[qmailtoaster] Why Is Clamd Swelling Up?

2007-11-29 Thread buffalo
Greetings,

I'm seeing clamav sitting at the top of the process table on my RHEL 4 
based toaster:

PID   USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+  COMMAND
25685 clamav16   0  155m  53m  920 S  198  1.3  68:03.72 clamd

Can anyone comment on what might be provoking this?

This is on a box-stock toaster install.

TIA,

--Duncan


-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] Why Is Clamd Swelling Up?

2007-11-29 Thread buffalo
On Thu, 29 Nov 2007, Jake Vickers wrote:

Hi Jake,

 198% CPU? Wow. Never seen that one before.
 clamav will check it's database every hour (default, changeable in the 
 config) which I've noticed will eat the CPU for 3-12 minutes depending 
 on the CPU every hour. Is it an hourly thing, or an all the time thing? 

It's an all the time thing (at least at the moment). I've killed it a 
restarted it a couple of times this morning. But once it runs for a 
a while it gets right back up there.

For example, here's a snapshot of current resource usage:

PID   USER  PR  NI %CPUTIME+  %MEM  VIRT  RES  SHR S COMMAND
32085 clamav16   0  197  99:10.65  1.1 99292  43m  932 S clamd

 Have you added any extra defs?

Nope. It's dead stock from when I built this toaster. No mods whatsoever.

This is on a Xeon 3.0 Ghz (dual core) with 4 GB RAM, running on top of 10K
RPM U320 SCA SCSI drives, running RHEL 4, with all latest updates/patches.

--Duncan


-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] Why Is Clamd Swelling Up?

2007-11-29 Thread buffalo
Also, when clamd is running the way it is, qmailctl isn't killing it 
properly. 

Here're the results of my latest qmailctl stop:

# qmailctl stat
authlib: supervise not running
clamd: up (pid 32085) 4539 seconds, want down
imap4: supervise not running
imap4-ssl: supervise not running
pop3: supervise not running
pop3-ssl: supervise not running
send: supervise not running
smtp: supervise not running
spamd: supervise not running
authlib/log: supervise not running
clamd/log: supervise not running
imap4/log: supervise not running
imap4-ssl/log: supervise not running
pop3/log: supervise not running
pop3-ssl/log: supervise not running
send/log: supervise not running
smtp/log: supervise not running
spamd/log: supervise not running

I've let this run for a bit to let it die on its own, but have had to kill 
it manually every time so far as svc -d (apparently) can't...

--Duncan



-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] Why Is Clamd Swelling Up?

2007-11-29 Thread Jake Vickers

[EMAIL PROTECTED] wrote:

On Thu, 29 Nov 2007, Jake Vickers wrote:

Hi Jake,

  

198% CPU? Wow. Never seen that one before.
clamav will check it's database every hour (default, changeable in the 
config) which I've noticed will eat the CPU for 3-12 minutes depending 
on the CPU every hour. Is it an hourly thing, or an all the time thing? 



It's an all the time thing (at least at the moment). I've killed it a 
restarted it a couple of times this morning. But once it runs for a 
a while it gets right back up there.


For example, here's a snapshot of current resource usage:

PID   USER  PR  NI %CPUTIME+  %MEM  VIRT  RES  SHR S COMMAND
32085 clamav16   0  197  99:10.65  1.1 99292  43m  932 S clamd

  


Look in your /tmp dir.  Do you have a lot of clam files hanging out in 
there?


smime.p7s
Description: S/MIME Cryptographic Signature


Re: [qmailtoaster] Why Is Clamd Swelling Up?

2007-11-29 Thread Natalio Gatti
 It's an all the time thing (at least at the moment). I've killed it a
 restarted it a couple of times this morning. But once it runs for a
 a while it gets right back up there.

 For example, here's a snapshot of current resource usage:

 PID   USER  PR  NI %CPUTIME+  %MEM  VIRT  RES  SHR S COMMAND
 32085 clamav16   0  197  99:10.65  1.1 99292  43m  932 S clamd


Which clamav version are you using? I have similar problems with
clamav-0.90.1.
They dissappear when I installed 0.91.2 (look in devel.qmailtoaster.com)


Re: [qmailtoaster] Why Is Clamd Swelling Up?

2007-11-29 Thread Natalio Gatti
On Nov 29, 2007 2:37 PM, [EMAIL PROTECTED] wrote:

 On Thu, 29 Nov 2007, Natalio Gatti wrote:

  Which clamav version are you using? I have similar problems with
  clamav-0.90.1.
  They dissappear when I installed 0.91.2 (look in devel.qmailtoaster.com)

 Looks like it's:

 clamav-toaster-0.88.3-1.3.2

 --Duncan


 So, you should update your clamav. Remember to recompile  reinstall
simscan after you install the new clamav.

Natalio.


Re: [qmailtoaster] Why Is Clamd Swelling Up?

2007-11-29 Thread buffalo
On Thu, 29 Nov 2007, Natalio Gatti wrote:

  Looks like it's:
 
  clamav-toaster-0.88.3-1.3.2
 
  --Duncan
 
 
  So, you should update your clamav. Remember to recompile  reinstall
 simscan after you install the new clamav.

OK. I've never touched any part of this install since new; full upgrade 
instructions are available on the toaster site, I assume?

Thanks,

--Duncan



-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]