Page 1 of 1

CXSwatch and CXS cron

Posted: 15 Nov 2013, 09:22
by sahostking
Hi,

To lower load for a webhost is running the cron job necessary.

Basically I was thinking:

1. Run CXS cronjob once a week
2. Have CXSWatch run all the time.

IS this good enough? Opinions

Re: CXSwatch and CXS cron

Posted: 16 Nov 2013, 16:48
by Achtron
You could also do a daily scan but adding --ctime [hours] option like this

Code: Select all

--ctime 25
That would only scan files changed in the intervening hours.

The documentation says this:
--ctime [hours]
If you run regular full system scans then you can use --ctime [hours] to only scan files changed in the intervening hours. This can speed up scan times dramatically. On a daily scan we would suggest using 25 hours to ensure resources are not missed.

A weekly or monthly scan should also be run without --ctime [hours] so that all files are rescanned in case of new scanning techniques and exploit signatures and fingerprints.

This option should not be used in cxswatch.sh, cxscgi.sh or cxsftp.sh