Hi all ,
i came cross this issue:
Files hidden inside directory
'/var/lib/docker/overlay2/xxxxxxxxxxxxx/merged/root/go/src'. Link count
does not match number of files (4,1).
in many servers. However, when i checked ossec configuration file in those
servers, there are no /var/lib/docker/overlay2 directory wrote in
configuration file.
<https://lh3.googleusercontent.com/-wveAonIGCtw/WnfeGp0pCHI/AAAAAAAAA9Y/nt46S0zXhw001hQM4fUl_wXai2Ez0E8OwCLcBGAs/s1600/WX20180205-123054.png>
what i guess, since one of those server cluster, i need to monitory fire
integrity of this server under /var/lib/docker/overlay2/xxxxxxxxxxxxx.
However the file name is to complicated, so what i did is i generated
number to link to those complicated directory. I am not really sure , is
this a problem cause my above alert come out in other servers. (PS: those
servers connect to same ossec manager server.)
<https://lh3.googleusercontent.com/-ahwWqK5qEEM/WnfdX7PBVNI/AAAAAAAAA9Q/TTOauaTPZDkW2DdySwc0are_jXd6-ryXwCLcBGAs/s1600/WX20180205-122744.png>
<https://lh3.googleusercontent.com/-IHsCFwpTk28/WnfeZ2N2III/AAAAAAAAA9c/QofaCisHoFcrAL21ZR9tKtoqV-50hysLQCLcBGAs/s1600/WX20180205-123216.png>
thank you for helping guys. urgent now
best regards,
kaiwen
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
