Hi all, I'm having issues with clamav 0.96.1 where freshclam running in daemon mode is growing very large. Here are the results of ps aux on some different machines:
smtp1 (i386) : clamav 4005 2.2 18.8 394008 390868 ? Ss Jun09 88:31 freshclam --daemon smtp2 (i386) : clamav 4023 2.8 10.6 225184 221600 ? Ss Jun10 71:12 freshclam --daemon smtp3 (x86_64) : clamav 5178 1.3 20.9 862540 848008 ? Ss Jun06 115:36 freshclam --daemon smtp4 (x86_64) : clamav 3179 1.2 20.2 832916 818384 ? Ss Jun06 114:19 freshclam --daemon mail1 (i386) : clamav 3656 2.2 59.0 1228084 1224592 ? Ss Jun03 277:41 freshclam --daemon mail2 (i386) : clamav 29814 1.5 58.4 1214012 1211880 ? Ss Jun03 199:39 freshclam --daemon tethys (i386) : clamav 7693 1.7 42.3 1480760 877652 ? Ss Jun01 283:37 freshclam -d ivwm51 (x86_64) : exim 5886 0.9 32.1 2658684 2631704 ? Ss May24 246:35 freshclam --daemon ivwm52 (x86_64) : exim 24755 1.0 47.6 2637416 1932228 ? Ss May24 297:20 freshclam --daemon Am I the only one seeing this? Am I the only one who runs freshclam in daemon mode? I do have the SafeBrowsing feature turned on. In general, the longer it's running, the more it seems to grow. I started digging into this today because one other mail server, an internal one, used so much memory (like mail1 and mail2) that the kernel OOM started killing off all kinds of processes, creating some havoc for me last night. Once I figured out that it was freshclam using up so much memory, I looked at all of the servers above and restarted freshclam on each of them. Here's a config from one of the servers, they are all nearly identical: centos48[r...@smtp1 ~]# egrep '^[^#]' /etc/freshclam.conf DatabaseDirectory /var/clamav UpdateLogFile /var/log/clamav/freshclam.log LogTime yes PidFile /var/run/clamav/freshclam.pid DatabaseOwner clamav DatabaseMirror db.us.clamav.net DatabaseMirror db.local.clamav.net Checks 48 NotifyClamd /etc/clamd.conf SubmitDetectionStats /etc/clamd.conf DetectionStatsHostID OBFUSCATED DetectionStatsCountry US SafeBrowsing yes Anybody see anything wrong? Have any suspicions or hunches? What's your gut telling you? -- Regards... Todd I seek the truth...it is only persistence in self-delusion and ignorance that does harm. -- Marcus Aurealius _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
