csf.pignore /home/virtfs executables

[01i]

Recently I started getting email alerts from LFD about excessive resource usage caused by my sftp server connection.

I hadn't made any changes, and put off modifying the csf.pignore file for a couple of months.

Today I checked the csf.pignore file, and there is already an entry for

exe:/usr/libexec/openssh/sftp-server

Looking at the alerts it looks like I need to add wildcarded virtfs entries to stop the alerts

Executable: /home/virtfs/tw/usr/libexec/openssh/sftp-server
Command Line: /usr/libexec/openssh/sftp-server

Is this right? LFD has echoed the command line identical to an entry in the ignore file, Shouldn't my sftp server already be excluded?

[Sergio]

Command LIne or "cmd" is not the same as Executable "exe", so, if you don't have the following line add it to csf.pignore:

cmd:/usr/libexec/openssh/sftp-server