Hi Peter
32645 is the only pid you should see
did you by any chance try to rebuild the rpm ?
Yes Pentium D, Core Duo and Xenon 5130 machines all with smp kernels
What's your distrib Peter (sorry if you already mentioned it :))
Peter Peltonen wrote:
On 2/28/07, Peter Peltonen <[EMAIL PROTECTED]> wrote:
After enabling clamav for one domain and sending an email with
attachment to it I see:
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
17742 clamav 25 0 47588 42M 1444 R 50.1 4.2 1:00 1 clamd
20466 clamav 15 0 1624 1624 1256 S 0.0 0.1 0:00 1
freshclam
32645 clamav 19 0 47588 42M 1444 S 0.0 4.2 0:06 1 clamd
17739 clamav 20 0 572 572 356 S 0.0 0.0 0:00 1
simscan
17741 clamav 24 0 1152 1152 920 S 0.0 0.1 0:00 1
clamdscan
I enabled the PPID field in top and saw that the parent for the 17742
process was 32624, which was:
# ps -ef |grep 32624
root 32624 32603 0 00:45 pts/2 00:00:00 supervise clamd
clamav 32645 32624 1 00:45 pts/2 00:21:01 /usr/sbin/clamd
Now I noticed that I had another "phantom" clamd process with PID
19309 (PPID being also
32624). Together they ate 100 % of my cpu. This also happened
yesterday: the phantom processes seem to work in pairs, probably due
to the hyperthreaded nature of my CPU.
When the other is killed the other disappears also:
I killed 19309 which apparently terminated 17742 too (at least it
disappeared from top) and I got my emails delivered. In double (which
also happened yesterday).
So supervise is doing something funny with clamav...
BTW Philip, are those qmailtoasters of yours
multiprocessor/hyperthreaded/multicore systems?
Peter
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
