We are monitoring a linux server with several sensors. This is a Redhet 6.6 Enterprise Server (RHEL 6.6). Within the latest weeks our server freezes up with the message "audit: backlog limit exceeded". This error appears on the console. Via remote SSH or local console only a warm reboot of the server is the one and only solution. After some research the /var/log/audit map shows us many connections from the PRTG monitoring server. Also our history is full with commands:
987 echo PAESSHSTART;cat /proc/loadavg;echo;echo PAESSHEND;exit 988 echo PAESSHSTART;/var/prtg/scriptsxml/foldermountcheck.sh ;echo;echo PAESSHEND;exit 989 echo PAESSHSTART;cat /proc/loadavg;echo;echo PAESSHEND;exit 990 echo PAESSHSTART;/var/prtg/scriptsxml/foldermountcheck.sh ;echo;echo PAESSHEND;exit 991 echo PAESSHSTART;cat /proc/loadavg;echo;echo PAESSHEND;exit 992 echo PAESSHSTART;/var/prtg/scriptsxml/foldermountcheck.sh ;echo;echo PAESSHEND;exit 993 echo PAESSHSTART;cat /proc/loadavg;echo;echo PAESSHEND;exit 994 echo PAESSHSTART;/var/prtg/scriptsxml/foldermountcheck.sh ;echo;echo PAESSHEND;exit 995 echo PAESSHSTART;cat /proc/loadavg;echo;echo PAESSHEND;exit 996 echo PAESSHSTART;/var/prtg/scriptsxml/foldermountcheck.sh ;echo;echo PAESSHEND;exit 997 echo PAESSHSTART;cat /proc/loadavg;echo;echo PAESSHEND;exit 998 echo PAESSHSTART;/var/prtg/scriptsxml/foldermountcheck.sh ;echo;echo PAESSHEND;exit 999 echo PAESSHSTART;cat /proc/loadavg;echo;echo PAESSHEND;exit 1000 echo PAESSHSTART;/var/prtg/scriptsxml/foldermountcheck.sh ;echo;echo PAESSHEND;exit
Anybody who has this problem too? How can we resolve this problem?
Add comment