On Saturday 31 January 2004 02:16 pm, Ola Thoresen wrote:
> <snip>
>
> > typically our mailrelays do run out of memory(1GB physical and 2Gb swap)
> > after a few (maybe 10 to 15) minutes with the snapshots 20040113 and
> > 20040119 under load
>
> We see this problem as well.
> On a couple of servers (Fedora Core 1, kernel 2.4.22-1.2149.nptl) with
> reasonably high load - 10 - 50 mails/second, clamd will run happily,
> using about 12 MB RAM, before it jumps to eat all available memory,
> before we encounter an oom-situation.
>
> We do not see this as often as you do - last few times has been 5
> minutes, 3 hours, 4 hours and 17 hours apart.
>
> There is nothing in the logs or anywhere to suggest what is happening.
>
> Latest version we have tried is clamav-devel-20040129.

A hearty "me too" on this. I was just going to report it as well since both my 
mail servers simultaneously died due to clamd eating all available memory. I 
saw the OOM killer had been at work, but both systems were pretty much locked 
hard. We see about 500,000 mails/day and the servers have 1GB ram each. As 
mentioned above, clamd uses 12mb usually, but every once in a while freaks 
out. This can happen a matter or hours or a few days apart. I'm using 
20040128 CVS. Thus far I haven't been able to get any useful debugging info 
beyond seeing a few thread timeout errors.

Since this SCO virus makes Clamav an absolute necessity, I've upgraded to a 
2.6 kernel (Linux), in hopes the newer OOM killer will work better and 
prevent complete nose-dives. I'm also trying a program called "monit", and in 
case anyone else wants to try this too, am using the following in monitrc:

set daemon 30
check process clamd with pidfile /var/run/clamd.pid
    start program = "/etc/init.d/clamav start"
    stop program  = "/usr/bin/killall -9 clamd"
    if failed host 127.0.0.1 port 3310 then restart
    if memory is greater than 3% then restart
    if loadavg(1min) is greater than 10.0 then restart
    alert [EMAIL PROTECTED]

-- 
Matt
Systems Administrator
Local Access Communications
360.330.5535


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to