2020/04/01 12:54:01 ossec-maild [dns]: ERROR: connect() failed. 2020/04/01 12:54:01 ossec-maild: ERROR: DNS failure for smtpserver 2020/04/01 12:54:01 ossec-maild: ERROR: No socket. 2020/04/01 12:54:27 ossec-maild(1261): ERROR: Waiting for child process. ( status: 256). 2020/04/01 12:54:27 ossec-maild(1223): ERROR: Error Sending email to mail. DOMAIN.com. (smtp server) 2020/04/01 12:58:02 ossec-maild: DEBUG: Running OS_Sendmail() 2020/04/01 12:59:06 ossec-maild [dns]: ERROR: connect() failed. 2020/04/01 12:59:06 ossec-maild: ERROR: DNS failure for smtpserver 2020/04/01 12:59:06 ossec-maild: ERROR: No socket.
Not sure if it was my late night fat fingers but somehow smtp.DOMAIN.com became mail.DOMAIN.com. Changed it back to smtp.DOMAIN.com, restarted OSSEC and the CPU seems to be back to its normal utilization levels. Thanks for the nudge to look at the logs. Was feeling a little lazy after what seemed like a never ending day. Stay Safe. On Wednesday, April 1, 2020 at 1:16:25 PM UTC-4, dan (ddpbsd) wrote: > On Wed, Apr 1, 2020 at 12:58 PM SHADO <smar...@gmail.com <javascript:>> > wrote: > > > > Hi! > > > > Did a new install on Ubuntu 18.04 LTS and ossec-Maild is hogging the > CPU. > > > > > > ossecm PID 1 78 Mar31 ? 07:34:06 > /var/ossec/bin/ossec-maild > > > > > > PID USER PRI NI VIRT RES SHR S CPU% MEM% TIME+ > Command > > > > PID ossecm 20 0 24756 2768 2512 R 96.0 0.0 7h38:20 > /var/ossec/bin/ossec-maild > > > > > > > > > > Have stopped and restart. > > > > > > Have rebooted. > > > > > > CPU is low until ossec-maild kicks off. > > > > > > Which version of OSSEC? > Anything in the ossec.log on the server? > > > > > > Suggestions? > > > > > > Regards > > > > SHADO > > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to ossec...@googlegroups.com <javascript:>. > > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/460a4b27-be7c-4c84-af3a-e1eaed037372%40googlegroups.com. > > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/a4bff135-626a-4563-9db8-d2d16cd995bd%40googlegroups.com.
