Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a Linux server running on a VPS, where I'm trying to utilize aide to detect any issues. However, the nightly aide run uses up all of my available memory and swap (512MB RAM / 384MB SWAP).

I've tried adding a script to /etc/cron.daily that would stop/start services using a lot of memory (apache2, mysql) during the aide run. Unfortunately, it seems like aide continued to use every available byte (including the space freed up from apache2 and mysql).

Here's a graph from munin showing what happens when aide runs:

the graph
Note the spike of memory usage, well into swap, when aide runs

Any suggestions on tuning aide to not use so much memory, or is there an alternative to aide that doesn't behave this way?

share|improve this question

closed as too localized by RolandiXor, Eric Carvalho, Mik, Flimm, Ringtail Jan 12 '13 at 0:29

This question is unlikely to help any future visitors; it is only relevant to a small geographic area, a specific moment in time, or an extraordinarily narrow situation that is not generally applicable to the worldwide audience of the internet. For help making this question more broadly applicable, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

Are you still seeking an answer to this question? – RolandiXor Mar 30 '12 at 16:26
Probably related to the number of files you are scanning/monitoring. Could you share your aide.conf so we can determine what is being monitored. I have seen this when monitoring large files. – Justin Andrusk Apr 10 '12 at 20:17
I'll have to grab my backup when I have a chance. I've since moved to a hosting service that allows multiple domains on a single host account, so the VPS mentioned above is no more... – Jason Mock Apr 19 '12 at 13:11
This question appears to be abandoned and unanswered, could you perhaps add more detail to your question? If this question no longer applies then you can either delete it or answer it yourself if you've solved the problem. Thanks! – RolandiXor Jan 11 '13 at 7:29

Browse other questions tagged or ask your own question.