Hi
The pid of your clamd (user clamav) shouldnt change and be listed as
21988 (in your exemple)
as long as you dont restart it of course, and nothign else
I have fc5 and centos4.4 boxes
on very busy machines. I dont have those problems at all
Try launching a top -u clamav
you should have 1 clamd, 1 freshclam, a few spamc and multiple simscan
commands
clamd and freshclam should have the same PID while you monitor with top
Let us know
Cheers
-Philip
Peter Peltonen wrote:
This is what me and Eric found out yesterday:
If we start my toaster with clamav scanning one domain and feed it a
message with an attachment, we get a "phantom" clamd processes eating
all of my p4 2,8GHz HT CPU. Example:
Top shows:
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
24177 clamav 25 0 25020 21M 1532 R 47.9 2.1 11:03 1 clamd
22492 clamav 25 0 25020 21M 1532 R 45.3 2.1 20:54 1 clamd
Why are those processes "phantom"?`Because ps does not see them! ps
-ef says:
root 20192 20172 0 Feb27 pts/2 00:00:00 supervise clamd
qmaill 20215 20193 0 Feb27 pts/2 00:00:00 /usr/bin/multilog t
s1000000 n100 /var/log/
clamav 21988 20192 99 Feb27 pts/2 00:47:07 /usr/sbin/clamd
clamav 22491 22489 0 Feb27 pts/2 00:00:00 clamdscan --stdout
clamav 24176 24174 0 Feb27 pts/2 00:00:00 clamdscan --stdout
As you can see, no clamd processes with PIDs 24177 or 22492. Their
PIDs are +1 to the
clamdscan processes, which seem to be stuck.
If we kill one of those clamdscan processes, then the phantom
processes seem to disappear
and the other clamdscan process disappears also. Messages get delivered.
Are other people having this problem seeing this phantom process
behaviour also? And what
kind of systems are you using?
Regards,
Peter
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
