I just had a report from one of my sysadmins of a similar problem under FreeBSD.
The load was up around 40, almost all of it spent in interrupts, all caused by clamav. We were using the libmap.conf trick that had prevented bad behavior under 0.9. It's the first time the trouble has occurred on any of our scanners, but we just upgraded them two days ago. On Jul 25, 2007, at 10:34 AM, Mark G. Thomas wrote: > Hi, > > I found that even on systems here handling very light volume, after > several hours clamd (0.91.1) goes to 200%-300% CPU (4 CPU system) > and system > load to 9.0 or more. I reverted to 0.90.3 and the problem went away. > > When clamd got in this state, it was still scanning, just slowly, > and I had to "kill -9" the process to get it to die. > > On Tue, Jul 17, 2007 at 09:42:05AM -0700, Tom Bombadil wrote: >> Is anybody else experience a much higher load with 0.91 compared >> to 0.90.3? >> >> I'm running clamd over TCP. The config files and build options are >> exactly the same: >> >> ./configure --sysconfdir=/opt/etc \ >> --localstatedir=/var \ >> --enable-bigstack \ >> --enable-readdir_r \ >> --with-dbdir=/var/clamav/db \ >> --prefix=/opt/$CLAMAV_VERSION > > I'm running Solaris-9 on a handful of Sun 420R 4CPU 4GB RAM systems, > with mimedefang and sendmail. > > ./configure --sysconfdir=/var/sendmail/etc > --with-dbdir=/var/sendmail/clamav-db > --disable-clamav > --with-user=mail > --with-group=mail > --prefix=/opt/clamav-0.91.1 > > % egrep -v '#|^$' clamd.conf > LogSyslog yes > LogFacility LOG_LOCAL6 > LogVerbose yes > PidFile /var/run/clamd.pid > DatabaseDirectory /var/sendmail/clamav-db > LocalSocket /var/spool/MIMEDefang/clamd.sock > FixStaleSocket yes > MaxConnectionQueueLength 30 > StreamMaxLength 20M > MaxThreads 10 > User mail > AllowSupplementaryGroups yes > ArchiveMaxFileSize 10M > > I take it the thing to do now is: > > Recompile with "-g" and try attaching with gdb to clamd when > this happens, and get a backtrace of _all_ threads. > > Mark > > > -- > Mark G. Thomas ([EMAIL PROTECTED]) > voice: 215-591-3695 > http://mail-cleaner.com/ > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http:// > wiki.clamav.net > http://lurker.clamav.net/list/clamav-users.html _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
