#1  
Old 18th July 2009, 13:06
beryl beryl is offline
Junior Member
 
Join Date: May 2007
Posts: 18
Thanks: 0
Thanked 0 Times in 0 Posts
Default Rkhunter 100% CPU :-(

Hello,

How can i set Rkhunter to run less often or disable it, it runs for 10 minutes every hour consuming 100% CPU.
Reply With Quote
Sponsored Links
  #2  
Old 18th July 2009, 19:49
thaibinhtt thaibinhtt is offline
Junior Member
 
Join Date: Feb 2009
Posts: 10
Thanks: 7
Thanked 0 Times in 0 Posts
Default

Yes, I caught the same problem. Who anybody can resolve it ?
__________________
Providing Hosting and System solutions in Viet Nam
[Website]http://www.uranus.com.vn
[Email]binhndt@uranus.com.vn

Last edited by thaibinhtt; 18th July 2009 at 19:52.
Reply With Quote
  #3  
Old 19th July 2009, 12:59
dzudzu dzudzu is offline
Member
 
Join Date: Jun 2009
Location: Serbia
Posts: 64
Thanks: 1
Thanked 6 Times in 6 Posts
Default

i am also interested in where can i modify all the jobs ispconfig runs?

Also i'm wondering where is that writen, i followed a crontab and jobs that are there to be executed but didn't quite manage to get in track what jobs are done and with what commands so can we have some light on this
__________________
EonTek.rs - System Engineering

dzudzu
Reply With Quote
  #4  
Old 19th July 2009, 13:06
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,433
Thanks: 813
Thanked 5,209 Times in 4,085 Posts
Default

In the next version of ISPConfig rkhunter will run only once a day, this has been fixed in svn a few weeks ago.

Quote:
Also i'm wondering where is that writen, i followed a crontab and jobs that are there to be executed but didn't quite manage to get in track what jobs are done and with what commands so can we have some light on this
Take a look at the monitor module, all monitoring actions are executed from there. The monitor module is in /usr/local/ispconfig/server/mods-available/
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 19th July 2009, 13:14
beryl beryl is offline
Junior Member
 
Join Date: May 2007
Posts: 18
Thanks: 0
Thanked 0 Times in 0 Posts
Default

How do i change it to run daily, without breaking the production server?
Reply With Quote
  #6  
Old 19th July 2009, 14:03
dzudzu dzudzu is offline
Member
 
Join Date: Jun 2009
Location: Serbia
Posts: 64
Thanks: 1
Thanked 6 Times in 6 Posts
Default

hmmm

/*
* This monitoring is expensive, so do it only once a hour
*/
$min = date('i');
$hour = date('H');
if ($min != 0 && $hour != 23) return;

so it says if it is not 0 minutes and not 23 hour not to run rkhunter...

well i have modifies the line

$data['output'] = shell_exec('rkhunter --update --checkall --nocolors --skip-keypress');

to just

$data['output'] = ''; so it doesn't run rkhunter at all, but my question is now?

why above IF doesn't work or am i reading the code wrong?
__________________
EonTek.rs - System Engineering

dzudzu
Reply With Quote
  #7  
Old 19th July 2009, 14:09
dzudzu dzudzu is offline
Member
 
Join Date: Jun 2009
Location: Serbia
Posts: 64
Thanks: 1
Thanked 6 Times in 6 Posts
Default

another thing as a quick fix i comeup with then is after u remove runing the rkhunter like that u can enable it with crontab so with

crontab -e

and add line from the php conf file

30 09 * * * rkhunter --update --checkall --nocolors --skip-keypress &> /dev/null

so it will run only at 09:30 everyday

think this is good
__________________
EonTek.rs - System Engineering

dzudzu
Reply With Quote
  #8  
Old 19th July 2009, 14:23
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,433
Thanks: 813
Thanked 5,209 Times in 4,085 Posts
Default

Thst not a fix at all. All monitoring in ispconfig is done by the monitoring module, if you run rkhunter externally you will not get an result anymore and it renders the monitoring completely useless.

The above if stement is working fine on my systems, rkhunter is just run once a day. If it is run more often on your server, then there might be another software starting it.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #9  
Old 19th July 2009, 16:18
dzudzu dzudzu is offline
Member
 
Join Date: Jun 2009
Location: Serbia
Posts: 64
Thanks: 1
Thanked 6 Times in 6 Posts
Default

i was just following up on topic the first user stated

Quote:
How can i set Rkhunter to run less often or disable it, it runs for 10 minutes every hour consuming 100% CPU.
and it says it's runing every hour, cos it seemed not right for the if statment not work, so i just started playing around for viable options. Ofc if u do it manualy renders the monitor ability completely but i just made up example of it. Just want to know the system better

I got ispconfig 3 on my centos 5.3 and works like a charm and thanks for making it
__________________
EonTek.rs - System Engineering

dzudzu
Reply With Quote
  #10  
Old 19th July 2009, 16:25
beryl beryl is offline
Junior Member
 
Join Date: May 2007
Posts: 18
Thanks: 0
Thanked 0 Times in 0 Posts
 
Default

The server is set up exactly as perfect setup for debian lenny, so there is no other software starting it.

Still rkhunter runs ever hour or so.

I will try dzudzu´s fix, thank you for posting it!
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
KVM Server CPU use 100% planet_fox Server Operation 7 3rd May 2011 16:22
ISPConfig 3.0.0.8 RC1 - Admin Area, CPU INFO gjcomputer Developers' Forum 2 10th January 2009 00:38
Squid Proxy Caching on Linux obzerver Installation/Configuration 4 13th August 2008 19:51
Server sometimes (1 or 2 hrs) down :/ edge Server Operation 25 31st July 2006 13:44
Just installed Debian.. I'm not happy edge Installation/Configuration 10 18th June 2006 22:23


All times are GMT +2. The time now is 12:11.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.