Atomicorp • ossec-syscheckd for 836 hours

Page 1 of 1

ossec-syscheckd for 836 hours

Posted: Fri Oct 07, 2011 11:34 pm

by premierhosting

Code: Select all

top -c

 4218 root      20   0 21336  17m  572 R 99.6  0.4 836:25.35 /var/ossec/bin/ossec-syscheckd                                          
 4202 ossec     20   0  8484 2820  632 S  6.2  0.1  45:36.12 /var/ossec/bin/ossec-analysisd

Pushing load up for quite a while. 99-100% CPU usage. Any idea why this would happen? Nothing in ossec logs to indicate a reason.

Re: ossec-syscheckd for 836 hours

Posted: Sat Oct 08, 2011 4:20 am

by breun

Check out this ASL FAQ entry: ossec-syscheck is using a lot of CPU.