Re: LOGROTATE problems blocking the system

["jdow" <jdow earthlink net>]

From: "LULANI Olsi" <olulani amc al>

> I have a completely updated enigma system running without reboot for the
> last two months. Lately the logrotate process seems to have gone mad. A
week
> ago it was consuming 99% of the CPU. I restarted it and the situation was
> fixed. During the week the system did not get supervision. Today I had to
> restart it (hard reset) because even the the prompt from the login
username
> to the password asking prompt got blocked. The CPU load again rose to 99%
> from logrotate but the system was responding this time.
> Nothing unusual was recorded in the logs. Is there any solution to this
> problem short of reinstalling the system. The system function as a router
so
> the downtime has to be minimal.

What does "df /var" report?

LogRotate uses a configuration file that looks for files in
/etc/logrotate.d. Check to see if one of them looks "odd" as
if it were changed or corrupted.

Try manually running logrotate in debug mode, "logrotate -d".
This may show you where it is going poopydrawers.

On a hunch find and run "chkrootkit" to see if the system has
been hacked.

{^_^}