4 | | In the company, we've been deploying samhin in a client-server configuration for a client over 6 hosts, and problem is, samhain daemons eventually gets killed by kernel for eating up toomuch memory. |
5 | | After a bit of forensics with atop, i saw that samhain clients takes between 1.4 to 1.8MB of extra memory every 10 minutes. After 3 days of uptime, samhain clients reach 500MB which seems a lot to me for a HIDS. |
| 4 | In the company, we've been deploying samhin in a client-server |
| 5 | configuration for a client over 6 hosts, and problem is, samhain |
| 6 | daemons eventually gets killed by kernel for eating up too much |
| 7 | memory. |
| 8 | After a bit of forensics with atop, i saw that samhain clients |
| 9 | takes between 1.4 to 1.8MB of extra memory every 10 minutes. After |
| 10 | 3 days of uptime, samhain clients reach 500MB which seems a lot to |
| 11 | me for a HIDS. |