On Tue, Apr 20, 2004 at 01:11:40PM -0400, Mike Cathey wrote:
> ...lsof the pid and see what files it has open...then copy the files to
> somewhere else and fire them off to the develpers. :)

Nope - that won't help. I just did that - twice within 10 minutes on my
(currently) hung mail server. The first shows clamd (running just below the
softlimit memory setting - again it ran out of memory) having bunches of
library files, logfiles,etc open - plus one eml file. 10 minutes later it
hasn't got that file open but has others open...

i.e. it hasn't hung - it's now just going E.X.T.R.E.M.E.L.Y slowly... 

OK, I think I can trigger this at will at the moment. If I let clamdscan run
over my SPAM Maildir folder (32,580 msgs) - which will be full of
atrociously written MIME mail messages (if that matters), then over a few
minutes clamd climbs up to the softlimit RAM limit and then clamd hangs (or
goes slow - take your pick). Then all further clamdscan processes hang. If I
then kill the "clamdscan -r SPAM/" process, then almost immediately all the
other clamdscan processes finish (not crash!), and clamd memory usage drops
back down to around 16M.

Gah. I think I've figured out the problem. I'm running clamd under
daemontools - which means I've set "Foreground" in clamav.conf... How does
that affect the running of clamd? Does it force clamd to serialize requests
by any chance...?


-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to