Environment
- CB Resonse Linux Sensor: All Versions
Symptoms
CPU usage increases after installing the Linux Sensor on a NAS mounted file system.
Cause
This is a known issue with the Response driver.
Resolution
The following steps can be used as a workaround:
- Stop the daemon:
service cbdaemon stop
service cbdaemon status
- Unload the driver:
lsmod | grep cbsensor
modprobe -r cbsensor
modprobe -r cbsensor (must execute this twice)
lsmod | grep cbsensor
- Install gdb:
yum install gdb
- Modify the module:
cp /lib/modules/`uname -r`/kernel/lib/cbsensor.ko /lib/modules/`uname -r`/kernel/lib/cbsensor.ko.ORIG
gdb -write /lib/modules/`uname -r`/kernel/lib/cbsensor.ko
(gdb) p /x g_enableHooks $1 = -1
(gdb) set {int}&g_enableHooks = 0xFFFFFFBF
(gdb) p /x g_enableHooks
(gdb) q
- Reload module and restart daemon:
service cbdaemon start
Additional Notes
While this is a known issue, there is no current timeline of when this will be fully addressed.
Confirm the cbdaemon service has started:
1. service cbdaemon status
2. lsmod | grep cbsensor
