I recently installed ossec on my fresh CentOS 7 machine and now execd consumes all resources on one core every now and then (at least once a day most times sooner). Could this be a problem with firewalld that is included (and enabled by default) with RHEL7? Don't see much in the logs but I did notice blocked hosts are cleared from /etc/hosts.deny but not always from iptables, which leads me to the former question.
So far all I can do is "killl -9 `pidoff ossec-execd`; systemctl restart ossec-hids.service" regards, Jeroen Beerstra -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
