On 3/15/07, Christian Kuehn <[EMAIL PROTECTED]> wrote:
Hi,
ClamAV 0.90.1 on Solaris 10/i86 (Generic_118855-19)
We found several entries like this:
Thu Mar 15 04:59:45 2007 -> Client disconnected
Thu Mar 15 04:59:50 2007 -> Client disconnected
Thu Mar 15 05:00:00 2007 -> Client disconnected
Thu Mar 15 05:00:02 2007 -> Client disconnected
Thu Mar 15 05:00:03 2007 -> Client disconnected
Thu Mar 15 05:00:13 2007 -> Client disconnected
Thu Mar 15 05:00:14 2007 -> Client disconnected
and
Thu Mar 15 04:53:26 2007 -> ERROR: accept() failed: Too many open files
Thu Mar 15 04:53:26 2007 -> ERROR: accept() failed: Too many open files
Thu Mar 15 04:53:26 2007 -> ERROR: accept() failed: Too many open files
Thu Mar 15 04:53:26 2007 -> ERROR: accept() failed: Too many open files
How many log entries like this do you have? 10s, 1000s?
the clamd need 90% cpu and the load comes over 30 (and higher).
Any ideas?
What are the files open when this happens? [Use pfiles(1), or look in
/proc/<pid>/fd]
Are they sockets, or temporary files opened by clamd?
Can you get the files that you were scanning when this happens? If so,
is the problem reproducible scanning those files again?
Please open bugzilla entry if you got more info.
Best regards,
--Edwin
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
