On Tue, Aug 17, 2004 at 12:57:15PM +0100, Brian Morrison wrote:
> Yes, there's almost no point to having free physical memory on a
> machine, if it is freed and not claimed by something else the VM will
> remember the last use and not overwrite or swap unless something else
> needs to commit memory.

Sory - but coding that way will just lead to DoS attacks.

This is still (actually I stopped trying after 0.70 came out) an issue with
clamd. I like running daemons under softlimit to limit the potential for
DoS attacks (i.e. runaway process tries to swallow all RAM on system:
softlimit sets max memory to 50M - process hits memory, gets "out of memory"
error and exits).

I could never get clamd to run under softlimits. Looks like clamd
specifically overrides "out of memory" errors and keeps running ("out of
memory"?? Hmm, sleep, try again. "out of memory"?? Hmm, sleep, try again..).

Right now I have a couple of clamd servers running with 60M of RAM - I've
seen them sitting at over 200M before. Once they acquire memory, they never
let it go.

I don't mind it using 200M - but I don't know if *sometimes* it need xxxM.
I do know I can't have clamd taking 1Gb RAM without my system grinding to a
halt - and that'w why I want to use softlimit to stop that happening.

...and yet I can't :-(

Can clamd be made to exit on memory errors? That way daemontools can just
start it from scratch again

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to