On 05/11/2011 12:05 PM, Jefferson, Shawn wrote:
Hi, I have OSSEC installed on Ubuntu 10.04.2 LTS 64-bit, and the syscheckd process is taking a lot of CPU time, and has for the past couple of days. I haven’t seen this behaviour on other installations, but on three of these systems that are configured similiarly. Any suggestions on where to look? Rootkitcheck?
Try running syscheck in debug mode with the -d argument. We might be able to get more information about what it is trying to scan.
