id summary reporter owner description type status priority milestone component version resolution keywords cc 59 Processcheck reports large number of Fake pid soren.petersen@… rainer "My installation of samhain 2.3.3 (compiled with processcheck) reports a huge number of fake pids incidents. The email reports look something like this {{{ [2007-04-17T08:51:21+0200] server1.xxxxxxxxx.xxx CRIT : [2007-04-17T08:36:27+0200] msg= CRIT : [2007-04-17T08:36:27+0200] msg= CRIT : [2007-04-17T08:36:27+0200] msg= MARK : [2007-04-17T08:36:27+0200] msg=<---- TIMESTAMP ----> CRIT : [2007-04-17T08:41:21+0200] msg= CRIT : [2007-04-17T08:41:21+0200] msg= CRIT : [2007-04-17T08:46:21+0200] msg= MARK : [2007-04-17T08:46:22+0200] msg=<---- TIMESTAMP ----> CRIT : [2007-04-17T08:51:21+0200] msg= CRIT : [2007-04-17T08:51:21+0200] msg= }}} The system is Slackware 11.0 installation running linux kernel 2.6.19.2 on a multiprocessor/multikernel architecture. (and by the way, thanks for a GREAT piece of software)" defect closed major 2.3.4 main 2.3.3 fixed