[Clamav-users] clamav use 100% CPU
Hello! When clamav check mail http://starcat.dp.ua/tmp/clamav/1EKLBH-0002g4-Ek.eml.bz2 clamd enters into an endless loop and consumes 100% CPU time. Or it just silently dies. For example: $ ps ax|fgrep clamd 59921 ?? Ss 0:01.33 /usr/local/sbin/clamd $ clamdscan 1EKLBH-0002g4-Ek.eml /usr/home/starcat/tmp/clamav/1EKLBH-0002g4-Ek.eml: OK --- SCAN SUMMARY --- Infected files: 0 Time: 33.966 sec (0 m 33 s) $ ps ax|fgrep clamd zsh: 61132 done ps ax | zsh: 61133 exit 1 fgrep clamd $ $ clamd --version ClamAV 0.87.1/1205/Wed Dec 7 16:00:48 2005 my clamd.conf: http://starcat.dp.ua/tmp/clamav/clamd.conf in logs - nothing interest. Where can be a problem? ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] clamav use 100% CPU
Ruslan Petrenko wrote: Hello! When clamav check mail http://starcat.dp.ua/tmp/clamav/1EKLBH-0002g4-Ek.eml.bz2 clamd enters into an endless loop and consumes 100% CPU time. Or it just silently dies. $ clamscan -v 1EKLBH-0002g4-Ek.eml.bz2 Scanning 1EKLBH-0002g4-Ek.eml.bz2 1EKLBH-0002g4-Ek.eml.bz2: OK --- SCAN SUMMARY --- Known viruses: 41436 Engine version: 0.87 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 14.03 MB Time: 5.259 sec (0 m 5 s) No problems here. Also next time please don't post potentially harmful files to this list. See http://www.clamav.net/bugs.html instead. Cheers, -aCaB ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] clamav use 100% CPU
aCaB wrote: $ clamscan -v 1EKLBH-0002g4-Ek.eml.bz2 Sorry i used clamscan instead of clamdscan. However works with clamd too. $ clamdscan 1EKLBH-0002g4-Ek.eml.bz2 /home/acab/1EKLBH-0002g4-Ek.eml.bz2: OK --- SCAN SUMMARY --- Infected files: 0 Time: 4.627 sec (0 m 4 s) ___ http://lurker.clamav.net/list/clamav-users.html
Re[2]: [Clamav-users] clamav use 100% CPU
Äîáðûé äåíü! When clamav check mail http://starcat.dp.ua/tmp/clamav/1EKLBH-0002g4-Ek.eml.bz2 clamd enters into an endless loop and consumes 100% CPU time. Or it just silently dies. $ clamscan -v 1EKLBH-0002g4-Ek.eml.bz2 Scanning 1EKLBH-0002g4-Ek.eml.bz2 1EKLBH-0002g4-Ek.eml.bz2: OK No problems here. please, try clamdscan. Also next time please don't post potentially harmful files to this list. See http://www.clamav.net/bugs.html instead. Thank. -- ICQ: 26352891 ___ http://lurker.clamav.net/list/clamav-users.html
Re[2]: [Clamav-users] clamav use 100% CPU
Äîáðûé äåíü! $ clamscan -v 1EKLBH-0002g4-Ek.eml.bz2 Sorry i used clamscan instead of clamdscan. However works with clamd too. in my case - after clamdscan process clamd silently dies: $ ps ax|fgrep clamd 59921 ?? Ss 0:01.33 /usr/local/sbin/clamd $ clamdscan 1EKLBH-0002g4-Ek.eml /usr/home/starcat/tmp/clamav/1EKLBH-0002g4-Ek.eml: OK --- SCAN SUMMARY --- Infected files: 0 Time: 33.966 sec (0 m 33 s) $ ps ax|fgrep clamd zsh: 61132 done ps ax | zsh: 61133 exit 1 fgrep clamd $ $ clamdscan 1EKLBH-0002g4-Ek.eml.bz2 /home/acab/1EKLBH-0002g4-Ek.eml.bz2: OK --- SCAN SUMMARY --- Infected files: 0 Time: 4.627 sec (0 m 4 s) -- ICQ: 26352891 ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] clamav use 100% CPU
On Thu, 08 Dec 2005 at 18:44:47 +0200, Ruslan Petrenko wrote: When clamav check mail [...] clamd enters into an endless loop and consumes 100% CPU time. Or it just silently dies. For example: $ ps ax|fgrep clamd 59921 ?? Ss 0:01.33 /usr/local/sbin/clamd $ clamdscan 1EKLBH-0002g4-Ek.eml /usr/home/starcat/tmp/clamav/1EKLBH-0002g4-Ek.eml: OK --- SCAN SUMMARY --- Infected files: 0 Time: 33.966 sec (0 m 33 s) $ ps ax|fgrep clamd zsh: 61132 done ps ax | zsh: 61133 exit 1 fgrep clamd $ $ clamd --version ClamAV 0.87.1/1205/Wed Dec 7 16:00:48 2005 my clamd.conf: http://starcat.dp.ua/tmp/clamav/clamd.conf in logs - nothing interest. Where can be a problem? Nothing bad with this file for me: $ clamdscan 1EKLBH-0002g4-Ek.eml /tmp/1EKLBH-0002g4-Ek.eml: OK --- SCAN SUMMARY --- Infected files: 0 Time: 11.527 sec (0 m 11 s) BTW, Fcart.zip included in the message is 3,2 MB in size, while your clamd.conf contains ArchiveMaxFileSize 1M, so clamd won't scan it. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner ___ http://lurker.clamav.net/list/clamav-users.html
Re: Re[2]: [Clamav-users] clamav use 100% CPU
On Thursday, December 8, 2005, at 05:42 pm, Ruslan Petrenko wrote: /usr/home/starcat/tmp/clamav/1EKLBH-0002g4-Ek.eml: OK Send me a copy of the email, zipped with the password 'virus' and I'll have a look into it. -Nigel ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] clamav use 100% CPU
On Thu, 08 Dec 2005 at 18:44:25 +0100, Tomasz Papszun wrote: [...] Nothing bad with this file for me: $ clamdscan 1EKLBH-0002g4-Ek.eml /tmp/1EKLBH-0002g4-Ek.eml: OK --- SCAN SUMMARY --- Infected files: 0 Time: 11.527 sec (0 m 11 s) [...] Sorry, I forgot to mention: my clamd processes did _not_ disappear while scanning that sample. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner ___ http://lurker.clamav.net/list/clamav-users.html
