-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
jean-paul natola schrieb: > > >>> >>> jean-paul natola wrote: >>> >>>> Hi everyone, >>> >>> Hello. >>> >>>> I'm having a bit of a problem with clamav on my server- >>>> I'm getting about 3 to 4 of these per hour- and I dont know why its >>>> happening >>>> [...] >>> what have you already tried to detect/eliminate the problem, and >>> anything else >>> you consider relevant. >> > > I'm running; > Freebsd 5.4 clamav 88.7 SA 3.1.7 > > In the paniclog /var/log/exim/paniclog is where I 'm seeing these entries > I did check the 'messages' log and there are no entries- > > It seems that clamav is timing out when it is attempting to scan large > messages YES. I can confirm this behavior of clamscan. Emails with sizes of 15 MB, 20 MB, 25 MB ... timed out on a regular basis. I doubled the timeout values in amavis-milter from 10 to 20 minutes to work around this problem. Where my other 2 virus scanners take about 5-6 seconds to scan the email, clamscan needs up to 700+ seconds to scan one email. If emails of normal size are to scan, there are no differences in time between the 3 scanners. I tried clamav 0.90rc2 and the scantime of clamav minimized to 30-50 seconds. > yesterday I saw clams cpu and mem start to skyrocket, at that moment i > looked at what message was being scanned and it was an 18meg file which > subsequently caused another timeout error > > My hardware is the following- > 550 mhz pentium 320 megs or ram [...] > I will now look for- and examine the clam log > > someone suggested to tell exim not to call clam on large messages (over > 5 megs for example) > as virus are always small to spread quicker - Best regards, Walter. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFhnzvkoswlxeNK+wRAoeWAJ49una88bE4L8hIK92lFMdw1qy+4wCeMyCy xlsfuAww5ErUSDlB+w/3Y50= =ffBL -----END PGP SIGNATURE----- _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
