[Clamav-users] Long running clamscan processes...

[Tim Howell]

I've got a Linux box running qmail with SpamAssassin and ClamAV (using 
clamscan because I've had stability problems with clamdscan) to filter 
all of the mail coming into and out of our network.  The system works 
very well for the most part, but once in a while I end up with a number 
of long running clamscan processes.  At the bottom of my message I've 
posted the output of ps -A | grep clamscan right now.  I'm running 
ClamAV 0.83 and my virus signatures are up to date.  The only thing I 
can think of that may be involved here is the issue with scanning MIME 
messages that contain embedded MIME messages many levels deep.

Any ideas?  We have two main problems caused by (as far as I can tell) 
the length of time these processes run.  The first is that server 
performance drops pretty sharply.  The second is that some of my users 
receive multiple copies of messages.  I think this is because remote 
SMTP servers are timing out waiting for the messages to be scanned by 
ClamAV before they get a success response from my SMTP daemon.

Many thanks to the ClamAV team.  I really appreciate the time, energy, 
and skill put into ClamAV.

--TWH
linux2 root # ps -A | grep clamscan
 7281 ?        00:46:05 clamscan
 7981 ?        00:35:06 clamscan
 8119 ?        00:32:24 clamscan
 8204 ?        00:30:30 clamscan
 8343 ?        00:29:50 clamscan
 8439 ?        00:29:16 clamscan
 8655 ?        00:28:19 clamscan
 8755 ?        00:27:52 clamscan
 8832 ?        00:27:31 clamscan
 8971 ?        00:26:56 clamscan
 9051 ?        00:26:36 clamscan
 9330 ?        00:25:49 clamscan
 9427 ?        00:25:35 clamscan
 9669 ?        00:16:44 clamscan
 9978 ?        00:15:28 clamscan
10088 ?        00:24:05 clamscan
10141 ?        00:23:55 clamscan
10240 ?        00:23:29 clamscan
10480 ?        00:23:08 clamscan
10553 ?        00:21:54 clamscan
10583 ?        00:06:30 clamscan
10740 ?        00:22:05 clamscan
10931 ?        00:17:17 clamscan
10992 ?        00:17:02 clamscan
10997 ?        00:21:32 clamscan
11177 ?        00:20:52 clamscan
11257 ?        00:20:36 clamscan
11357 ?        00:19:54 clamscan
11388 ?        00:20:02 clamscan
11646 ?        00:19:33 clamscan
11861 ?        00:10:08 clamscan
11877 ?        00:19:06 clamscan
12002 ?        00:18:39 clamscan
12419 ?        00:17:32 clamscan
12493 ?        00:17:00 clamscan
12622 ?        00:16:46 clamscan
13092 ?        00:00:03 clamscan
13117 ?        00:08:51 clamscan
13118 ?        00:16:04 clamscan
13214 ?        00:00:02 clamscan
13443 ?        00:11:50 clamscan
13593 ?        00:00:02 clamscan
14867 ?        00:00:01 clamscan
14924 ?        00:00:01 clamscan
14951 ?        00:00:01 clamscan
15276 ?        00:00:01 clamscan
15403 ?        00:09:49 clamscan
15924 ?        00:00:00 clamscan
15927 ?        00:08:25 clamscan
16006 ?        00:00:00 clamscan
16010 ?        00:08:07 clamscan
16780 ?        00:03:46 clamscan
16830 ?        00:00:01 clamscan
17096 ?        00:00:00 clamscan
17583 ?        00:00:01 clamscan
17682 ?        00:03:38 clamscan
17703 ?        00:00:00 clamscan
17976 ?        00:00:01 clamscan
18045 ?        00:00:00 clamscan
18096 ?        00:02:21 clamscan
18175 ?        00:00:00 clamscan
18195 ?        00:01:52 clamscan
18363 ?        00:00:00 clamscan
18479 ?        00:00:00 clamscan
19112 ?        00:00:00 clamscan
19116 ?        00:00:00 clamscan
19130 ?        00:00:00 clamscan
19173 ?        00:00:00 clamscan
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html