On Fri, Aug 13, 2004 at 12:14:10PM -0700, Jim Gaynor said: > FreeBSD 4.10 > ~200 users > ClamAV version devel-20040806 > clamav-milter version 0.74a > Sendmail 8.12.11 > > clamav-milter --noreject --postmaster-only --local --max-children=10 > /var/run/clamav/clmilter.sock > > I've already checked the FAQ, searched the archive, and Googled. > > Normal system load is low, less than 1.0. Normally, one clamav-milter > process is seen in a ps. Clamav-milter doesn't even make the list in > "top", with mailman and imapd processes bumping it off the screen. > However... > > In the last two days, I've twice had my system load jump to > 10.0 (to > the point where sendmail was rejecting incoming connections) due to the > max number of clamav-milter children spawning and consuming memory and CPU. > > If I kill -9 the clamav-milter processes (doesn't respond to a graceful > restart request), then restart clamav-milter, it's good to go, and > doesn't immediately try to spawn the max number of children. > > Until the next day. > > Any thoughts or pointers, as I hunt for causes to this?
Get rid of max-children. Without the argument, clamav-milter spawns as many child processes as it needs. With it, requests from sendmail get stuck waiting for an available child, and the load can easily go through the roof. If the load from unlimited milter processes is too much, try limitng the number of sendmail processes that are allowed at a time. MaxDaemonChildren or something - you'll have to double check, since it's been a little while. -- -------------------------------------------------------------------------- | Stephen Gran | Why are you so hard to ignore? | | [EMAIL PROTECTED] | | | http://www.lobefin.net/~steve | | --------------------------------------------------------------------------
pgp1wK7cKJxvw.pgp
Description: PGP signature
