On 3/25/04 2:26 PM, "Jesse Guardiani" <[EMAIL PROTECTED]> wrote:

> ----------- SCAN SUMMARY -----------
> Known viruses: 20702
> Scanned directories: 0
> Scanned files: 1
> Infected files: 0
> Data scanned: 57.21 MB
> I/O buffer size: 131072 bytes
> Time: 11.989 sec (0 m 11 s)
> [13:[EMAIL PROTECTED]:[~]% clamdscan test-message.txt
> /usr/home/jesse/test-message.txt: OK
> 
> ----------- SCAN SUMMARY -----------
> Infected files: 0
> Time: 89.334 sec (1 m 29 s)
> [13:[EMAIL PROTECTED]:[~]%

I still think there is a bug out there somewhere when scanning mail files.
Rarely we'll see clamd+clamdscan take quite a long time to process a mail
message.  It happens rarely, but sometimes a 4K message file can take a
minute to scan.

I can capture the message in question, but when I scan it again, it only
takes a second.  In our case it is VERY rare, on four servers running clamd
it only happened once in about 250,000 scans, but still it happens from time
to time.  The one server that it happened on the resident size of the
program was considerably larger than the others..

root    3944  0.0  4.2 22460 21652  ??  Ss   18Mar04  53:03.64
>root   98782  0.0  5.9 31240 30480  ??  Ss   18Mar04  21:17.28
root  51317  0.0  4.1 22104 21340  ??  Ss   18Mar04  21:31.03
root  20182  0.0  4.7 25032 24268  ??  Ss   18Mar04  20:48.46

I have not seen clamd go into a memory eating frenzy yet, and since the
urandom workaround/fix I have not seen any hung threads where clamd chews up
100% of the CPU.  Right now I'm just seeing some random mail files hang
clamdscan at times for ~1 minute before it lets go..

--
Robert Blayzor, BOFH
INOC, LLC
[EMAIL PROTECTED]
PGP: http://www.inoc.net/~dev/
Key fingerprint = 1E02 DABE F989 BC03 3DF5  0E93 8D02 9D0B CB1A A7B0

NOTICE: alloc: /dev/null: filesystem full




-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to