[Aide] AIDE configuration taking too long

Christoph Wilke chris at filmkreis.tu-darmstadt.de
Mon Sep 2 13:17:27 EEST 2013


Hi,

On Sun, 1 Sep 2013 23:47:02 -1000
Mason Nakadomari <nakadoma at hawaii.edu> wrote:

> I've removed /proc /dev /sys from my scans and even cutdown on /var/spool
> and /var/log. However my scans are still taking more than 24 hours to
> complete. Any other recommended configs. The aide manual gave hints but
> nothing definite. Still having trouble completing an init. Sorry but I'm
> getting frustrated. I suspect I'm doing this wrong somehow. All the checks
> are done via a centralized server and it sshs into the desired host. Please
> advise. I'm sorry if it seems like I don't know beans. I don't know aide
> very well. Thanks.

please run with -V231 or even -V255 as recommended by Keith Constable earlier
in this thread.
For example:
aide -V231 --init
or similar.

This will help you to find the timeconsuming files.

Best Regards
Christoph Wilke

> On Aug 29, 2013 12:27 PM, "Mason Nakadomari" <nakadoma at hawaii.edu> wrote:
> 
> > I'm enacting some of your advice immediately thank you very much to the
> > both of you. I'll let you know my progress. I know I'm a rookie at this but
> > I appreciate the help.

[...]


More information about the Aide mailing list