hi!
I have a problem with latest clamav 0.91.1 on my FreeBSD server
6.2-p5.
I run clamav from fresh ports, several times rebuild and reinstall,
check all configs, and it anyway eat about 95% CPU after 1..1,5
hours. My mail server runs on latest exim from ports.
Please, help me to make clamd stable.
My hardware is:
FreeBSD 6.2-RELEASE-p5 #2: Thu Jun 28 11:10:38 MSD 2007
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/hyp.ru
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Xeon(TM) CPU 2.80GHz (2822.51-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0xf4a Stepping = 10
Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
Features2=0x641d<SSE3,RSVD2,MON,DS_CPL,CNTX-ID,CX16,<b14>>
AMD Features=0x20100000<NX,LM>
AMD Features2=0x1<LAHF>
Logical CPUs per core: 2
real memory = 1073152000 (1023 MB)
avail memory = 1045209088 (996 MB)
ACPI APIC Table: <PTLTD APIC >
FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
cpu0 (BSP): APIC ID: 0
cpu1 (AP): APIC ID: 1
ioapic0 <Version 2.0> irqs 0-23 on motherboard
ioapic1 <Version 2.0> irqs 24-47 on motherboard
ioapic2 <Version 2.0> irqs 48-71 on motherboard
Clamd version:
12:47:21 [EMAIL PROTECTED] $ pkg_info |grep clamav
clamav-0.91.1 Command line virus scanner written entirely in C
12:47:23 [EMAIL PROTECTED] $
clamd.conf:
12:48:07 [EMAIL PROTECTED] $ grep -vE "(^#|^$)" /usr/local/etc/clamd.conf
LogFile /var/log/clamav/clamd.log
LogFileUnlock yes
LogClean yes
LogSyslog yes
LogVerbose yes
PidFile /var/run/clamav/clamd.pid
TemporaryDirectory /tmp
DatabaseDirectory /var/db/clamav
FixStaleSocket yes
TCPSocket 3310
TCPAddr 127.0.0.1
StreamMaxLength 12M
User clamav
AllowSupplementaryGroups yes
Debug yes
LeaveTemporaryFiles no
ScanMail yes
ScanHTML yes
ArchiveMaxFileSize 12M
12:48:07 [EMAIL PROTECTED] $
exim configuration:
12:48:55 [EMAIL PROTECTED] $ grep -2 -E "(av_|malw)"
/usr/local/etc/exim/configure
smtp_banner = $smtp_active_hostname esmtp ready $tod_full
#av_scanner = clamd:127.0.0.1 3310
spamd_address = 127.0.0.1 783
--
message = MIME broken ($demime_reason)
# deny malware = */defer_ok
# condition = ${if < {$message_size}{MAX_CLAM_SCAN_SIZE}}
# message = Rejected. This message contains a virus
($malware_name).
# log_message = Rejected. This message contains a virus
($malware_name).
accept
12:48:59 [EMAIL PROTECTED] $
libraries:
12:49:44 [EMAIL PROTECTED] $ ldd /usr/local/sbin/clamd
/usr/local/sbin/clamd:
libclamav.so.2 => /usr/local/lib/libclamav.so.2 (0x28085000)
libiconv.so.3 => /usr/local/lib/libiconv.so.3 (0x2810c000)
libz.so.3 => /lib/libz.so.3 (0x281f9000)
libbz2.so.2 => /usr/lib/libbz2.so.2 (0x2820a000)
libgmp.so.7 => /usr/local/lib/libgmp.so.7 (0x2821b000)
libthr.so.2 => /usr/lib/libthr.so.2 (0x28249000)
libc.so.6 => /lib/libc.so.6 (0x2825b000)
12:49:50 [EMAIL PROTECTED] $ ldd /usr/local/lib/libclamav.so.2
/usr/local/lib/libclamav.so.2:
libiconv.so.3 => /usr/local/lib/libiconv.so.3 (0x281ea000)
libz.so.3 => /lib/libz.so.3 (0x282d7000)
libbz2.so.2 => /usr/lib/libbz2.so.2 (0x282e8000)
libgmp.so.7 => /usr/local/lib/libgmp.so.7 (0x282f9000)
libthr.so.2 => /usr/lib/libthr.so.2 (0x28327000)
12:49:54 [EMAIL PROTECTED] $
port build options:
12:50:17 [EMAIL PROTECTED] $ cat /var/db/ports/clamav/options
# This file is auto-generated by 'make config'.
# No user-servicable parts inside!
# Options for clamav-0.91.1
_OPTIONS_READ=clamav-0.91.1
WITH_ARC=true
WITH_ARJ=true
WITH_LHA=true
WITHOUT_MILTER=true
WITHOUT_LDAP=true
WITHOUT_STDERR=true
WITHOUT_EXPERIMENTAL=true
12:50:18 [EMAIL PROTECTED] $
CPU hungry clamd:
11:36:11 [EMAIL PROTECTED] $ ps axuH|grep clamd|grep -v grep
clamav 40544 94,7 3,7 40736 38776 ?? Rs 10:04 12:06,64
/usr/local/sbin/clamd
clamav 40544 0,0 3,7 40736 38776 ?? Is 10:04 12:06,64
/usr/local/sbin/clamd
11:36:14 [EMAIL PROTECTED] $
thanks.
--
Oleksandr Lystopad
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
