-- [EMAIL PROTECTED] said the following on 8/2/07 10:23 AM: > -- Mark G. Thomas said the following on 7/25/07 9:34 AM: >> Hi, >> >> I found that even on systems here handling very light volume, after >> several hours clamd (0.91.1) goes to 200%-300% CPU (4 CPU system) and system >> load to 9.0 or more. I reverted to 0.90.3 and the problem went away. > > Have to admit that we just experienced this on Solaris 10 x86 (AMD). I > killed and restarted clamd and the backup of incoming mail starting > flowing again. This is with 0.91.1. Build pretty simple: > > ./configure \ > --with-user=amavis \ > --with-group=amavis \ > --sysconfdir=/opt/clamav/etc \ > --with-dbdir=/opt/clamav/db > > That's it. Nothing fancy. Used gcc-3.4.5. > > Never had any issues with ClamAV before. In fact we've been tremendously > happy with it. Started recently using SaneSecurity sigs. Hope that > wasn't a factor. This is tied together using amavisd-new.
I don't know if this might be pertinent. For a while on one Solaris 10 (x86) box the load has been fine. Just recently the following change was made to amavisd-new: @keep_decoded_original_maps = (new_RE( qr'^MAIL$', # retain full original message for virus checking (can be slow) Just now the clamd process on that box seemed to totally lock up. I had to do a 'kill -9' to get rid of it. Commented out that '^MAIL$' line above and have restarted things. We'll see how that goes. Amos _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html