On Thu, 2010-06-24 at 09:03 -0500, Bearfoot, Michael J. wrote: > I was wondering what configurations you all use to avoid high CPU > usage. Is this just an inevitable byproduct of scanning? I'm not > doing the suspscan or anything like that. But we are scanning every > hour and it makes our load go to 2 on most systems. And if there is > already CPU load it will jump even higher. > > I guess I'm just looking for advice. > And we don't want to fall back to daily because we want to catch > something ASAP. > Yes, the usage on my servers always jumps when RKH kicks in. It is due to the scanning. Obviously the usage drops back down after a while, but how long a 'while' is depends on the power of each server and what else it is doing. I run a pretty much out-of-the-box configuration for RKH, and our monitoring system will show the servers CPU usage going up and down regularly. In that respect I have gotten used to it, and the users don't seem to notice it. Obviously if the usage stays high (or low!), then it is investigated.
John. -- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 Fax: +44 (0)1752 587001 ------------------------------------------------------------------------------ ThinkGeek and WIRED's GeekDad team up for the Ultimate GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users