We are testing OSSIM in a lab environment prior to deploying on our network. Total number of host is about 25. The issue we are seeing is that over a 24 hour period OSSIM dies. It is unreachable through the web interface and also we are unable to use the command prompt.

In order to get everything back working, we have to hard reset the box.

We have installed this on different boxes (to rule out hardware) with the same results.

We have also re-installed OSSIM several times.

There is not a tremendous amount of alerts being recorded, approximately 600 per day.

Each morning when we come in though, we have to reboot it.

We would really like to know how to correct this issue so that we may use the full abilities of it in a production environment.

Thanks,

David Brockstedt