Hello Folks,
We are running OSSEC 2.5.1
root@bobo src]# service ossec status
ossec-monitord is running...
ossec-logcollector is running...
ossec-remoted is running...
ossec-syscheckd is running...
ossec-analysisd is running...
ossec-maild: Process 31720 not used by ossec, removing ..
ossec-maild
Hi,
The fix is to find out why it's dying. You should look through your
logs to see if there is any mention of it.
If you're running linux and it segfaults there should be a message in
the logfiles about that.
If it's crashing, you can try running it in gdb.
Not sure if the fork thing is needed,