Memory leak?

I had ipban open for about 2 months (2022-12-08~2023-02-06). At the time I closed it today, it was using up to 19000 MB of memory.

I wonder if ipban might have a memory leak.

• I’m using IPBan-Windows-x64_1_8_0
• logs:

full log

Creating default nlog.config file
2022-12-08 16:15:13.3741|WARN|IPBan|Initializing service
2022-12-08 16:15:13.4228|WARN|IPBan|Detecting os version...
2022-12-08 16:15:13.5068|WARN|IPBan|OS version detected: Name: Windows, Version: 10.0.19045, Friendly Name: Microsoft Windows 10 ???, Description: Microsoft Windows 10.0.19045, app version: 1.8.0
2022-12-08 16:15:13.5364|WARN|IPBan|Running as a console app
2022-12-08 16:15:13.6244|WARN|IPBan|Preparing to run service
2022-12-08 16:15:13.6303|WARN|IPBan|Starting service
2022-12-08 16:15:13.6303|WARN|IPBan|Running service
2022-12-08 16:15:14.2013|WARN|IPBan|IPBan is free software created and refined over many years.
2022-12-08 16:15:14.2013|WARN|IPBan|Please consider upgrading to the pro version for more advanced functions, shared ban lists and much more.
2022-12-08 16:15:14.2139|WARN|IPBan|Learn more at https://ipban.com
2022-12-08 16:15:14.2139|INFO|IPBan|Initializing IPBan database at Data Source=E:\gTools\IPBan-Windows-x64_1_8_0\ipban.sqlite;Cache=Shared;
2022-12-08 16:15:14.4170|WARN|IPBan|IPBan service started and initialized
2022-12-08 16:15:14.4170|WARN|IPBan|Log levels: True,True,True,True,False,False
2022-12-08 16:15:15.9116|INFO|IPBan|Config file changed
2022-12-08 16:15:15.9392|INFO|IPBan|Adding log file to parse: C:/Program Files/Microsoft/Exchange Server/*/TransportRoles/Logs/FrontEnd/ProtocolLog/**.log
2022-12-08 16:15:15.9392|INFO|IPBan|Adding log file to parse: C:/Program Files/Smarter Tools/Smarter Mail/**/*.log
2022-12-08 16:15:15.9392|INFO|IPBan|Adding log file to parse: C:/Program Files (x86)/Smarter Tools/Smarter Mail/**/*.log
2022-12-08 16:15:15.9392|INFO|IPBan|Adding log file to parse: C:/SmarterMail/logs/**/*.log
2022-12-08 16:15:15.9392|INFO|IPBan|Adding log file to parse: C:/Smarter Mail/logs/**/*.log
2022-12-08 16:15:15.9392|INFO|IPBan|Adding log file to parse: C:/Program Files (x86)/Mail Enable/Logging/SMTP/SMTP-Activity-*.log
2022-12-08 16:15:15.9392|INFO|IPBan|Adding log file to parse: C:/Program Files/Mail Enable/Logging/SMTP/SMTP-Activity-*.log
2022-12-08 16:15:15.9392|INFO|IPBan|Adding log file to parse: C:/Program Files (x86)/Mail Enable/Logging/IMAP
2022-12-08 16:15:15.9392|INFO|IPBan|Adding log file to parse: C:/Program Files/Mail Enable/Logging/IMAP
2022-12-08 16:15:15.9392|INFO|IPBan|Adding log file to parse: C:/Program Files/Tomcat/logs/**/*access_log*.txt
2022-12-08 16:15:15.9392|INFO|IPBan|Adding log file to parse: /var/log/httpd/access_log
2022-12-08 16:15:15.9392|INFO|IPBan|Adding log file to parse: C:/IPBanCustomLogs/**/*.log
2022-12-08 16:15:16.0383|WARN|IPBan|Loaded firewall type DigitalRuby.IPBanCore.IPBanWindowsFirewall
2022-12-08 16:15:16.0703|WARN|IPBan|Syncing firewall and ipban.sqlite database...
2022-12-08 16:15:16.1224|WARN|IPBan|0 total ip addresses in the ipban.sqlite database
2022-12-08 16:15:16.1411|WARN|IPBan|Initialized event viewer with query string: <QueryList><Query Id='1' Path='Security'><Select Path='Security'>*[System[(band(Keywords,9227875636482146304))]]</Select></Query><Query Id='2' Path='Security'><Select Path='Security'>*[System[(band(Keywords,9227875636482146304))]]</Select></Query><Query Id='3' Path='Application'><Select Path='Application'>*[System[(band(Keywords,36028797018963968))]]</Select></Query><Query Id='4' Path='Application'><Select Path='Application'>*[System[(band(Keywords,40532396646334464))]]</Select></Query><Query Id='5' Path='Application'><Select Path='Application'>*[System[(band(Keywords,36028797018963968))]]</Select></Query><Query Id='6' Path='Application'><Select Path='Application'>*[System[(band(Keywords,36028797018963968))]]</Select></Query><Query Id='7' Path='System'><Select Path='System'>*[System[(band(Keywords,36028797018963968))]]</Select></Query><Query Id='8' Path='Application'><Select Path='Application'>*[System[(band(Keywords,36028797018963968))]]</Select></Query><Query Id='9' Path='OpenSSH/Operational'><Select Path='OpenSSH/Operational'>*[System[(band(Keywords,4611686018427387904))]]</Select></Query><Query Id='10' Path='Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational'><Select Path='Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational'>*[System[(band(Keywords,4611686018427387904))]]</Select></Query><Query Id='11' Path='Application'><Select Path='Application'>*[System[(band(Keywords,36028797018963968))]]</Select></Query><Query Id='12' Path='System'><Select Path='System'>*[System[(band(Keywords,36028797018963968))]]</Select></Query></QueryList>
2022-12-08 16:15:16.1411|WARN|IPBan|Ignoring event viewer paths: VisualSVNServer
2022-12-08 16:15:16.3793|INFO|IPBan|Local ip address: 172.16.0.1
2022-12-08 16:15:19.5032|INFO|IPBan|Remote ip address: XXX.XXX.162.86
2022-12-08 16:15:19.5032|INFO|IPBan|FQDN: wos-PC
2022-12-08 16:15:19.5370|WARN|IPBan|Updating firewall with 0 entries...
2022-12-08 16:15:19.5370|INFO|IPBan|Firewall entries updated:
2022-12-08 16:15:19.5666|WARN|IPBan|IPBan is running correctly. You can perform a failed ssh or rdp login and watch this log to verify functionality.

No more logs until I close ipban.

[jjxtra]

@inkydragon If I am reading your screenshot right it says it was using 53gb of private bytes and 2 tb of virtual memory?

This note from releases might be relevant:

[2022-09-21] Critical memory leak fix, please re-download and re-deploy 1.8.0 version if installed before 2022-09-21

[jjxtra]

If it helps, I’ve had it running on a win server 2016 for 6 months without issue. But I am not perfect, so there could be some sort of issue in certain circumstance. Here is the profiler to use if it happens again (they have a free trial): https://www.jetbrains.com/dotmemory/