Channels
  • Erich Stoekl

    Erich Stoekl

    2 years ago
    Can anyone give me an example of a long-running osquery command?
  • zwass

    zwass

    2 years ago
    Something that consumes a lot of resources?
  • Erich Stoekl

    Erich Stoekl

    2 years ago
    something that just runs for a while
    something like a sleep
    but yes, something that uses a lot of resources would be good
  • zwass

    zwass

    2 years ago
    osquery> .timer ON
    osquery> select count(*) from processes;
    +----------+
    | count(*) |
    +----------+
    | 400      |
    +----------+
    Run Time: real 0.003 user 0.001090 sys 0.001459
    osquery> select count(*) from processes, processes;
    +----------+
    | count(*) |
    +----------+
    | 160000   |
    +----------+
    Run Time: real 0.417 user 0.137328 sys 0.279141
    osquery> select count(*) from processes, processes,processes;

    That will give you exponential growth on runtime
  • Erich Stoekl

    Erich Stoekl

    2 years ago
    nice, that worked!
    thank you
  • s

    seph

    2 years ago
    Adding a hashing will consume resources and take longer.