* Dianne Skoll <d...@roaringpenguin.com>:
> Hi,
> 
> Something went badly wrong with clamd recently; it's stuck with
> hundreds/thousands of open files per process and interrupting mail flow.
> 
> When a scanning thread finishes, I see this in the strace output.
> (I ran clamdscan /etc/hosts as a test):
> 
> [pid  3707] 02:11:01 sendto(295, "/etc/hosts: OK\n", 15, 0, NULL, 0) = 15
> [pid  3707] 02:11:01 shutdown(295, SHUT_RDWR) = 0
> [pid  3707] 02:11:01 close(295)         = 0
> [pid  3707] 02:11:01 futex(0x1933c3c, 
> FUTEX_WAIT_BITSET_PRIVATE|FUTEX_CLOCK_REALTIME, 387, {1516950691, 0}, 
> ffffffff) = -1 ETIMEDOUT (Connection timed out)
> [pid  3707] 02:11:31 futex(0x1933c10, FUTEX_WAKE_PRIVATE, 1) = 0
> [pid  3707] 02:11:31 madvise(0x7fae6affe000, 8368128, MADV_DONTNEED) = 0
> [pid  3707] 02:11:31 _exit(0)           = ?
> [pid  3707] 02:11:31 +++ exited with 0 +++

clamd is leaking filedescriptors for temporary files - ls /proc/`pidof 
clamd`/fd shows a
lot of:

lrwx------ 1 root root 64 Jan 26 10:38 993 -> 
/tmp/clamav-736a3d0d2a944a0a79d465671fb754d5.tmp (deleted)
lrwx------ 1 root root 64 Jan 26 10:38 994 -> 
/tmp/clamav-59b5548fe87bc9a454486cbe37d5c89b.tmp (deleted)
lrwx------ 1 root root 64 Jan 26 10:38 995 -> 
/tmp/clamav-0e2983c3f35c37d833ea37c2867a0aba.tmp (deleted)
...

-- 
Ralf Hildebrandt                   Charite Universitätsmedizin Berlin
ralf.hildebra...@charite.de        Campus Benjamin Franklin
https://www.charite.de             Hindenburgdamm 30, 12203 Berlin
Geschäftsbereich IT, Abt. Netzwerk fon: +49-30-450.570.155

Attachment: signature.asc
Description: PGP signature

_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to