Freddie Cash wrote: > On Thursday 12 April 2007 06:53 pm, Dennis Peterson wrote: >> And just an fyi, be cautious of the MSRBL-Images file. Rechecking it >> while I was typing this shows that with it in place it will cause the >> clamd cpu to rise to 90% and stay there. At 11M it may be too big to be >> practical. > > I think that really depends on your CPU. Running 4 parallel checks of the > MSRBL-Images.hdb file (9 MB on my system since our provider has blocked > rsync for the past couple weeks) only drops the CPUs' idle % by 15 (85% > idle). > > Of course, our main mail server is a dual-Opteron @ 2 GHz with 4 GB of > RAM. YMMV. :) >
I'm running dual proc Sun Sparc systems, and the cpu usage from clamd appears to be an unhealthy kind of cpu usage. It sits at 95%, and running truss does not return anything - just an empty screen. I can't tell what it's doing, but it is definitely using the processors. Removing the MSRBL-Images file eliminates the problem. So - what is the cost? I checked the logs and found only 5 files found out of 10,000 found by SaneSecurity. I think I won't miss the MSRBL contribution. dp _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html