Just found this suck programm using 97.4% of my processor time! :angry:
Anybody knows what that software is?
It's running in:
/bin/bash -c /usr/local/sbin/swatch >>/var/cobalt/adm.log 2>&1
/usr/local/sbin/swatch

Top:
9539 root 18 0 780 780 612 R 0 98.0 0.1 895:28 swatch

SWATCH - The Simple WATCHer and filter

Swatch is designed to monitor system activity. Swatch
requires a configuration file which contains pattern(s) to
look for and action(s) to do when each pattern is found.

WWW: http://www.stanford.edu/~atkins/swatch/

Straight from FreeBSD 4.3's ports. Might be different for Cobalts. :)

Hmm, strange. I never saw this programm running. I just found out because i where watching a spammer on our site searching for emails. I have a nice script which gives him about 4000 fake emails :D
So i did a top and found swatch! Is it save to kill the process?
What would you do? :confused:

If you don't know who is running it (is it running as root? It's running out of the sbin directory, so I would assume so), and you don't care for it, kill it. Chances are it was just a run-away process and just needed to be restarted. A lot of security programs tend to do that sometimes. :)

If it were me personally, and if I or any of my other guys started it, I'd kill it and forget about it. But that's just me. :)

it is running on my raq too!! This is the first time I see this and its been running for 300 minutes so far taking up all resources!
I rebooted my server and it was ok for a while. Today it is back again!
How do I kill it?

kill -9 0000

replace the 0000 with the pid number.

I had swatch for a while. Kept coming back when i just killed. I had to kill it ... restart the webserver and then restart httpd.conf to get rid of it.

This usually means one of your postgres databases is corrupted. Call cobalt or search the cobalt mailing lists for the fix. It only takes a couple of minutes for fix the database. Sorry but I can't find the info right now.

-Mike

it may sound stupid but how do I find the pid number?
Thanks

Originally posted by mpalamar
This usually means one of your postgres databases is corrupted. Call cobalt or search the cobalt mailing lists for the fix. It only takes a couple of minutes for fix the database. Sorry but I can't find the info right now.

-Mike

bit late, isn't it? I fixed this month ago but thx anyway.

it's the first number on the screen.

the swatch keeps coming back and crash my server.
What can I do. Every time I kill it it will return in minutes. I never had this problem before!