Kat, Is ossec-analysisd using a high percentage of CPU (more than 5%)? That was what I experienced. Since I upgraded to CentOS (RHEL) 5.6, I haven't seen the issue again.
Thanks, -- Doug Burks, GSE, CISSP President, Greater Augusta ISSA http://augusta.issa.org http://securityonion.blogspot.com On Wed, May 4, 2011 at 12:11 PM, Kat <[email protected]> wrote: > RHEL 5.3 > > Only "special" update is PHP 5.3, which would have nothing to do with > OSSEC, but mentioning it. > > I would be happy to supply some debug info. > > It was working flawlessly when first installed, then they just started > dropping off. Agents are a mixture of AIX 6.1 , RHEL 5.3 and Solaris > 10 > The only agents that have never exhibited any problems are the Windoze > boxes. > > -k > > On May 4, 10:59 am, "dan (ddp)" <[email protected]> wrote: >> What OS/distro/revision are you using on your manager system? >> Daniel Cid has offered to help track it down, but he needs access to a >> system showing this issue. >> dan >
