Yes, that worked, thanks. Testing it now. -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Daniel Cid Sent: Wednesday, May 25, 2011 6:32 AM To: [email protected] Subject: Re: [ossec-list] syscheckd high cpu usage
Or try the latest snapshot again: https://bitbucket.org/dcid/ossec-hids/get/64b1ba1a779c.tar.gz It should compile fine even without openssl support... Thanks, On Tue, May 24, 2011 at 10:56 PM, dan (ddp) <[email protected]> wrote: > Try installing the openssl development package for your distro. > > On Tue, May 24, 2011 at 6:54 PM, Jefferson, Shawn > <[email protected]> wrote: >> I get this error when trying to install this version: >> >> /usr/bin/ld: cannot find -lssl >> /usr/bin/ld: cannot find -lcrypto >> collect2: ld returned 1 exit status >> make[1]: *** [auth1] Error 1 >> make[1]: Leaving directory >> `/root/installs/dcid-ossec-hids-78e0ab251a6c/src/os_auth' >> >> >> >> -----Original Message----- >> From: [email protected] [mailto:[email protected]] On >> Behalf Of Daniel Cid >> Sent: Tuesday, May 24, 2011 2:27 PM >> To: [email protected] >> Subject: Re: [ossec-list] syscheckd high cpu usage >> >> Can you try this snapshot: >> >> https://bitbucket.org/dcid/ossec-hids/get/78e0ab251a6c.tar.gz >> >> Should have a fix for that... >> >> Thanks, >> >> On Tue, May 24, 2011 at 5:47 PM, Jefferson, Shawn >> <[email protected]> wrote: >>> Hi, >>> >>> Responding to myself here... >>> >>> The high CPU utilization issue seems to be caused by checking either /lib >>> or /lib64 on my Ubuntu 64-bit machine. This will cause the machine to lock >>> one CPU at 100% for days and days. Should I not be checking those >>> directories (maybe something about Linux I'm not aware of precludes this.)? >>> >>> -----Original Message----- >>> From: [email protected] [mailto:[email protected]] On >>> Behalf Of Jefferson, Shawn >>> Sent: Tuesday, May 17, 2011 9:06 AM >>> To: [email protected] >>> Subject: RE: [ossec-list] syscheckd high cpu usage >>> >>> Hi Daniel, >>> >>> Unfortunately the latest version that I downloaded, did not fix this >>> problem. Syscheckd still pegs the CPU at 100% for days, and doesn't stop. >>> Syscheckd -d doesn't give much detail unfortunately. Anything else I can >>> try to narrow the problem down? >>> >>> -----Original Message----- >>> From: [email protected] [mailto:[email protected]] On >>> Behalf Of Jefferson, Shawn >>> Sent: Friday, May 13, 2011 4:12 PM >>> To: [email protected] >>> Subject: RE: [ossec-list] syscheckd high cpu usage >>> >>> I have installed with the latest source from this location. The version >>> number is still 2.5.1? I want to make sure I'm using the correct source. >>> >>> It hasn't seemed to help so far, but I'll let it run for awhile longer and >>> see if it eventually stops. >>> >>> -----Original Message----- >>> From: [email protected] [mailto:[email protected]] On >>> Behalf Of Daniel Cid >>> Sent: Wednesday, May 11, 2011 6:21 PM >>> To: [email protected] >>> Subject: Re: [ossec-list] syscheckd high cpu usage >>> >>> Can you also try the latest snapshot? I fixed a bug on syscheck a >>> little while ago related to it (it was going 100% on my >>> ubuntu server as well): >>> >>> https://bitbucket.org/dcid/ossec-hids/ >>> >>> *just go on download source to get it. >>> >>> Thanks, >>> >>> On Wed, May 11, 2011 at 9:14 PM, Michael Starks >>> <[email protected]> wrote: >>>> On 05/11/2011 12:05 PM, Jefferson, Shawn wrote: >>>>> >>>>> Hi, >>>>> I have OSSEC installed on Ubuntu 10.04.2 LTS 64-bit, and the syscheckd >>>>> process is taking a lot of CPU time, and has for the past couple of >>>>> days. I haven't seen this behaviour on other installations, but on three >>>>> of these systems that are configured similiarly. Any suggestions on >>>>> where to look? Rootkitcheck? >>>> >>>> Try running syscheck in debug mode with the -d argument. We might be able >>>> to >>>> get more information about what it is trying to scan. >>>> >>>> >>> >> >
