Re: [clamav-users] clamd restart

[Arnaud Jacques / SecuriteInfo.com]

Hello,

> Javascript.ndb from Securiteinfo was causing major memory and scanning
> issues for some people.

Free version of javascript.ndb has 39861 lines
Pro version of javascript.ndb has 45511 lines.

This should be OK for 6Gb of RAM. Even 4Gb I think.

AFAIK, the problem occurs when javascript.ndb has more than 50k lines.

-- 
Best regards,

Arnaud Jacques
SecuriteInfo.com

Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286
Twitter : @SecuriteInfoCom
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] clamd restart

[Steve basford]

On 21 December 2016 11:07:42 Al Varnell  wrote:

Are you using any UNOFFICIAL signatures? Some of them have been causing 
memory issues recently for others.




Al, while some 3rd party sigs are using memory, you also got to remember the
Huge amount of sig only hashes the official sigs are adding recently in 
order to have better detection.


Javascript.ndb from Securiteinfo was causing major memory and scanning 
issues for some people.


A list of sig databases would be a starting point to diagnose issues.

I'm mobile at the moment but will check sig performance later.

Cheers,

Steve
Twitter: @sanesecurity


___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] clamd restart

[Steve basford]

Do you have a list of signatures in your clamav database folder you can list?

Cheers,

Steve
Twitter: @sanesecurity



On 21 December 2016 11:20:12 "Richard Walker - Seven Internet Ltd" 
<rich...@seveninternet.co.uk> wrote:



Hi Al

Yes I'm using unofficial signatures. I have disabled the cron for updates.
How do I safety remove the UNOFFICIAL signatures?

Thanks

Rich

-Original Message-
From: clamav-users [mailto:clamav-users-boun...@lists.clamav.net] On Behalf
Of Al Varnell
Sent: 21 December 2016 11:07
To: ClamAV users ML
Subject: Re: [clamav-users] clamd restart

Are you using any UNOFFICIAL signatures? Some of them have been causing
memory issues recently for others.

-Al-

On Wed, Dec 21, 2016 at 02:09 AM, Richard Walker - Seven Internet Ltd wrote:


Hi

I am having to restart clamd twice a day now. I can't find anything in
the mail/clamd logs other than hundreds of entries like this
1cIzSP-8u-84 malware acl condition: clamd /var/run/clamav/clamd.sock :
unable to connect to UNIX socket (/var/run/clamav/clamd.sock):
Connection refused

On some forums its saying I'm running out of memory. The server it is
installed on is running 6GB and handles about 22000+ emails a day.

Clamscan -V is showing

ClamAV 0.99.2/22749/

Thanks

Rich



---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml



___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] clamd restart

[Richard Walker - Seven Internet Ltd]

Hi Al

Yes I'm using unofficial signatures. I have disabled the cron for updates.
How do I safety remove the UNOFFICIAL signatures?

Thanks

Rich

-Original Message-
From: clamav-users [mailto:clamav-users-boun...@lists.clamav.net] On Behalf
Of Al Varnell
Sent: 21 December 2016 11:07
To: ClamAV users ML
Subject: Re: [clamav-users] clamd restart

Are you using any UNOFFICIAL signatures? Some of them have been causing
memory issues recently for others.

-Al-

On Wed, Dec 21, 2016 at 02:09 AM, Richard Walker - Seven Internet Ltd wrote:
> 
> Hi
> 
> I am having to restart clamd twice a day now. I can't find anything in 
> the mail/clamd logs other than hundreds of entries like this
> 1cIzSP-8u-84 malware acl condition: clamd /var/run/clamav/clamd.sock :
> unable to connect to UNIX socket (/var/run/clamav/clamd.sock): 
> Connection refused
> 
> On some forums its saying I'm running out of memory. The server it is 
> installed on is running 6GB and handles about 22000+ emails a day.
> 
> Clamscan -V is showing
> 
> ClamAV 0.99.2/22749/
> 
> Thanks
> 
> Rich


---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] clamd restart

[Al Varnell]

Are you using any UNOFFICIAL signatures? Some of them have been causing memory 
issues recently for others.

-Al-

On Wed, Dec 21, 2016 at 02:09 AM, Richard Walker - Seven Internet Ltd wrote:
> 
> Hi
> 
> I am having to restart clamd twice a day now. I can't find anything in the
> mail/clamd logs other than hundreds of entries like this 
> 1cIzSP-8u-84 malware acl condition: clamd /var/run/clamav/clamd.sock :
> unable to connect to UNIX socket (/var/run/clamav/clamd.sock): Connection
> refused
> 
> On some forums its saying I'm running out of memory. The server it is
> installed on is running 6GB and handles about 22000+ emails a day. 
> 
> Clamscan -V is showing 
> 
> ClamAV 0.99.2/22749/
> 
> Thanks
> 
> Rich


smime.p7s
Description: S/MIME cryptographic signature
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] clamd restart

[Richard Walker - Seven Internet Ltd]

Hi

I am having to restart clamd twice a day now. I can't find anything in the
mail/clamd logs other than hundreds of entries like this 
1cIzSP-8u-84 malware acl condition: clamd /var/run/clamav/clamd.sock :
unable to connect to UNIX socket (/var/run/clamav/clamd.sock): Connection
refused

On some forums its saying I'm running out of memory. The server it is
installed on is running 6GB and handles about 22000+ emails a day. 

Clamscan -V is showing 

ClamAV 0.99.2/22749/

Thanks

Rich


---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml