>From /var/log/messages Jul 30 13:11:12 <server name> kernel: ossec-maild[10096]: segfault at 0000000000000000 rip 00002add4f72322c rsp 00007fff577262e0 error 4 Jul 30 13:11:32 <server name> kernel: ossec-maild[10097]: segfault at 0000000000000000 rip 00002add4f72322c rsp 00007fff577262e0 error 4 Jul 30 16:00:04 <server name> kernel: ossec-maild[10188]: segfault at 0000000000000000 rip 00002add4f72322c rsp 00007fff577262e0 error 4 Jul 30 16:00:04 <server name> kernel: ossec-maild[10189]: segfault at 0000000000000000 rip 00002add4f72322c rsp 00007fff577262e0 error 4 Jul 30 16:00:04 <server name> kernel: ossec-maild[10190]: segfault at 0000000000000000 rip 00002add4f72322c rsp 00007fff577262e0 error 4 Jul 30 16:00:04 <server name> kernel: ossec-maild[10191]: segfault at 0000000000000000 rip 00002add4f72322c rsp 00007fff577262e0 error 4 Jul 30 16:00:04 <server name> kernel: ossec-maild[10192]: segfault at 0000000000000000 rip 00002add4f72322c rsp 00007fff577262e0 error 4 Jul 30 16:00:04 <server name> kernel: ossec-maild[10193]: segfault at 0000000000000000 rip 00002add4f72322c rsp 00007fff577262e0 error 4
Running OSSEC HIDS v2.7 on CentOS 6.4 server. No other messages relating to ossec-maild in any other log. The only change I had made was in ossec.conf, I commented out the default email address in <global > <global> <email_notification>yes</email_notification> <!-- <email_to>f...@bar.com</email_to> --> <smtp_server>baz-mailer</smtp_server> <email_from>foo...@baz.com</email_from> </global> Other than that, I made no other changes. There are alerts that meet the email thresholds at or about the time of segfaults. Any ideas? -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.