CXSwatch and CXS cron

[sahostking]

Hi,

To lower load for a webhost is running the cron job necessary.

Basically I was thinking:

1. Run CXS cronjob once a week
2. Have CXSWatch run all the time.

IS this good enough? Opinions

[Achtron]

You could also do a daily scan but adding --ctime [hours] option like this

Code: Select all

--ctime 25

That would only scan files changed in the intervening hours.

The documentation says this:

--ctime [hours]
If you run regular full system scans then you can use --ctime [hours] to only scan files changed in the intervening hours. This can speed up scan times dramatically. On a daily scan we would suggest using 25 hours to ensure resources are not missed.

A weekly or monthly scan should also be run without --ctime [hours] so that all files are rescanned in case of new scanning techniques and exploit signatures and fingerprints.

This option should not be used in cxswatch.sh, cxscgi.sh or cxsftp.sh