Hi,
On 2/28/07, Philip <[EMAIL PROTECTED]> wrote:
Try launching a top -u clamav
you should have 1 clamd, 1 freshclam, a few spamc and multiple simscan
commands
clamd and freshclam should have the same PID while you monitor with top
This is what I get. I follow user clamav's processes in top and this
is what I see before
I have enabled any domains to be scanned with clamav:
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
20466 clamav 15 0 1624 1624 1256 S 0.0 0.1 0:00 1 freshclam
32645 clamav 25 0 23936 18M 844 S 0.0 1.8 0:02 0 clamd
After enabling clamav for one domain and sending an email with
attachment to it I see:
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
17742 clamav 25 0 47588 42M 1444 R 50.1 4.2 1:00 1 clamd
20466 clamav 15 0 1624 1624 1256 S 0.0 0.1 0:00 1 freshclam
32645 clamav 19 0 47588 42M 1444 S 0.0 4.2 0:06 1 clamd
17739 clamav 20 0 572 572 356 S 0.0 0.0 0:00 1 simscan
17741 clamav 24 0 1152 1152 920 S 0.0 0.1 0:00 1 clamdscan
the first clamd process seen by top is new and cannot been seen with ps:
# ps -ef |grep clam
clamav 20466 1 0 Feb27 ? 00:00:00 /usr/bin/freshclam -d
-p /var/run/clamav/freshclam.pid
root 32624 32603 0 00:45 pts/2 00:00:00 supervise clamd
clamav 32645 32624 0 00:45 pts/2 00:02:51 /usr/sbin/clamd
qmaill 32646 32625 0 00:45 pts/2 00:00:00 /usr/bin/multilog t
s1000000 n100 /var/log/qmail/clamd
clamav 17739 17737 0 18:07 pts/2 00:00:00 /var/qmail/bin/simscan
clamav 17741 17739 0 18:07 pts/2 00:00:00 clamdscan --stdout
root 18129 7112 0 18:10 pts/2 00:00:00 grep clam
As it's PID is +1 to the clamdscan process, one might think that it is
created by it?
Regards,
Peter
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
