Edited /etc/csf/csf.conf, set PT_USERTIME = 0.
csf -r
service lfd restart
Still getting alerts.
Did a search to see if there was another csf directory on the system, like this one wasn't actually the one that was running, but didn't find anything.
Search found 3 matches
- 27 Mar 2017, 19:53
- Forum: General Discussion (csf)
- Topic: lfd not reading csf.pignore file
- Replies: 2
- Views: 3460
- 27 Mar 2017, 18:33
- Forum: General Discussion (csf)
- Topic: lfd not reading csf.pignore file
- Replies: 2
- Views: 3460
lfd not reading csf.pignore file
The server admin address gets the following alerts about once a minute: Time: Mon Mar 27 13:19:19 2017 -0400 PID: 3696 (Parent PID:1399) Account: grais40 Uptime: 88 seconds Executable: /usr/local/cpanel/3rdparty/perl/524/bin/perl Command Line (often faked in exploits): cpdavd (CalDAV/CardDAV) - auth...
- 22 Mar 2017, 22:11
- Forum: General Discussion (csf)
- Topic: disable or change definition: suspicious process and excessive resource
- Replies: 2
- Views: 3712
disable or change definition: suspicious process and excessive resource
Hi, I really like the CSF tool but am getting lots of alerts for "suspicious process" and "excessive resource usage". These are for processes I know about and am ok with the resource usage. I've got them filtered to go into a special mail folder, but the constant alerting obscure...