I get this error when trying to install this version: /usr/bin/ld: cannot find -lssl /usr/bin/ld: cannot find -lcrypto collect2: ld returned 1 exit status make[1]: *** [auth1] Error 1 make[1]: Leaving directory `/root/installs/dcid-ossec-hids-78e0ab251a6c/src/os_auth'
-----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Daniel Cid Sent: Tuesday, May 24, 2011 2:27 PM To: [email protected] Subject: Re: [ossec-list] syscheckd high cpu usage Can you try this snapshot: https://bitbucket.org/dcid/ossec-hids/get/78e0ab251a6c.tar.gz Should have a fix for that... Thanks, On Tue, May 24, 2011 at 5:47 PM, Jefferson, Shawn <[email protected]> wrote: > Hi, > > Responding to myself here... > > The high CPU utilization issue seems to be caused by checking either /lib or > /lib64 on my Ubuntu 64-bit machine. This will cause the machine to lock one > CPU at 100% for days and days. Should I not be checking those directories > (maybe something about Linux I'm not aware of precludes this.)? > > -----Original Message----- > From: [email protected] [mailto:[email protected]] On > Behalf Of Jefferson, Shawn > Sent: Tuesday, May 17, 2011 9:06 AM > To: [email protected] > Subject: RE: [ossec-list] syscheckd high cpu usage > > Hi Daniel, > > Unfortunately the latest version that I downloaded, did not fix this problem. > Syscheckd still pegs the CPU at 100% for days, and doesn't stop. Syscheckd > -d doesn't give much detail unfortunately. Anything else I can try to narrow > the problem down? > > -----Original Message----- > From: [email protected] [mailto:[email protected]] On > Behalf Of Jefferson, Shawn > Sent: Friday, May 13, 2011 4:12 PM > To: [email protected] > Subject: RE: [ossec-list] syscheckd high cpu usage > > I have installed with the latest source from this location. The version > number is still 2.5.1? I want to make sure I'm using the correct source. > > It hasn't seemed to help so far, but I'll let it run for awhile longer and > see if it eventually stops. > > -----Original Message----- > From: [email protected] [mailto:[email protected]] On > Behalf Of Daniel Cid > Sent: Wednesday, May 11, 2011 6:21 PM > To: [email protected] > Subject: Re: [ossec-list] syscheckd high cpu usage > > Can you also try the latest snapshot? I fixed a bug on syscheck a > little while ago related to it (it was going 100% on my > ubuntu server as well): > > https://bitbucket.org/dcid/ossec-hids/ > > *just go on download source to get it. > > Thanks, > > On Wed, May 11, 2011 at 9:14 PM, Michael Starks > <[email protected]> wrote: >> On 05/11/2011 12:05 PM, Jefferson, Shawn wrote: >>> >>> Hi, >>> I have OSSEC installed on Ubuntu 10.04.2 LTS 64-bit, and the syscheckd >>> process is taking a lot of CPU time, and has for the past couple of >>> days. I haven't seen this behaviour on other installations, but on three >>> of these systems that are configured similiarly. Any suggestions on >>> where to look? Rootkitcheck? >> >> Try running syscheck in debug mode with the -d argument. We might be able to >> get more information about what it is trying to scan. >> >> >
