Hi, On the ossec instance I have installed the remoted process runs for a short period of time, in most cases less than an hour or so, then crashes. Listed below is the debug output. Does anyone have an idea of what is going on here? Please let me know if you need any more info.
ossec version: 2.7.1 ossec server is running on CentOS debug: [root@***** bin]# gdb /var/ossec/bin/ossec-remoted GNU gdb (GDB) Red Hat Enterprise Linux (7.2-60.el6_4.1) Copyright (C) 2010 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /var/ossec/bin/ossec-remoted...done. (gdb) set follow-fork-mode child (gdb) run Starting program: /var/ossec/bin/ossec-remoted [Thread debugging using libthread_db enabled] [New process 15434] [Thread debugging using libthread_db enabled] [New process 15435] [Thread debugging using libthread_db enabled] [New process 15436] [Thread debugging using libthread_db enabled] [New Thread 0x7ffff7ddf700 (LWP 15437)] [New Thread 0x7ffff73de700 (LWP 15438)] Program received signal SIGTERM, Terminated. [Switching to Thread 0x7ffff7fef700 (LWP 15436)] 0x0000003a94e0ebd3 in recvfrom () at ../sysdeps/unix/syscall-template.S:82 82 T_PSEUDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS) (gdb) -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
