[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[ossec-dev] BUG: Teach ossec-analysisd how to ratelimit logging



This could be a potential dos if not fixed. The disk will fill up.
Just do like syslog and say something like:
Last message repeated 50 times.

2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.
2007/08/01 19:37:55 ossec-analysisd: Invalid integrity message in the
database.



OSSEC home | Main Index | Thread Index


OSSEC project: www.ossec.net.
Mailling list information: http://www.ossec.net/en/mailing_lists.html.