Zoran Milic wrote:
Hi,
Am I the only one with this kind of problem? Is this a bug or my
missconfiguration?
best regards, Zoran
Run strace, dtrace, truss, or what ever debugger you have to see what
the tool is doing with these messages. You said it hangs but there's no
proof yet that it is hung vs very busy working with complex documents. I
don't use clamav to de-mime messages - I have a milter that does that.
Clamd is fed a path to the extracted files. The milter does it because
it has to look at the content anyway so there's no justification for two
processes to de-mime the messages. The result is I never see high cpu
usage by clamd. But...
Yesterday a very interesting problem occurred. I got a call from a
customer who had sent a message and cc:'d himself and a few others. The
message contained a very large zip file. Since I scan mail coming and
going, the zip file got scanned several times - and bogged down the
system. Clamd was running at 62% cpu load - I'd never seen that level
before. The connection between clamd and the milter was exceeded and the
milter temp failed the message. 10 minutes later it all started over
again when the message was resent from the queue. It had looped several
times before I got the call. It's going to need more examination to
determine which safety limit failed to function.
dp
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
