I have installed with the latest source from this location. The version number is still 2.5.1? I want to make sure I'm using the correct source.
It hasn't seemed to help so far, but I'll let it run for awhile longer and see if it eventually stops. -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Daniel Cid Sent: Wednesday, May 11, 2011 6:21 PM To: [email protected] Subject: Re: [ossec-list] syscheckd high cpu usage Can you also try the latest snapshot? I fixed a bug on syscheck a little while ago related to it (it was going 100% on my ubuntu server as well): https://bitbucket.org/dcid/ossec-hids/ *just go on download source to get it. Thanks, On Wed, May 11, 2011 at 9:14 PM, Michael Starks <[email protected]> wrote: > On 05/11/2011 12:05 PM, Jefferson, Shawn wrote: >> >> Hi, >> I have OSSEC installed on Ubuntu 10.04.2 LTS 64-bit, and the syscheckd >> process is taking a lot of CPU time, and has for the past couple of >> days. I haven't seen this behaviour on other installations, but on three >> of these systems that are configured similiarly. Any suggestions on >> where to look? Rootkitcheck? > > Try running syscheck in debug mode with the -d argument. We might be able to > get more information about what it is trying to scan. > >
