What are your clamd.conf settings?
=> that is my clamd.conf
LogSyslog yes
LocalSocket /tmp/clamd
FixStaleSocket yes
MaxThreads 50
User clamav
Foreground yes
ScanMail yes
ClamukoMaxFileSize 20M
Your hardware?
=>xeon 2.80 dual, memroy 1G, one scsi hdd
How many incoming emails/second?
=>that is a weekly data recently
Max Average Current
bits 244.8 kbits (15.9%) 2275.0 bits (0.1%) 1532.0 bits (0.1%)
bits 244.8 kbits (15.9%) 2275.0 bits (0.1%) 1532.0 bits (0.1%)
Maybe your server just got flooded with emails.
=>i don't think, now i not run clamd. uptime is 0.xx~2 or 3, max is 5
What if you scan only that file? What is the load then?
=>mm, i seen 3~4mail the same period..
i don't know, just i killed, and system load is down..
I don't see clamd in your output. Clamd is the process doing the scan,
clamdscan just gives it what to scan.
It might be that clamd is already very busy scanning other files. If
its scanning only stuff from qmail, can you get a snapshot of
/var/spool/qscan/tmp when this happens?
=> you means that same problem happened and same period
/var/spool/qscan/tmp
directory send you?
_________________________________________________________________
あのYMO 3人からのLIVE EARTH に向けてのメッセージ動画を配信中！
http://liveearth.jp.msn.com/
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
