - ram->bytesUsed = ram->bytesTotal - (uint64_t) pagesFree * instance.state.platform.sysinfo.pageSize - (uint64_t) bytesCache - (uint64_t) (bytesArc > 0 ? bytesArc : 0); + ram->bytesUsed = ram->bytesTotal - (uint64_t) pagesFree * instance.state.platform.sysinfo.pageSize - (uint64_t) bytesCache - (uint64_t) bytesArc; return NULL; }